{"report_id":"1318714a-1669-474c-920c-8e32dc5edb04","version":6,"status":"done","tags":[],"date":"2026-02-24T15:43:24Z","url":{"schema":"http","addr":"bifinanceb.com","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"172.67.219.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bifinanceb.com/#/home","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"title":"Bifinance","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bifinanceb.com","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"172.67.219.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-31T15:43:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":9}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":2,"received_data":73526,"sent_data":1126,"comment":"","tags":null,"fingerprints":null},{"fqdn":"client.salesmartly.com","ip":{"addr":"108.156.60.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":491526,"first_seen":"2024-06-25T09:52:15Z","last_seen":"2026-02-21T20:44:20.140779Z","alert_count":0,"request_count":2,"received_data":95794,"sent_data":1054,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"bifinanceb.com","ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-18","domain_rank":0,"first_seen":"2025-09-08T01:15:54.429113Z","last_seen":"2026-01-26T05:25:46.159701Z","alert_count":129,"request_count":43,"received_data":13646608,"sent_data":19483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.bifinanceb.com","ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-18","domain_rank":0,"first_seen":"2025-09-08T01:15:54.427812Z","last_seen":"2026-01-05T01:28:14.637987Z","alert_count":66,"request_count":22,"received_data":97138,"sent_data":12764,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.bifinanceb.com","ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-18","domain_rank":0,"first_seen":"2025-09-08T01:15:54.431434Z","last_seen":"2026-01-05T01:28:13.893541Z","alert_count":132,"request_count":44,"received_data":987331,"sent_data":20374,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":2,"received_data":14032,"sent_data":938,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"plugin-code.salesmartly.com","ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":530835,"first_seen":"2024-12-12T08:03:04.74606Z","last_seen":"2026-02-21T20:44:20.025599Z","alert_count":0,"request_count":14,"received_data":1149610,"sent_data":6084,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2390ed36950670469ab68eaa380591e7","sha1":"711e527201d0e0be9d4712b3cda75085c70684c6","sha256":"87bfe2adc2bcdc039e5effaf223567652dee32107d68ab6e7b3a8181521106f6","sha512":"838fb858343e2465775cf494439c918b08ef5bdb02eec01c9c0f7ddae437c96548716a057dacdb9181def4aa21f5ba9009e4d63cec11e81246827e86133566fd","ssdeep":"384:dPygzNXbASlySwbgVTiB0WxjyyN1yL1hmGadeBT+SwQU:dygzxLTiGWc3LGdeBT6l","tlshash":"c792194870297cb8429e5a3315fea214307f1b852931d0a0f26ddb796f78e865177ebc","size":20685,"data":"","first_seen":"2026-02-18T21:57:56.58431Z","last_seen":"2026-04-15T20:10:01.050331Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/ac-chat.js?2.0.1770644385209","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1876b5ed96b30caadd25965563a59434","sha1":"12ea862fa74ece93342e453697caec412e67938d","sha256":"de24d01af18e56461133a28c1f19bcd3c242ea7296ff07b722ad6d6fb5dea7bb","sha512":"c371ceeb7e78575b310225f270808992b7e036490ddf13bd9f1074f30edaa9a8e5fefe87ad939184442f9876220ed9c4f76539335bc84461d622234d6ebc5c23","ssdeep":"","tlshash":"1241afab47790224c20b11f72d4650943232a01faa0a1d3c79fc60d8ffaab7555e1ff9","size":2425,"data":"","first_seen":"2024-08-19T20:18:19.588895Z","last_seen":"2026-03-19T19:46:55.449931Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/#/","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2f4f6228ec356cfac30290a0c2ad7400","sha1":"e98a42a3ba10e0f3524dd6457cb53daad565fabb","sha256":"aaee874ecba404a3149e5498db9e495132b788497bc437b6f890c300c26706c2","sha512":"7d3d014252611e860fc1e9f12c7fda69893248b4b60a9aa95698ce46ac84d500efe5c8de389d5e2487320fc77a18e535fbf4b6e1105b158beba7a85348b26dac","ssdeep":"","tlshash":"2de0abdb20b021042d700b3de6de19b0f1511273cc5c524e7874ad447ffa91583748a2","size":402,"data":"","first_seen":"2026-01-26T05:25:49.775428Z","last_seen":"2026-02-24T15:43:30.959186Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/index.c3b67a87.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a3ceb403b0fe9b80866ab36b1d75d6d","sha1":"64cdfb78c70019f722aeac69dc7ba55c09829759","sha256":"b968345fb7d8056edda869379406fd06489c550b906ad8c5eca970ac0877a858","sha512":"932870bd1659f18e04c99ab337f5de9d065d4737c0c7e4783854d01cd75c095caf9b475d99f00d9a501b4fcbe246a560f8b4a592a006f0d9c36027c925c4feef","ssdeep":"384:rZMLhlYcCG0XS/s+yucXfwnWJoUosg1xrCeRRcXF4OP2hoW4IHTGPPs:rZMLXCRC0jWWKUos+r1R6RP2hoW6PPs","tlshash":"52c23fb5f92a8978f1b78951105c3509314cffd381508693b6fc2a199b93dbc378eb2a","size":27672,"data":"","first_seen":"2026-02-24T15:43:30.926206Z","last_seen":"2026-02-24T15:43:30.926206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/charting_library/charting_library.min.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-08T05:16:21.679615Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2390ed36950670469ab68eaa380591e7","sha1":"711e527201d0e0be9d4712b3cda75085c70684c6","sha256":"87bfe2adc2bcdc039e5effaf223567652dee32107d68ab6e7b3a8181521106f6","sha512":"838fb858343e2465775cf494439c918b08ef5bdb02eec01c9c0f7ddae437c96548716a057dacdb9181def4aa21f5ba9009e4d63cec11e81246827e86133566fd","ssdeep":"384:dPygzNXbASlySwbgVTiB0WxjyyN1yL1hmGadeBT+SwQU:dygzxLTiGWc3LGdeBT6l","tlshash":"c792194870297cb8429e5a3315fea214307f1b852931d0a0f26ddb796f78e865177ebc","size":20685,"data":"","first_seen":"2026-02-18T21:57:56.58431Z","last_seen":"2026-04-15T20:10:01.050331Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/ac-chat.js?2.0.1770644385209","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1876b5ed96b30caadd25965563a59434","sha1":"12ea862fa74ece93342e453697caec412e67938d","sha256":"de24d01af18e56461133a28c1f19bcd3c242ea7296ff07b722ad6d6fb5dea7bb","sha512":"c371ceeb7e78575b310225f270808992b7e036490ddf13bd9f1074f30edaa9a8e5fefe87ad939184442f9876220ed9c4f76539335bc84461d622234d6ebc5c23","ssdeep":"","tlshash":"1241afab47790224c20b11f72d4650943232a01faa0a1d3c79fc60d8ffaab7555e1ff9","size":2425,"data":"","first_seen":"2024-08-19T20:18:19.588895Z","last_seen":"2026-03-19T19:46:55.449931Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_277806_284960_1742401785.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3a56e17463fee02cf8cc09a04f60c79","sha1":"ab2bd572160689d42b08c9497c7de63859a4987d","sha256":"d377553bcae533f39143c992ffb0c10202a33417349b000e927dfb7e563157b4","sha512":"a8cac233ba5d2ac6f674f27d84b4f3187d644a2a7065e1e22c349f398bc564485fc0002ba83d88d0ec0a0480f8dc210186bf8a4318a373f87712121465f4020d","ssdeep":"","tlshash":"0921c9471c63a4797bd5727b4b3f88ad3998a2433004cc10bc4dd4682f909e20e9eee4","size":1183,"data":"","first_seen":"2025-09-08T01:16:02.885316Z","last_seen":"2026-02-24T15:43:30.90186Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34864a5383e9af1e8dd8cc412d921cf0","sha1":"de9a1d4de9fd7ebe2ee3ed0ca5963a5e762780d9","sha256":"00a40b900489cf85492f9953ba0a2c1f528bc8c84b0f71c131e40006344abe70","sha512":"63e37f1963e55952215bff364d5484aba9c88d4ed1bc48ddb94ca6a8ae5fb8f533eb7b0fe1a0d4235f682c2c34dad637d798d0f25caf693f3f80f46090070962","ssdeep":"","tlshash":"6f11abfe292a60296303804f976b7805643250b9000a184177ccdfadbb9af7de0cfb8c","size":1048,"data":"","first_seen":"2026-02-24T15:43:30.960512Z","last_seen":"2026-02-24T15:43:30.960512Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/CommonMethod.114960bb.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c856833e2531708f2d446006311f9761","sha1":"4354eb0703575b84e93d451bb887e25af6996bae","sha256":"8b3cbf30fe1bbdd8b62f27d49be7118f49f4925dfb858acbef4ed1662ebda46b","sha512":"5f5e56bf5786e62f9c1eb0bef0e3692a6cb13276c537807f2c99341e640b17733e7abd41742551c94bc05d9f93a5e6bf337e224863664f6d27e08eee8de7e415","ssdeep":"","tlshash":"0911c0d0e48dfb2d0368df65a1248033f25d58b51f288368d0f95d657b29449b79ea30","size":871,"data":"","first_seen":"2026-02-24T15:43:30.888617Z","last_seen":"2026-02-24T15:43:30.888617Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/#/home","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34864a5383e9af1e8dd8cc412d921cf0","sha1":"de9a1d4de9fd7ebe2ee3ed0ca5963a5e762780d9","sha256":"00a40b900489cf85492f9953ba0a2c1f528bc8c84b0f71c131e40006344abe70","sha512":"63e37f1963e55952215bff364d5484aba9c88d4ed1bc48ddb94ca6a8ae5fb8f533eb7b0fe1a0d4235f682c2c34dad637d798d0f25caf693f3f80f46090070962","ssdeep":"","tlshash":"6f11abfe292a60296303804f976b7805643250b9000a184177ccdfadbb9af7de0cfb8c","size":1048,"data":"","first_seen":"2026-02-24T15:43:30.960512Z","last_seen":"2026-02-24T15:43:30.960512Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/core.esm.b4c18107.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","size":40515,"data":"","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-06-07T23:37:29.551901Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/#/home","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2f4f6228ec356cfac30290a0c2ad7400","sha1":"e98a42a3ba10e0f3524dd6457cb53daad565fabb","sha256":"aaee874ecba404a3149e5498db9e495132b788497bc437b6f890c300c26706c2","sha512":"7d3d014252611e860fc1e9f12c7fda69893248b4b60a9aa95698ce46ac84d500efe5c8de389d5e2487320fc77a18e535fbf4b6e1105b158beba7a85348b26dac","ssdeep":"","tlshash":"2de0abdb20b021042d700b3de6de19b0f1511273cc5c524e7874ad447ffa91583748a2","size":402,"data":"","first_seen":"2026-01-26T05:25:49.775428Z","last_seen":"2026-02-24T15:43:30.959186Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/ja.6f7a9185.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bf34a6741652de7786a7fe4a6bf50dc","sha1":"63d019763262d9371341b0c8330fcb8a3f466dd4","sha256":"b5e2b19e951acb114e413c60d489ba4ff97951f43f8c30b272a6050820610a74","sha512":"257f94b8c3473f1de4bc3893827efc696d3dc813837298ccb9011580a86cbbb284d9a40eb940184994c5f132893853789c5167b32ab911538df83dc24d89427e","ssdeep":"768:8V7AqNaUht1ffAGfUj3yEKaJyw0cya5g5rWpp3zHlqeZDfrh6U9sPfyxnPaXdwXT:Kfht1ffAoUj3yRTa5gi3JqeW8CHSx","tlshash":"caa3deefbc4d097f48b7469efe426a4768f05a0d1265f62f5ba8b6b23e10052534372c","size":99060,"data":"","first_seen":"2025-09-08T01:16:02.902988Z","last_seen":"2026-02-24T15:43:30.890705Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/core.esm.b4c18107.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","size":40515,"data":"","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-06-07T23:37:29.551901Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/ja.6f7a9185.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bf34a6741652de7786a7fe4a6bf50dc","sha1":"63d019763262d9371341b0c8330fcb8a3f466dd4","sha256":"b5e2b19e951acb114e413c60d489ba4ff97951f43f8c30b272a6050820610a74","sha512":"257f94b8c3473f1de4bc3893827efc696d3dc813837298ccb9011580a86cbbb284d9a40eb940184994c5f132893853789c5167b32ab911538df83dc24d89427e","ssdeep":"768:8V7AqNaUht1ffAGfUj3yEKaJyw0cya5g5rWpp3zHlqeZDfrh6U9sPfyxnPaXdwXT:Kfht1ffAoUj3yRTa5gi3JqeW8CHSx","tlshash":"caa3deefbc4d097f48b7469efe426a4768f05a0d1265f62f5ba8b6b23e10052534372c","size":99060,"data":"","first_seen":"2025-09-08T01:16:02.902988Z","last_seen":"2026-02-24T15:43:30.890705Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/CommonMethod.114960bb.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c856833e2531708f2d446006311f9761","sha1":"4354eb0703575b84e93d451bb887e25af6996bae","sha256":"8b3cbf30fe1bbdd8b62f27d49be7118f49f4925dfb858acbef4ed1662ebda46b","sha512":"5f5e56bf5786e62f9c1eb0bef0e3692a6cb13276c537807f2c99341e640b17733e7abd41742551c94bc05d9f93a5e6bf337e224863664f6d27e08eee8de7e415","ssdeep":"","tlshash":"0911c0d0e48dfb2d0368df65a1248033f25d58b51f288368d0f95d657b29449b79ea30","size":871,"data":"","first_seen":"2026-02-24T15:43:30.888617Z","last_seen":"2026-02-24T15:43:30.888617Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/charting_library/charting_library.min.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-08T05:16:21.679615Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_277806_284960_1742401785.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3a56e17463fee02cf8cc09a04f60c79","sha1":"ab2bd572160689d42b08c9497c7de63859a4987d","sha256":"d377553bcae533f39143c992ffb0c10202a33417349b000e927dfb7e563157b4","sha512":"a8cac233ba5d2ac6f674f27d84b4f3187d644a2a7065e1e22c349f398bc564485fc0002ba83d88d0ec0a0480f8dc210186bf8a4318a373f87712121465f4020d","ssdeep":"","tlshash":"0921c9471c63a4797bd5727b4b3f88ad3998a2433004cc10bc4dd4682f909e20e9eee4","size":1183,"data":"","first_seen":"2025-09-08T01:16:02.885316Z","last_seen":"2026-02-24T15:43:30.90186Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/index.c3b67a87.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a3ceb403b0fe9b80866ab36b1d75d6d","sha1":"64cdfb78c70019f722aeac69dc7ba55c09829759","sha256":"b968345fb7d8056edda869379406fd06489c550b906ad8c5eca970ac0877a858","sha512":"932870bd1659f18e04c99ab337f5de9d065d4737c0c7e4783854d01cd75c095caf9b475d99f00d9a501b4fcbe246a560f8b4a592a006f0d9c36027c925c4feef","ssdeep":"384:rZMLhlYcCG0XS/s+yucXfwnWJoUosg1xrCeRRcXF4OP2hoW4IHTGPPs:rZMLXCRC0jWWKUos+r1R6RP2hoW6PPs","tlshash":"52c23fb5f92a8978f1b78951105c3509314cffd381508693b6fc2a199b93dbc378eb2a","size":27672,"data":"","first_seen":"2026-02-24T15:43:30.926206Z","last_seen":"2026-02-24T15:43:30.926206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bifinanceb.com/platform/Bifinance/logo.png?2.0.1770644385209","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:09.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /platform/Bifinance/logo.png?2.0.1770644385209 HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 1557\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=4,i=?0\r\netag: \"6989e39e-615\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKW7ScSvaB7Sd%2FvJ6Lxc2dPGOScshC3GDFPzJQH2XbtvvmTTzC0vrfr9rLQrUDzTxMIRRgzlmU9CotF1wgwySrJTaZvHEzUb3m2HnNi5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013b3af785868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"72cab663cac200ac4517916327aa0fe7","sha1":"2a44a780605f2cf10062d591cb3ffc2e58ac817b","sha256":"9f774bdb23d7eed7bbcaf449b11d1d98b368d2b1e5373258d0004458c878c1f4","sha512":"5cfa9af476d5b47b7d7819a2afac0f5b8ad1604852c047246b6339ff0536677decf1f75356aadb995df94632a6ffe48499add0504859f69388d85263696a3054","ssdeep":"","tlshash":"0e310a5247ad25fbed0e02f929909457b5886696daffd2754b8fb3e7509121c4cc4202","first_seen":"2025-09-08T01:16:02.841821Z","last_seen":"2026-02-24T15:43:30.878303Z","times_seen":25,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/charting_library/charting_library.min.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:10.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fz6G6%2Ffiq7B7BBWs46%2BKC3fD9JGp3pXPhhCvy%2FmF3hiSTobWH3HsFlm8BD1FTZwxR9Zcf1IWgMYwRiPufGnmWy1HSyJuLRtiIpAyunYF\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 9\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e39e-2a6b\"\r\ncf-ray: 9d3013bad8565868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-08T05:16:21.679615Z","times_seen":1000,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getMt5Amount?coin=xag","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://bifinanceb.com/\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XjJEB8brRADYKij%2FX9VSEaNycbeBlZiAiuxbbA88HSPF94YkBh04ygV70TX2r7qg5L0nR%2BIvFA%2BCBB6CzhA1uI16nEsiFsD9s6ftg%2B0WpjVccg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c7f9935868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/litecoin.png?1771947792733","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/litecoin.png?1771947792733 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 34858\r\npriority: u=4,i=?0\r\nx-amz-id-2: Eb+Qak4K0JUYgosVSGTnFTypuuJkThj2xVEhKHFavioZc0N/yowSQx0azhTzi/qvcsk1b0swhSfLxRVc3S7wFZit3a8C2w9o\r\nx-amz-request-id: JBR7YWEQ6SYSZQYD\r\nlast-modified: Wed, 26 Mar 2025 12:12:21 GMT\r\netag: \"bb27c369a3aa54d9c1f8e59e1706da48\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee\r\nx-amz-meta-s3b-last-modified: 20250326T121156Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2B4CofN1MJao7wena5cYAzFI%2BrG8wltLe3oijKnVAj6EwRE%2BG1oWsKr7xZd5soGWOFBuVpz8pxL5BQqLhPCCir5Goyf15cRQD39UdSiciD%2BmMwo21Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8a9a95868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-06-06T04:02:55.293479Z","times_seen":630,"resource_available":false,"data":null}},"time_used":1511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":997,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:10.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Noto+Sans:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 24 Feb 2026 15:43:10 GMT\r\ndate: Tue, 24 Feb 2026 15:43:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b75d27687a21c4b72f4989a39e5c7264","sha1":"f6ed9fbcaec50bd8aa5e887db9a9a84163f04110","sha256":"cf3312886f57bb7a94363d780e242890d34ea132e33a55c005bc35b4343c2e56","sha512":"53fbf921dc3be172163a0bb72d7507111d8dc1d6e9af731b6f0a84d28445af5c0785e2ccd9997f5a221b6d24172c1b80eecbb09a47558134e80ff371f577a29e","ssdeep":"96:bOEbaqLOEbaCFZyOEba/OEba+OEbax3iOEbaIgOEbafJc+umOEbaTN2OpbaqLOpB:Mq8qg9x3xI/7WSqRbVox3cIO7HC","tlshash":"e1d1caa8805bc484ba434cd637df7d36ad1f61212454d27c9bfd59989cabc39433178e","first_seen":"2025-09-11T17:29:37.380652Z","last_seen":"2026-06-08T12:18:44.772547Z","times_seen":14185,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:10.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Wed, 18 Feb 2026 09:37:23 GMT\r\nx-oss-server-time: 4\r\ncontent-encoding: gzip\r\nx-oss-request-id: 69958853E702E230368F185D\r\nlast-modified: Fri, 06 Feb 2026 05:58:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10938694382152741707\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: I5DtNpUGcEaato6qOAWR5w==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: a9L4nusOoC2FeyUS32nZrHoH26FvYHRRtM0GsFq_YHsthBVd9Qhr2A==\r\nage: 540347\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20685,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20685), with no line terminators","md5":"2390ed36950670469ab68eaa380591e7","sha1":"711e527201d0e0be9d4712b3cda75085c70684c6","sha256":"87bfe2adc2bcdc039e5effaf223567652dee32107d68ab6e7b3a8181521106f6","sha512":"838fb858343e2465775cf494439c918b08ef5bdb02eec01c9c0f7ddae437c96548716a057dacdb9181def4aa21f5ba9009e4d63cec11e81246827e86133566fd","ssdeep":"384:dPygzNXbASlySwbgVTiB0WxjyyN1yL1hmGadeBT+SwQU:dygzxLTiGWc3LGdeBT6l","tlshash":"c792194870297cb8429e5a3315fea214307f1b852931d0a0f26ddb796f78e865177ebc","first_seen":"2026-02-18T21:57:56.58431Z","last_seen":"2026-04-15T20:10:01.050331Z","times_seen":332,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/platform/Bifinance/config.js?1771947791885","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:11.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /platform/Bifinance/config.js?1771947791885 HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIPMXvroigaz4ES3%2FvGtHfWkYpZZ%2FeY5qYuVskqBdLVg4DqyuSxRieD87JwQhFBsgYFHtsm9CfkiPZxQOlUALUXj%2BGLnNjkaSJXxyECT\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6989e39e-178\"\r\ncf-ray: 9d3013c359055868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"7492fe8c61a71dca7192799070871562","sha1":"4fea8078320d3b7499c8f133cc0e4857c6c1de5b","sha256":"35ccdc51188a4acc27990dd14a6c53d26b602c701a56b60ffb6ea5d5e79aadd6","sha512":"3683858ff544bf2a468d036c15f714e4ff6d5d9f26bd8e10ca75875634dc302619e0ce85ff999534995a7f4e5eeb4de465b188af95ff8b5c8305985ffaaa7aa8","ssdeep":"","tlshash":"4ae068db20b0654429300b3ee7de1ab1f1461273cc5d624e78786e44bffa90983748a2","first_seen":"2026-01-26T05:25:49.716203Z","last_seen":"2026-02-24T15:43:30.887086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/CommonMethod.114960bb.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:11.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/CommonMethod.114960bb.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bifinanceb.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:11 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7rAV7mnc5kvHEuqLL3qFlvCv3WxGoHWUMSMkn%2BplrLDx6CGM%2BElRbKgCunC2MN9H6y3DOOZJOydZG7eQ%2BMK7K209ytqbHVaselJB6Sy\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e3a1-367\"\r\ncf-ray: 9d3013c3f91e5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (870)","md5":"c856833e2531708f2d446006311f9761","sha1":"4354eb0703575b84e93d451bb887e25af6996bae","sha256":"8b3cbf30fe1bbdd8b62f27d49be7118f49f4925dfb858acbef4ed1662ebda46b","sha512":"5f5e56bf5786e62f9c1eb0bef0e3692a6cb13276c537807f2c99341e640b17733e7abd41742551c94bc05d9f93a5e6bf337e224863664f6d27e08eee8de7e415","ssdeep":"","tlshash":"0911c0d0e48dfb2d0368df65a1248033f25d58b51f288368d0f95d657b29449b79ea30","first_seen":"2026-02-24T15:43:30.888617Z","last_seen":"2026-02-24T15:43:30.888617Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/ripple.png?1771947792778","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/ripple.png?1771947792778 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2274\r\npriority: u=4,i=?0\r\nx-amz-id-2: JVRGhpK+57FWA6aVcsRuckk4PYAafmkmtMn5XUOB+U5XyCx7OpWAKs1z1WP5Vx/5QGGJGFivbtAMqdOSiwRczRd3ehu7Li84\r\nx-amz-request-id: JBR9H8EWJ85M26CG\r\nlast-modified: Wed, 26 Mar 2025 12:12:21 GMT\r\netag: \"674b0999f6083084a2a4b1d8b20f3bc1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7bPsVw8GlsDw6CKmbycROsrmERQLbvqDD24DlobsXG41icx%2FoO02NblHQEEJbNuCyy7Pla2Cu3EKfYIxpeeWtjHMdOlfg9WonKqCr00bXZgL7pTJtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c929c35868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-06T04:02:55.304252Z","times_seen":638,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/ja.6f7a9185.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:08.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/ja.6f7a9185.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/assets/index.2906993b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:08 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=igfn7Qo33lig2Rq5JrnkOwcLlCzv5PdcSmc1GgEeatDezKgPJmHYHzzgyVJme7PMvxaiYWmPFuYKfKawS14JzR6aqydwMeT5eopLOPdZ\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6989e3a1-182f4\"\r\ncf-ray: 9d3013ae3f0d5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99060,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2bf34a6741652de7786a7fe4a6bf50dc","sha1":"63d019763262d9371341b0c8330fcb8a3f466dd4","sha256":"b5e2b19e951acb114e413c60d489ba4ff97951f43f8c30b272a6050820610a74","sha512":"257f94b8c3473f1de4bc3893827efc696d3dc813837298ccb9011580a86cbbb284d9a40eb940184994c5f132893853789c5167b32ab911538df83dc24d89427e","ssdeep":"768:8V7AqNaUht1ffAGfUj3yEKaJyw0cya5g5rWpp3zHlqeZDfrh6U9sPfyxnPaXdwXT:Kfht1ffAoUj3yRTa5gi3JqeW8CHSx","tlshash":"caa3deefbc4d097f48b7469efe426a4768f05a0d1265f62f5ba8b6b23e10052534372c","first_seen":"2025-09-08T01:16:02.902988Z","last_seen":"2026-02-24T15:43:30.890705Z","times_seen":25,"resource_available":true,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":473,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/#/home","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-24T15:43:10.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:10 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jqSlsSkjDEsI6IucE7qtjS24a4ldhtJZbykKellR7NxK%2FBr5ftUOVUdUP4R%2BDnWpApA4n7p%2FheWpvwW787O9KD37nqFiRDJZdPu1XnNb\"}]}\r\ncf-ray: 9d3013b858165868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3964,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2207), with CRLF, LF line terminators","md5":"1af8dc544aa0daec52848f722920ab5b","sha1":"66fe9dd0d0f70cd4c3d1fbae334fa6b17eec902a","sha256":"8f549301947a1acd48c826edd90dac1d752bb52696d92cee456644482cb2e03d","sha512":"ea2e3d27aeada8cd898af2edcf3143dc9cd9c010858ad2ec54b9cf43fe5bca426ef6699305682b1f3ec08848f782a3e4ef7ced4b976582f0b3d836be813653a8","ssdeep":"","tlshash":"2f8163375d64c8086331416adbe7750dde2a106b92028d30b6de08e98fe9fd8c4c7b75","first_seen":"2026-02-24T15:43:30.892489Z","last_seen":"2026-02-24T15:43:30.892489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getAllSetting","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nSatoken: \r\nlanguage: ja\r\nlang: ja\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RH%2BJPNRBUFasA4voZQ9cTfeg0ajsFhiyxEDsGSc5q8qxG520M%2Fl0j6WBOh7gjEWKOe5Y%2FV6O7y5WtkQAPSNHdNqfRD5y4poOSXFbl2Lg0tWa%2BA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c549435868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11453,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11119), with no line terminators","md5":"ce1af961983c76b4c32f633349c4ab80","sha1":"b6adbc7b48784e837c41be196a20f77f9076fb9e","sha256":"d21e879535f242fbabcac9fa2de6d0fcc6cfe9af06a3af5d1e926700cba72293","sha512":"dec1ca557f6e82add605d7ed5f7e1a054de17a3239d789d0cd8e9c556f5915f98e7ef7952dfe49b5ce7a85a4b9f968eacf189678bc16e7318e191f9db03e1949","ssdeep":"192:cAnwC0/l/fP31zvNVehP+dCyoG+cExun2Ny5ztZipX2TJ/B59I662sReD1iMNqQM:o9Hvdp2u8d8EP2LD4MPS0UPDp","tlshash":"2332341830ecccbdd9d725c690e7769637ac25b3e658ac1ad4eaef1c4ad7570480e10b","first_seen":"2025-09-30T09:28:30.473587Z","last_seen":"2026-02-24T15:43:30.894515Z","times_seen":14,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/solana.png?1771947792782","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/solana.png?1771947792782 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 25649\r\npriority: u=4,i=?0\r\nx-amz-id-2: N+Nyh0ZTLTrsRCGmhhJc7N06CWpb2Z7r5hl6QEzZqelbeSgP4ILTm4Z8TXRAUllXTlqAhsCmk3qaDLSnEKynFvj4224TlqvG\r\nx-amz-request-id: JBR4AWR976J4VM7G\r\nlast-modified: Wed, 26 Mar 2025 12:12:22 GMT\r\netag: \"670c723abc22056bc5368ca2a97dd6a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKtdPaKPsIfY38YlKBdzEM1UgX2v9tFwf7tZ7bsz0EA8qR%2FsCWqOr8vzeOsm%2FhSwIrP86Y2PVuE%2FHgq7Q3nYXPhU0JgiLbcnj7k9ppRdezLEfApXPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c939c85868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-06T04:02:55.294395Z","times_seen":678,"resource_available":false,"data":null}},"time_used":1400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":786,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 06:10:51 GMT\r\nexpires: Sat, 20 Feb 2027 06:10:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 379941\r\nlast-modified: Wed, 10 Sep 2025 16:23:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35928, version 1.0","md5":"a317875aac104234bd7c39df8c501fbb","sha1":"870661970316f61acaab613e3209b9c09e2961f3","sha256":"065e2ab41209dcd60b1c88517c71a741803e3b0647059cb8ee7efff522ed1d40","sha512":"619f405a133ec8227767f08c598399a737d30cea6f76d3c065d2d97ce162bae040ced7fca13ed874d66a1f98472a3a07cf12bb146f432c8d4df24745488e13d0","ssdeep":"768:ybZHErhpxKts8YgN3IJe53ZnJREjqvYSVgXsdp+v0Gd:ybxErktsfgN3fXlicOzd","tlshash":"bef2f11c1a34eb974328047b840084b533ea6da7d63192b121a5fb44cca46fafecfdd6","first_seen":"2025-09-11T17:08:53.61315Z","last_seen":"2026-06-08T11:52:03.629137Z","times_seen":26490,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getMt5Amount?coin=xau","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:13.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 3\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3,"data":"xau"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kDAuLuC1AnuwOsXYc%2B6xvcUyYT1wasl3xgD6EYz4boNrzFexOY7g1aKBKOjvj6gZwSkbItnIuybYXxYep1WdYMJtGE%2F6fPwgW63lMmzyc%2Bxzqw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013cdca365868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f52522e7ba37a2c837e9b2183f411ba0","sha1":"ce9d73ade8c1e659a8514e223dbdff2096273be0","sha256":"f275c2c7db18441b3d72cce9b3fbd2f35eca0b383328c764d50f195987a00f02","sha512":"e2a9c5a2e6debc103161a81e9a5e1f268b35a5ae79fd03687e507cdd92da070ce903c690166cc2a2661e068b170da9f985a7ad4655f7c6abf9a815ddd931a015","ssdeep":"","tlshash":"9d9002952c988242a88310a695169244002431602625d24c4c59553580cc2733040c58","first_seen":"2026-02-24T15:43:30.898293Z","last_seen":"2026-02-24T15:43:30.898293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getMt5Amount?coin=xau","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:08.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nContent-Length: 3\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3,"data":"xau"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:09 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TwRL%2BV4SkdjkNUgF3eJY0od2Y7%2Bu%2BxAzjPtFTA7DR%2B9S7jcoiBD%2BDrpL4A4D2cHbQgVOLomKincEaEfeDvVYK6%2BjHdjNDRUdSLvw7EPPTaEXUQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013b04f325868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"702da1e4774b2959fbee69d23aabb9f4","sha1":"7fde43cda46ab1faafe0f61857a331c6fc07aea6","sha256":"e029b74d2427e248a01fd489e1e8b04e4978bc001e62eb5725ec1843c867dbf7","sha512":"beab9494429ab20ebdfdb893aeffe9be455ffaccb941bc52390e1837c74ce62575dd70dc4155c5b73237a94cf62af7533e2901da3056cb63d9f91675d2e40e78","ssdeep":"","tlshash":"0ca02220ac088082a00302830223820800f020cc2200aa08fe8ee230c00823b3083c08","first_seen":"2026-02-24T15:43:30.900178Z","last_seen":"2026-02-24T15:43:30.900178Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_277806_284960_1742401785.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:10.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/project_277806_284960_1742401785.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 24 Feb 2026 14:45:38 GMT\r\nx-oss-server-time: 36\r\ncontent-encoding: gzip\r\nx-oss-request-id: 699DB992C05EDB3830BCDB80\r\nlast-modified: Wed, 19 Mar 2025 16:29:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3314092823114277322\r\nx-oss-storage-class: Standard\r\ncontent-md5: 86VuF0Y/7gLPjMCaBPYMeQ==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: P99z3F0kUghufUFK3pmAb2pNjiYtxfDmFJM_2ARIwfvPDnEn2uKGUw==\r\nage: 3451\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1183,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f3a56e17463fee02cf8cc09a04f60c79","sha1":"ab2bd572160689d42b08c9497c7de63859a4987d","sha256":"d377553bcae533f39143c992ffb0c10202a33417349b000e927dfb7e563157b4","sha512":"a8cac233ba5d2ac6f674f27d84b4f3187d644a2a7065e1e22c349f398bc564485fc0002ba83d88d0ec0a0480f8dc210186bf8a4318a373f87712121465f4020d","ssdeep":"","tlshash":"0921c9471c63a4797bd5727b4b3f88ad3998a2433004cc10bc4dd4682f909e20e9eee4","first_seen":"2025-09-08T01:16:02.885316Z","last_seen":"2026-02-24T15:43:30.90186Z","times_seen":25,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"api.bifinanceb.com/ws/04c3a098-ab41-46c8-b819-a969a12dde50","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:11.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /ws/04c3a098-ab41-46c8-b819-a969a12dde50 HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bifinanceb.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: SrVza9yeFXDBBc9KXratZA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Tue, 24 Feb 2026 15:43:12 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://bifinanceb.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: s0OERCIAZUZFbjdHjQNsJvecWIw=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=79%2Bi2RhK80%2FP6x1SWNrSlsMtNfGJOzaP%2B60Hnv%2FrD0lXGh%2FSaQ19NPkAZWMTUxtQLryEAd3H1AMrh16TOGIgvvFDAqlylC5%2BUJE5Bs9PiW46zMRH9YVMXAxqyrOPrAG5hMY1QyU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d3013c38f81767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7671\u0026min_rtt=7653\u0026rtt_var=1643\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3195\u0026recv_bytes=1325\u0026delivery_rate=562184\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=ca86d5143ec16fcf\u0026ts=460\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":446,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/AUDUSD.png?1771947792792","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/AUDUSD.png?1771947792792 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 45401\r\npriority: u=4,i=?0\r\nx-amz-id-2: fLteceX3UTaAoOfQLQwHhAxAI2n6gi7QnWOOwsP2TRoX/EqTb9AYo1/t8DuC1bfOh/GvuvD0doMk3dIsUOPrdKNpRG8Dx/bh\r\nx-amz-request-id: JBRF2AFQFN7WVTNV\r\nlast-modified: Wed, 04 Jun 2025 15:01:05 GMT\r\netag: \"83bafeb20ca39889164dd41ad945d945\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f81d7271b26d3338b8e67fdf07d51ca74bac4ce8e5a3e137cc12df59a41c97c3\r\nx-amz-meta-s3b-last-modified: 20240910T152249Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pxkomggznK8uslUSTbqTK7E0SMX0461Wu30YjRmBTjzOrs1wr4R22MYKkwjl290No%2B8lWrgLEC5yn6ejo9MKMQkSx1uKPeFjyoDKZveeSwpoiW%2BCqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c949d05868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"83bafeb20ca39889164dd41ad945d945","sha1":"c402962123b28f49b6e23c2c9f60c7a5fbc8a197","sha256":"f81d7271b26d3338b8e67fdf07d51ca74bac4ce8e5a3e137cc12df59a41c97c3","sha512":"d37f32bf66ccfa0b04c553c888ee8cbe67fba3e3c3fa394aedac253b0bbda5d2829c3de256c6ed82990caaea947f1c59616a03995305106aec3974b2577f2f57","ssdeep":"768:8AyZS2wvV+rv3pjVxPfJbX8kFxZdnyqsag/hucznAAK7pnQw2uSNT:81Jrv3pjbBbNTyqsagQuA7pnQXNT","tlshash":"9813f129a903b7d35c44c3f31eca1c10973e6e3ce1b01923d1fd449645ea541aa6beeb","first_seen":"2025-08-07T21:15:59.968852Z","last_seen":"2026-02-24T15:43:30.903571Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1084,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":327,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/ripple.png?1771947789416","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:09.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/ripple.png?1771947789416 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 2274\r\npriority: u=4,i=?0\r\nx-amz-id-2: VGNdMcizRuNgOoJydsaAe/KxA3DHlw69rqUk4dEcjrNZ3BowuPsnTOxAwA65MILPcNu2MUfnjWlmXMeRMsT2clgFIK0nPsbD\r\nx-amz-request-id: DY4HGT8CHW8RFVSP\r\nlast-modified: Wed, 26 Mar 2025 12:12:21 GMT\r\netag: \"674b0999f6083084a2a4b1d8b20f3bc1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2QqbVC7BQOvmg3Nlvfc3q6GRGB0xTCBb1NJNkNlMW8EIjPCQlRaK20fFFfRkCNssHNtd9soIMRR7%2BdmcaWsGFMoyOojUo8sTnXBxeiGBUuupBDH2OQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013b40f815868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-06T04:02:55.304252Z","times_seen":638,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/index.12a89cb5.css","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:10.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/index.12a89cb5.css HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:10 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EDfi64Y5iRlng4bus%2FQ%2Ba76FqYynfS4GXzu3NfYKz%2B4EbdHm9um3AXMNPdoi5DWHDX%2FJbJP5sTW5RW8j2HuZPD4KCbjFKaMsWuhApRP8\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 9\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e3a1-87571\"\r\ncf-ray: 9d3013bad8585868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554353,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c8f1c6194228938cf95e859445b3a80a","sha1":"d92caa5e85d473634a8298f069119273bc33e381","sha256":"12a89cb5a92204f874da96c8530e385552d35247d7c28c1e089808c2f450149e","sha512":"53c98ffdce03af3241392f17bb27a8c716e5e497e419856f62fc376b9818808b7bbdd54bbc49e2c0055810f52e6211a88e02d5893b6af79b302ac218638b03c7","ssdeep":"6144:fSI0MGuhT7M8EcH7pTVkad36fFhsSIcO3jVMa/4uta78+B36JL7u1A+wMif/x0rv:24Alh1ye","tlshash":"6dc4d755e753513f2e17e63d6bc5e9d8bb28dea1dd12cba5f600a00845c3af102a3d2b","first_seen":"2025-09-08T01:16:02.825429Z","last_seen":"2026-02-24T15:43:30.905854Z","times_seen":25,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/binance-coin.png?1771947792734","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/binance-coin.png?1771947792734 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 12869\r\npriority: u=4,i=?0\r\nx-amz-id-2: gTW9tmf/TSLxdpQRX7uGVTjRvDuB347Yw5Gwy2tPJYSEVblEehEieHgx/Gx1bsHmS81abZZl0uNZF22E5q/LOdrZ6ob9NlSy\r\nx-amz-request-id: JBR3QK54NQ2W1HAX\r\nlast-modified: Wed, 26 Mar 2025 12:12:20 GMT\r\netag: \"a533eecdee5a789e7d94f8f79f95d588\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u2dQk7fbBNcProWi9hmHemcYyGIcLrmW5ESl%2F8vwB5AbsFtpEL95lbrT03nvy6mw1kYn2XmzBdkSbY12V0vgzwWjSdtS4kCr4mUbIcfPY6sEOa4SUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8a9aa5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-06-06T04:02:55.266893Z","times_seen":677,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/AUDUSD.png?1771947792748","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/AUDUSD.png?1771947792748 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 45401\r\npriority: u=4,i=?0\r\nx-amz-id-2: 9WWnSPRC7nAUQ+sZzqffnq1VU6JCnYzF3AwsoqnRQLAR/la7jsCaBqtpSpMyo57vo2vIOuxGW+HJZwZCy23D68jl8P4Z6N/b\r\nx-amz-request-id: JBR9VVXN9T8TM3QG\r\nlast-modified: Wed, 04 Jun 2025 15:01:05 GMT\r\netag: \"83bafeb20ca39889164dd41ad945d945\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f81d7271b26d3338b8e67fdf07d51ca74bac4ce8e5a3e137cc12df59a41c97c3\r\nx-amz-meta-s3b-last-modified: 20240910T152249Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ug898cx7dATrjBo1%2BjTlfeuksp6vvx4fKoRj0kFZ4NzeiItZl84niBtJg6aO5Afuy3qTlpPxaUCic7exBxdg82iedx2jJ4htfkpS4CkFeonhe%2BE2tQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8e9b85868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":45401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"83bafeb20ca39889164dd41ad945d945","sha1":"c402962123b28f49b6e23c2c9f60c7a5fbc8a197","sha256":"f81d7271b26d3338b8e67fdf07d51ca74bac4ce8e5a3e137cc12df59a41c97c3","sha512":"d37f32bf66ccfa0b04c553c888ee8cbe67fba3e3c3fa394aedac253b0bbda5d2829c3de256c6ed82990caaea947f1c59616a03995305106aec3974b2577f2f57","ssdeep":"768:8AyZS2wvV+rv3pjVxPfJbX8kFxZdnyqsag/hucznAAK7pnQw2uSNT:81Jrv3pjbBbNTyqsagQuA7pnQXNT","tlshash":"9813f129a903b7d35c44c3f31eca1c10973e6e3ce1b01923d1fd449645ea541aa6beeb","first_seen":"2025-08-07T21:15:59.968852Z","last_seen":"2026-02-24T15:43:30.903571Z","times_seen":29,"resource_available":false,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":329,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/bluzelle.png?1771947792784","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/bluzelle.png?1771947792784 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 29665\r\npriority: u=4,i=?0\r\nx-amz-id-2: 7La9Rh8Q+2o07/3tRbpjABPCU0iQcZQYUpx8tQSh9LW3u8OlSH/CD6YFzLBFB49o9Q+TbaaGPocCIB/9uC186mGi4b6nvtkU\r\nx-amz-request-id: JBRAKPP0GT85W7FQ\r\nlast-modified: Wed, 26 Mar 2025 12:12:20 GMT\r\netag: \"d15eea69fd48353af475b0b8c7288142\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: bba285295f75afa0bb794df0cde22edd090f8ebbc1d423b36c05053c997e6850\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0iugOaf%2FteXAUQnBzevXObWvZN9%2Btce2ZEH3nvDMt9xiKGH1Xj27GvG0%2FRD3q62vc1G9H1%2FLG8415QShTb5AVpE8bgyG%2Fo3UolteGvS%2B3Fw6BwX%2BMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c939cb5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"d15eea69fd48353af475b0b8c7288142","sha1":"b240c83844217a758d443834c9dcfd72f12b9e92","sha256":"bba285295f75afa0bb794df0cde22edd090f8ebbc1d423b36c05053c997e6850","sha512":"6f7fa4b2ba0e9140a23f729750ea6ea991ef814fafbe4b8edfe24a26ab0ab4e3e81c3146d03502a726c2c9354e07b624cc2144d07146d982db17e025cfe9f854","ssdeep":"768:gx5zjKKIKkn+aThPWxu+tx7znRPghNbmKFN7Fj:gx5CKIEaThPouUhznRPWFN7Fj","tlshash":"7fd2f2ea84adffe58f683c906bb65d888d31f4230dd410683a35b34d74485be46d972b","first_seen":"2025-03-17T02:06:07.808081Z","last_seen":"2026-06-05T10:33:32.025287Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":958,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/AUDJPY.png?1771947792793","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/AUDJPY.png?1771947792793 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 33628\r\npriority: u=4,i=?0\r\nx-amz-id-2: SbwOX+4auuVDUG+VZ5MBFo3SG9AhAa1piakBt+r+0Ap8c2s2O+wkJB14BlCGB6uUINVvMqIFNI/v3tSye9qmxEsxL/KfpXiI\r\nx-amz-request-id: JBR4AJ7ZC6RA5NMG\r\nlast-modified: Wed, 04 Jun 2025 15:01:06 GMT\r\netag: \"43e6c5765bcf8f7a1af5660a4cd0128b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: c00f038e6d09f14518284f8aa1e5b5261b785899fe075eb549fced496d0c7659\r\nx-amz-meta-s3b-last-modified: 20240910T152249Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Me1aZhDrswfYSBT1o22Y5FTD0b9ozD7IF7Qc9IBh82hehQqrQWLO1%2FHuVJDsU%2FDiOb4GSCaqg0sfs%2FKr5yskieqZ4bWfsNOTmQE%2BVnw%2Bsg5Qp3%2Bomw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c949d15868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":33628,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"43e6c5765bcf8f7a1af5660a4cd0128b","sha1":"2ecef791e9c2328dfe1fb732ac673a763841d9b3","sha256":"c00f038e6d09f14518284f8aa1e5b5261b785899fe075eb549fced496d0c7659","sha512":"e8b52cdd284475f3eedc80dfd18860283a7f3e7598dfac899226aa10e77447df87f34f7832e4d76f3568db071ebf8b9c4f17163c287bfec1e7411b2c6e4b73b1","ssdeep":"768:qyqjj6t+4CU/qFzx00p00iPr3Ti1B31FtuFx75hh0a:qykY+3UyZS020iPr3T8BvtuzlhhX","tlshash":"f3e2f13cdc83a194dd9a335178e8280487636f20f995716f38f394a7afa78db185d086","first_seen":"2025-08-07T21:15:59.989144Z","last_seen":"2026-06-05T10:33:32.148483Z","times_seen":33,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getCoinList","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:08.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 15:43:08 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n7%2FVQOJI753en38DnXq%2BFKWaQLCFlf8%2Ffx%2FzI7Gns9z%2FWNXhqAIfupx9IBMLy2%2F7U%2BAlJvP%2Bc0QYATJzLPjtvzh7ArhHGeZ2q1p1L6tDgrtnDg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d3013ab9932902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28073,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9da33fd2275227e58a33124975b7ab9a","sha1":"8ade6032829366ca9d4ce1b135d586a5160faaae","sha256":"f513a31d98f00b7fbae551b968a38cacc8981a7fb324c5199f1aff8cbdcadd61","sha512":"8139355238ca11524d08fdc0f14ee2a3fa0c02544b279f09bdc6606996d6011f6e7085e2b47f227c88351751735c3dc947ac92abdb247b45459db8063b890952","ssdeep":"768:N0mVqaqMKM5tmZx+8WLMuVjU6f+iN72u4KPmckoOw6daNiQbjYSRmZzr:N0mVqaqMKM5tmZx+8WLMuVjU6f+iN729","tlshash":"efc2ff55122ca5fdc939d0d11ebf7d16559c356fecc98d2ac2ce8d8c8ed4ab06a0af02","first_seen":"2026-02-24T15:43:30.912779Z","last_seen":"2026-02-24T15:43:30.912779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getCoinList","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:11.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://bifinanceb.com/\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F6jqyA3A2gbPcEd2%2BM1s6wKSZo2BQ7hsTf4JUB8xjdWfDElXAgtyCPHxssEM6464HGxYbnHmTkRrQSaQezct5AOlCYxxKnSaiu81Ua1%2BddoD6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c3890a5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/index.cce86c6d.css","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:11.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/index.cce86c6d.css HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:11 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SK8M4VCJXCzu6dVIGxxdnCvlSmGTNP75eARP2fINHWj2QTJGRh%2Bdc2NsbCQjp6KHtyaFmYs7j1sVrPXrLm2vcNi5M6IFREUiXiPH1aN1\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e3a1-3a58\"\r\ncf-ray: 9d3013c3e91b5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14935)","md5":"a8cef6ebab67bc7923b733d1f6c6f2d1","sha1":"63f242bb8a619329df0175bfb59f0e9b3673ea2d","sha256":"cce86c6d949c42970095bec73c20147d19f59cea45fff4f5905590520f21ad8d","sha512":"8ea233979aa10756b0e2c6a68287a996bce0ca6f19fb0762a12d320a7cd85c82b313bc99fe6466d4d10a9561ef09b74d5abadc661eb6875bbb10ba81f939e9eb","ssdeep":"96:GEE2Z4ATSDr1VqXMPGdLrPmgbOnPUKuX88vHZ8j7W8voSQStltd1kkDQ/UsDU+Vr:hE2OrGXMu6Uh88h8jqWoSQStllbaUyim","tlshash":"d5628348b5ad2136b837e4596d98878e7042fb97880763dddc89a97ecdc3ae32734344","first_seen":"2025-09-08T01:16:02.907165Z","last_seen":"2026-02-24T15:43:30.91424Z","times_seen":25,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/platform/Bifinance/logo.png?2.0.1770644385209","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /platform/Bifinance/logo.png?2.0.1770644385209 HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1557\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=4,i=?0\r\netag: \"6989e39e-615\"\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uqiFDaKUIGB1ERnX5jG1Jw7%2FrpVjvEdw%2B%2BlWX%2B1MT8qB6BqbAiPoF%2FEj8zWbl0vZGWAqcJCrpW1lOE%2FyhP8OF1eyUYy5eysOpYMG6gpm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8599c5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"72cab663cac200ac4517916327aa0fe7","sha1":"2a44a780605f2cf10062d591cb3ffc2e58ac817b","sha256":"9f774bdb23d7eed7bbcaf449b11d1d98b368d2b1e5373258d0004458c878c1f4","sha512":"5cfa9af476d5b47b7d7819a2afac0f5b8ad1604852c047246b6339ff0536677decf1f75356aadb995df94632a6ffe48499add0504859f69388d85263696a3054","ssdeep":"","tlshash":"0e310a5247ad25fbed0e02f929909457b5886696daffd2754b8fb3e7509121c4cc4202","first_seen":"2025-09-08T01:16:02.841821Z","last_seen":"2026-02-24T15:43:30.878303Z","times_seen":25,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/resource/images/common/home/bannerimg.png","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /resource/images/common/home/bannerimg.png HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 137583\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=4,i=?0\r\netag: \"6989e39e-2196f\"\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ni9EmZV3XvDU72K%2Fx4t%2Bs1g%2BNU%2FXP%2BM1uIRZMfB4HhjOv1oZaCqHfFe1fDH45DrtjJAJtInvAjLXD6ghL1OMbPIP1fL9XBcLjTe3dxTm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c879a25868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1096 x 982, 8-bit colormap, non-interlaced","md5":"81bde0f76b8d8c587f93c31ca0118911","sha1":"d7696679f1f1278787cc6242af6a2e9a9af49ccd","sha256":"b3c59f9007ae88ab2eb802cf5b2f48e0c8fd71d96e02182af7975cf0ef29350d","sha512":"c7958c6ace2b3db1cea047c4373ff2722b43da16fc7993f748dc87d6f4ddfe0946f36c7cadd76ab9e25e7e4b316636d4a208dbb1f2623ead1441676336ca890f","ssdeep":"3072:o8xzSTATdbv2PiNXSQy48F60fv1h089EECVPYTUlki5rWx6M6vD:n8ATdD1SQy48gOv1hDCmUlFAx6MED","tlshash":"46d312d39adb5b94ce0788707341af093dae6a21fdea24514089da0f55ae3b48dc093f","first_seen":"2024-08-19T17:34:46.604947Z","last_seen":"2026-05-19T13:29:08.685152Z","times_seen":95,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/USDJPY.png?1771947792793","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/USDJPY.png?1771947792793 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 25062\r\npriority: u=4,i=?0\r\nx-amz-id-2: 8ecsi1qocw8j/YA/uGEAO1T4IjaNTtHREFYOELp0dEPGQKHRsCRLECf1MEjOwqgEsnuD19PP8hAI1w9dwEejB52m0Ng9Gz5l\r\nx-amz-request-id: JBRA6THX2JJTBTRE\r\nlast-modified: Thu, 05 Jun 2025 09:06:24 GMT\r\netag: \"957d9475c8a72612b60beddd635237d2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ec29f475dbb7ee9804005bfe356ad41b5e81b4ba0bd5a9c44ce55f4a4b9690a1\r\nx-amz-meta-s3b-last-modified: 20250605T090422Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h81LU7%2FbB6c2kkpwLT15IGpAl8I3YztqD1oPLFkp9NBB6j3YIw%2BpfaWBfxIDICyj6LbPuAFDMkLPIoItoHR%2BN3KSie8CQ%2BIpq%2BDVZmaPH8H5d61p9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c949d25868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25062,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 742 x 401, 8-bit/color RGBA, non-interlaced","md5":"957d9475c8a72612b60beddd635237d2","sha1":"85acabab052b6c27e78f7f032914431ed2f884cf","sha256":"ec29f475dbb7ee9804005bfe356ad41b5e81b4ba0bd5a9c44ce55f4a4b9690a1","sha512":"20febabd5fc156be3404ef0735ab1a75885acecd8380758ec34ff527ae2beaac494a2343601dd176aaeb083a9093c1a0e5ce813e1a0873e678ea65b3227955e1","ssdeep":"768:QdxKEEehqrZe6JizQSbom7daCNdfRN74uvwV38k:QdRE9r8zzQIRQCb/vwV3Z","tlshash":"6bb2f17a2f0c11ec169ec3f4f601ac6093b25e0854e276c14abb455ac5782ad3717b8e","first_seen":"2025-08-07T21:15:59.961262Z","last_seen":"2026-02-24T15:43:30.916977Z","times_seen":28,"resource_available":false,"data":null}},"time_used":888,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-24T15:42:59.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 15:43:00 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QcB11qtduiaR%2BFN%2FOJejRD35rz8vPHbMO6LbkNC%2BKqIg6umNh1z3pLofDDpsdSvXZRmFB340hZGC1MZk9BwRV6G7nbfsdx2PuOCMaVnE\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d301378f8ddb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3964,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2207), with CRLF, LF line terminators","md5":"1af8dc544aa0daec52848f722920ab5b","sha1":"66fe9dd0d0f70cd4c3d1fbae334fa6b17eec902a","sha256":"8f549301947a1acd48c826edd90dac1d752bb52696d92cee456644482cb2e03d","sha512":"ea2e3d27aeada8cd898af2edcf3143dc9cd9c010858ad2ec54b9cf43fe5bca426ef6699305682b1f3ec08848f782a3e4ef7ced4b976582f0b3d836be813653a8","ssdeep":"","tlshash":"2f8163375d64c8086331416adbe7750dde2a106b92028d30b6de08e98fe9fd8c4c7b75","first_seen":"2026-02-24T15:43:30.892489Z","last_seen":"2026-02-24T15:43:30.892489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":46,"dns":12,"connect":8,"send":0,"wait":350,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.bifinanceb.com/ws/b6d7a5cd-65bd-40b4-97a0-eb0f91774d73","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /ws/b6d7a5cd-65bd-40b4-97a0-eb0f91774d73 HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bifinanceb.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: uG/5t0BIrRiqhd9c6OKALw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Tue, 24 Feb 2026 15:43:07 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://bifinanceb.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: h2XMysZuFUhMqFPwuPcJfP+3Q3I=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Qpz64awFHaZ9UNcLqErkwjq7k9ybod3ioacehRq9%2FS9PFoh2D6KXgGNOhv9u%2Fyg5v8L%2FKPFOzf9S7WNdH3dgOhaYqjPlMpshdSycsxytNhuXxbgb68wN0OX1EPEBwDoUTj%2B%2FGQo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d3013a2ac00a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7782\u0026min_rtt=7753\u0026rtt_var=1688\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3119\u0026recv_bytes=1197\u0026delivery_rate=548554\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=4b802bfa7d21e614\u0026ts=620\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":45,"connect":52,"send":0,"wait":606,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/bitcoin.png?1771947789454","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:09.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/bitcoin.png?1771947789454 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 2691\r\npriority: u=4,i=?0\r\nx-amz-id-2: rcHHeaM7RNKO4FNi/StnPf097iX2HDGeI+eN+qjYxZ6XKUc2NL/nbQhgfVaRYDTS9+yt43nF/gqsirqU9z2j8//rMMlCmbK9\r\nx-amz-request-id: DY4TD1SFYDGE5MZE\r\nlast-modified: Wed, 26 Mar 2025 12:12:20 GMT\r\netag: \"2edf1ef8b333c40979976d1a49bc234c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9\r\nx-amz-meta-s3b-last-modified: 20250326T121156Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F2QwA7%2B4gLnYyqscsLpDgicqSgCNlo2KkJic1HX3LGZrYVDKPqpm29ZRWlLCZ9iZvWMckcSXULRyqwumlPi3DIXljrz%2BcNORgoof2hiHaE3071sLSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013b46f955868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-06-08T12:06:52.102307Z","times_seen":21671,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/css/chunk-common.047ebad9.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/css/chunk-common.047ebad9.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Tue, 03 Feb 2026 09:37:23 GMT\r\nx-oss-server-time: 6\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6981C1D3EE88453737F806AC\r\nlast-modified: Tue, 03 Feb 2026 09:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15301035701198459371\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: kuhLBjVJMHRRHJR6J/nD0w==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: ihRiXfPvr7SAOxYgvEFUpSkZ46aUO2NvrU0ZioFOd2oktKTqQgn3NA==\r\nage: 1836348\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3567,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3567), with no line terminators","md5":"92e84b0635493074511c947a27f9c3d3","sha1":"1063727a5ae72bb23c46dad693b4b45828e2a74a","sha256":"85172738795fe7c2d724963c00cddb49256a70767071cea32d1729b809702ffe","sha512":"9ee606d5139307b4a204d111caf4297943a1894038526b59e9c0a4bd5a034fd328cdfc85edc24dd76732407f80e93aafa317fa53d85471a7dc45c23f4a72a854","ssdeep":"","tlshash":"e2710de5d50814ed7333c902a385b298ad92f5b2d8e04e67f01f562c8ff2655a291f39","first_seen":"2025-08-28T20:02:37.799245Z","last_seen":"2026-06-08T11:51:53.367735Z","times_seen":2142,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-common.c89c8366.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-common.c89c8366.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 06 Feb 2026 07:37:09 GMT\r\nx-oss-server-time: 24\r\ncontent-encoding: gzip\r\nx-oss-request-id: 69859A254BAB5F3438060ABF\r\nlast-modified: Fri, 06 Feb 2026 05:58:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13098974095763120917\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: nV/JYYHW5G0Bnwm00ndSUg==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: jeCoZqeGuvqBq35cDNyMRO7r0WfDR8BivMoPxtIMtw7zx8c_IHDnOQ==\r\nage: 1584361\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":27007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26864), with no line terminators","md5":"9d5fc96181d6e46d019f09b4d2775252","sha1":"29727e3f3b0e59145e0f1ff25eeb28576a7bee6f","sha256":"05504a45064a116015be9b0eb83817af7c1b1042aae80c871726036ca0035436","sha512":"3a7a1401983a0b00d25c2baf14e98b2a6a4e0eeb9288b38108a9b2c7b3e2c1587fb3e00677f7b73bbed0954e8c63325ef8ade3b1c0ecb91ab44e7050668e3727","ssdeep":"384:kF9kWEuK2U72UecAvTbDPnPuTc2YejErqSqcDRVE1eDTaR5HJrCiKMcJHI7jW:q9mZ72UecAvrPuSqSpEPIMoyW","tlshash":"dbc222ccf2d7f0650b9a38a481bf110ae23e7d99b44e9196d261e0c17c3454da273f9b","first_seen":"2026-02-18T21:57:56.580919Z","last_seen":"2026-04-15T20:10:01.085959Z","times_seen":330,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-vendors.6ef765fa.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-vendors.6ef765fa.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 03 Feb 2026 09:37:22 GMT\r\nx-oss-server-time: 3\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6981C1D2231938383587FEEB\r\nlast-modified: Tue, 03 Feb 2026 09:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16184782789754269720\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: jniEYbqRWty/z6mxDDXyZQ==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: KSIyD7kkh5y6y5oaT7Vqba7u0hAfl46ecBQZPEDh5aoWre5iceUA6g==\r\nage: 1836350\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":214670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"8e788461ba915adcbfcfa9b10c35f265","sha1":"bc3841eff0c3841cfdef9a2f1e1b5f1d0dd6c26e","sha256":"69ced1151fb1b32d26c8b70739681828a1d99333c4a08114c98cd8af90b3f2ca","sha512":"b20ea5f22352ee329e6982d0fbd14fa2f4607a186b2d2973a99e43975164b2c6142b8ce87f7d5f54f47cb41bd6a33329ec3d09fafcb971de6e316ce5c0c8cfe0","ssdeep":"3072:gZcGj+j4Cm4m5BJ1IWqq/1cuC+4DdC58+skrMJz+8:gG27J1Wycu+4ikrMB","tlshash":"1424f7cdbb92f06843a335a4806f150bf17b6a18f40e81d4e6a6d5d1ac78a8e5137f3d","first_seen":"2025-12-10T08:58:23.267899Z","last_seen":"2026-06-08T11:51:53.408623Z","times_seen":1221,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/index.12a89cb5.css","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:00.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/index.12a89cb5.css HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbj4WupjP4u5JXPR4SworBwT5DzrsfPwIDNexdRWbvELUTYmRguFVkh2bFSpLL4z0WS4m7K4nxQG%2FJcmtzEDyG1By6mcKaSznNJ%2FGKbL\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6989e3a1-87571\"\r\ncf-ray: 9d30137c29c55868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554353,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c8f1c6194228938cf95e859445b3a80a","sha1":"d92caa5e85d473634a8298f069119273bc33e381","sha256":"12a89cb5a92204f874da96c8530e385552d35247d7c28c1e089808c2f450149e","sha512":"53c98ffdce03af3241392f17bb27a8c716e5e497e419856f62fc376b9818808b7bbdd54bbc49e2c0055810f52e6211a88e02d5893b6af79b302ac218638b03c7","ssdeep":"6144:fSI0MGuhT7M8EcH7pTVkad36fFhsSIcO3jVMa/4uta78+B36JL7u1A+wMif/x0rv:24Alh1ye","tlshash":"6dc4d755e753513f2e17e63d6bc5e9d8bb28dea1dd12cba5f600a00845c3af102a3d2b","first_seen":"2025-09-08T01:16:02.825429Z","last_seen":"2026-02-24T15:43:30.905854Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":861,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/css/plugin.ca8811dc.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/css/plugin.ca8811dc.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Tue, 03 Feb 2026 09:37:23 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6981C1D358A49D35395D89A5\r\nlast-modified: Tue, 03 Feb 2026 09:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4711444634510545221\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: GJkBkDDNMX5T+a6ZYreZHQ==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: mNQZuO2zyNdH0YlAYAnl1wGtcRVQMC9uCYcZyyMnoK_9-VXQ0EjuPQ==\r\nage: 1836343\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":77948,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1899019030cd317e53f9ae9962b7991d","sha1":"b9d94d577b4c079d5fa4823f82896df59f4d9b5e","sha256":"2d16333363ea5a097558bc8675e8fd989e71e6144b89c0ff537bfb5ca3a087b9","sha512":"152a11565d2e8f381451c197d63daadc1cc14baa9c2113361549949b0a2db1b1c5ad535a152b80eea4728caa8dae9ee32b26e15d42886dae45df70b97f9506d5","ssdeep":"1536:B+1IfcryTXKrMV4wU3k1rz0JUjMBwrjlvOb/E0/qPxE7aWSlsgTu1dQq5qsLxHig:g1Ifc6KYVh0JUjMBwrj6qxE7aWSlsgTg","tlshash":"5a73a832ca15312da177e125f5c0f9d930b5c207fa230aadfda47939c2f298527b668d","first_seen":"2025-11-10T12:55:36.307776Z","last_seen":"2026-06-08T11:51:53.374252Z","times_seen":1594,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/binance-coin.png?1771947792780","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/binance-coin.png?1771947792780 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 12869\r\npriority: u=4,i=?0\r\nx-amz-id-2: T3CRQen0Xi+BzpM5K92Hq2DqvXCecEoPTfQdJyV76nuS2zaypbhBye8M9LbwnfCl89feAvh7qhhvslYrPcy4cw0j1FlIa0ZU\r\nx-amz-request-id: JBR4G5CBVG7BZP8F\r\nlast-modified: Wed, 26 Mar 2025 12:12:20 GMT\r\netag: \"a533eecdee5a789e7d94f8f79f95d588\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aqk2mNa9HooaULWYjNcAHmBfL0%2FT%2FF1S3fqeiq7drHBaZlbzlD%2FeXQZsaxdoEyn016bJN6pye0O0JNwDZlb273faoWk2thhovL%2B%2F0%2BdbLXaY%2BcKqKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c929c55868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-06-06T04:02:55.266893Z","times_seen":677,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/da9bc5822529a2c225e057c0d8d50f36.png?1771947792781","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/da9bc5822529a2c225e057c0d8d50f36.png?1771947792781 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 12446\r\npriority: u=4,i=?0\r\nx-amz-id-2: 0NTqxcGHFHseG9kN6q2MTbAiII93ONDSEQkJRJn232703bHkQtw8I+QGtzQsj8YgtDe9Y3/5X23fC8Uf6p2wrVc33dQnj8A3\r\nx-amz-request-id: JBR8XS89CAM9JE8N\r\nlast-modified: Wed, 26 Mar 2025 12:12:21 GMT\r\netag: \"da9bc5822529a2c225e057c0d8d50f36\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f51f30797900cc0ba2647fad1078d29725f4410442a472df1812ae70d89e22d6\r\nx-amz-meta-s3b-last-modified: 20250326T121156Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2wKpOsxT65DqUMw7E5Hx8QD%2Fhmv14RSr2e%2BJfAKkUAsCDUPJu%2F%2F2aoyFedT%2FGQ%2FKkYNbBSt6ucod9WHduVRJUYxk3ctXfOfzn4TWTyjPMQgkrDXwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c939c65868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"da9bc5822529a2c225e057c0d8d50f36","sha1":"82b82dcdfcdb456c30cd1901d162f6eda4755768","sha256":"f51f30797900cc0ba2647fad1078d29725f4410442a472df1812ae70d89e22d6","sha512":"c9c6ab97fd64a5d5901b3b97e3e2ff445588c37246abd20315c9f23496ba7040f6a14d0d95b5b0012cf7a30ac026ae818b16befef162330410d38810248b2ff3","ssdeep":"192:lF5DMISPEWXUxj4OcJTctXlli9mso8hM4CaD0ze/uCPuuzxd3iDPr:tMVEBxkO0TctXS9K4J/uCPB1ReD","tlshash":"93428df604472703f9bc1c97a3de061d18750f359251ee25d0ec1c5972a8aaf1bf606e","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-05-19T06:31:41.587974Z","times_seen":66,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/EURUSD.png?1771947792790","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/EURUSD.png?1771947792790 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 43457\r\npriority: u=4,i=?0\r\nx-amz-id-2: SS5+Cchrn/E1TE9QMfTFR4mHZC1e+kDr2BUbeLjmpoISpV9U0x6btkye1VEBF9q3D66Uhr/hqns66fIgvevrCyBQ14VUbHwd\r\nx-amz-request-id: JBR2HZVZ0TPBQSMS\r\nlast-modified: Wed, 04 Jun 2025 15:01:05 GMT\r\netag: \"3d10fa14d8d07aec6b031221689d850c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: e37da9af0fa1edeaa225d1f88da8a8f4ebe8c52d8374f9778edf35527f1a31d5\r\nx-amz-meta-s3b-last-modified: 20240910T152249Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nz5uVTquhQYthGo2wgyiNVDs6hssqumuH7LKu6T%2B63WJg%2B1HAGKcW64VpE0U8Yqt6bWYj2AGCt1RGnQlWsTpywzrpcrgD%2Bu%2B%2FAR73SIZ9S2SM458BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c939ce5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":43457,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"3d10fa14d8d07aec6b031221689d850c","sha1":"aae2675323e43020653a05951644e5d84ece9a5f","sha256":"e37da9af0fa1edeaa225d1f88da8a8f4ebe8c52d8374f9778edf35527f1a31d5","sha512":"28cd6bfb7290220b7dec1ab03574a50f4b924062ebf2013f4d0cecf71beead956cb7a30463b85f2e38ee681083e32925f04ae931e1c04c04208308ae3ddbdcfc","ssdeep":"768:J4HNs8yuhLW2eEdWeRQPFHec/hLzsb+mYdh65sgxhWRyZbV:J4tNDhLZeVWQdH1N4ymY2VcK","tlshash":"1e13f1091c744ab5c969f650de85ca0e8f7bd06365658c8368efe607813cc50ccefb9a","first_seen":"2025-08-07T21:16:00.001965Z","last_seen":"2026-02-24T15:43:30.924062Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1087,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":327,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getCoinList","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://bifinanceb.com/\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:08 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wpUFk8oHhgAsTYt%2FsVLvmmUYlq5XGd6FSf%2FvI0HZmR64v0XaSIb32a4wu0AxkOKBX4x2RqU823dtmMIIss1GNbMOJdCEwk4GTz6HbmIW%2BT5ORw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013a26e205868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":1466,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":1465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/index.c3b67a87.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/index.c3b67a87.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bifinanceb.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:07 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fNAJ5LVvnUzYcWMft6Yg%2Bmf3q5sfcbViNn51kpQAwaLRNotHrRw9NDJr7kW4EVmef1g4gJu7HcZrZazPq7sDjmTkG%2B7LF67eYVczzNLk\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6989e3a1-6c18\"\r\ncf-ray: 9d3013a2de2a5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27672,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27671)","md5":"8a3ceb403b0fe9b80866ab36b1d75d6d","sha1":"64cdfb78c70019f722aeac69dc7ba55c09829759","sha256":"b968345fb7d8056edda869379406fd06489c550b906ad8c5eca970ac0877a858","sha512":"932870bd1659f18e04c99ab337f5de9d065d4737c0c7e4783854d01cd75c095caf9b475d99f00d9a501b4fcbe246a560f8b4a592a006f0d9c36027c925c4feef","ssdeep":"384:rZMLhlYcCG0XS/s+yucXfwnWJoUosg1xrCeRRcXF4OP2hoW4IHTGPPs:rZMLXCRC0jWWKUos+r1R6RP2hoW6PPs","tlshash":"52c23fb5f92a8978f1b78951105c3509314cffd381508693b6fc2a199b93dbc378eb2a","first_seen":"2026-02-24T15:43:30.926206Z","last_seen":"2026-02-24T15:43:30.926206Z","times_seen":1,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/notice/list?key=ROLL_NOTICE","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:13.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 11\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11,"data":"ROLL_NOTICE"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:14 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J722JWtwG9Uq6P4PXNBhxuY8PBnYFw%2F2yftdBD4sfWrSP13qNGlWwqwcejwxI6K9%2FnHG3Ht%2F68duDyl1NSWR6h1Ff2M8Uon8u3mCb%2Fu%2ByuyiLA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013cd1a265868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":620,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9465cda44517b572205f15f70f860345","sha1":"3d624e0ba72610c9845011ca2cd1a38f214f4972","sha256":"fd9884936544a18ef42e34a392bd6f2eed85a673ab7c5055959e8a3c87268f31","sha512":"a9fdaf5beccaf932f74679d3aec3078427b6173a85e18a2ec22522fea30d96ccb18a9faf1918c396fc34b3d71c69cfb6db081a3e4df920be8824a8c6501e59b7","ssdeep":"","tlshash":"e3f0ac4d027c8e758c0391c714ccbdcda12e1e87e5a0cc7085aecf1941f117ac709a29","first_seen":"2025-09-08T01:16:02.854893Z","last_seen":"2026-03-10T14:14:49.239767Z","times_seen":35,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":878,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/binance-coin.png?1771947789419","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:09.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/binance-coin.png?1771947789419 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 12869\r\npriority: u=4,i=?0\r\nx-amz-id-2: p03PKWKucB7cgEqrGpfwZP+tF0NDFzZb3buXNX7eY68JwlT1RauZsERzoLguvGCoQ72+VltbMW1XimiyHHJCNrRn1LukvUiJ\r\nx-amz-request-id: DY4J2093VJ14RBCA\r\nlast-modified: Wed, 26 Mar 2025 12:12:20 GMT\r\netag: \"a533eecdee5a789e7d94f8f79f95d588\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IF9Uih%2BJX84llFGfcevgEdQZvKr7n%2FzWkdsbw2ki8uUl8LNeyXudM8kmQJqsx3oaCIzbFZX0gKRRvl2OvK0zT3ImR7gGBdWWmZH8A4WNRmh0BFWTmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013b40f845868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-06-06T04:02:55.266893Z","times_seen":677,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":541,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/lever.jpeg?1771947792745","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/lever.jpeg?1771947792745 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5326\r\npriority: u=4,i=?0\r\nx-amz-id-2: VTwB64slZgFpPUI/5ZbmB7ZwVUoOBWr8u+lv6r/E8jr1RFNAkv+8T6rImMfQ51n9pCRY2Cb7W/B5YOrsuf9iR3qQKtnzLx9u\r\nx-amz-request-id: JBR72MTN0AAZFW5E\r\nlast-modified: Wed, 26 Mar 2025 12:12:21 GMT\r\netag: \"c58f4c5b071e5912836e45c01afa9e03\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ea10356f413860e7186404344d50b9516f8e0fe1317df7d53fc81ce81c8e7bb3\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LfYBoC%2BeypCc1oVqaJdSpqDAW%2BY20MlJ2HO72%2FOL39cqklityK74OJU%2FzwD49azj9z5c8WzRrZ5csZAfPxF1JIuimu%2BCgV3aaNmaLs6KwlgNEHu6Gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8d9b65868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3","md5":"c58f4c5b071e5912836e45c01afa9e03","sha1":"b6f7e2a28f9041fac42acd69b8713fd811ea9ea5","sha256":"ea10356f413860e7186404344d50b9516f8e0fe1317df7d53fc81ce81c8e7bb3","sha512":"d61e62b7171e37d01a1453feaf4685f922dad6afe642d687afd248eda211886d2b75d3afe06dbe9fc5bcd483a28cfe3f4541f0a1af9325c0a3c0163bb74a29dc","ssdeep":"96:emHUsasfObCPgp0gc3oj3OSj6rTvdv6OzmrzobXdslboM65PHMZ1:uJO1Yp0gtjhjIvdv6OKrzobN465MD","tlshash":"c3b16d72b762d9d8c519e1f1da024ba2600d6e7b01bf9cc95f6d1d9119f4081cb813cc","first_seen":"2024-06-11T12:53:28Z","last_seen":"2026-06-06T02:42:02.424636Z","times_seen":266,"resource_available":false,"data":null}},"time_used":1784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1440,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:00.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Noto+Sans:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 24 Feb 2026 15:43:00 GMT\r\ndate: Tue, 24 Feb 2026 15:43:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b75d27687a21c4b72f4989a39e5c7264","sha1":"f6ed9fbcaec50bd8aa5e887db9a9a84163f04110","sha256":"cf3312886f57bb7a94363d780e242890d34ea132e33a55c005bc35b4343c2e56","sha512":"53fbf921dc3be172163a0bb72d7507111d8dc1d6e9af731b6f0a84d28445af5c0785e2ccd9997f5a221b6d24172c1b80eecbb09a47558134e80ff371f577a29e","ssdeep":"96:bOEbaqLOEbaCFZyOEba/OEba+OEbax3iOEbaIgOEbafJc+umOEbaTN2OpbaqLOpB:Mq8qg9x3xI/7WSqRbVox3cIO7HC","tlshash":"e1d1caa8805bc484ba434cd637df7d36ad1f61212454d27c9bfd59989cabc39433178e","first_seen":"2025-09-11T17:29:37.380652Z","last_seen":"2026-06-08T12:18:44.772547Z","times_seen":14185,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":143,"dns":41,"connect":7,"send":0,"wait":38,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/ac-chat.js?2.0.1770644385209","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:00.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /ac-chat.js?2.0.1770644385209 HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pE%2BysmzO3NWImUZiGcJEiBAq2GPAbUaoQkjozYFlTPNQm6iheZsU0sqPGb2T8zUrhjeSJM97f3OmJ9blrKAOfyQpzZ5HYpYTyhuSe83K\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6989e39e-979\"\r\ncf-ray: 9d30137c39c65868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2425,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"1876b5ed96b30caadd25965563a59434","sha1":"12ea862fa74ece93342e453697caec412e67938d","sha256":"de24d01af18e56461133a28c1f19bcd3c242ea7296ff07b722ad6d6fb5dea7bb","sha512":"c371ceeb7e78575b310225f270808992b7e036490ddf13bd9f1074f30edaa9a8e5fefe87ad939184442f9876220ed9c4f76539335bc84461d622234d6ebc5c23","ssdeep":"","tlshash":"1241afab47790224c20b11f72d4650943232a01faa0a1d3c79fc60d8ffaab7555e1ff9","first_seen":"2024-08-19T20:18:19.588895Z","last_seen":"2026-03-19T19:46:55.449931Z","times_seen":19,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/index.c3b67a87.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:07.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/index.c3b67a87.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/assets/index.2906993b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:07 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmu1Va%2BdzNK3iD6eOWiAa7CaN9GatJtvLbgwMXf3aM0tAKi2vnL82MHQyGUVtYU59MNZGRrX3p7TEUeWXUdxB%2BYF4sbbrkTWDXZJ8k0q\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e3a1-6c18\"\r\ncf-ray: 9d3013a63e7b5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27672,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27671)","md5":"8a3ceb403b0fe9b80866ab36b1d75d6d","sha1":"64cdfb78c70019f722aeac69dc7ba55c09829759","sha256":"b968345fb7d8056edda869379406fd06489c550b906ad8c5eca970ac0877a858","sha512":"932870bd1659f18e04c99ab337f5de9d065d4737c0c7e4783854d01cd75c095caf9b475d99f00d9a501b4fcbe246a560f8b4a592a006f0d9c36027c925c4feef","ssdeep":"384:rZMLhlYcCG0XS/s+yucXfwnWJoUosg1xrCeRRcXF4OP2hoW4IHTGPPs:rZMLXCRC0jWWKUos+r1R6RP2hoW6PPs","tlshash":"52c23fb5f92a8978f1b78951105c3509314cffd381508693b6fc2a199b93dbc378eb2a","first_seen":"2026-02-24T15:43:30.926206Z","last_seen":"2026-02-24T15:43:30.926206Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/resource/images/common/home/Selection-b.png","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:09.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /resource/images/common/home/Selection-b.png HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 6865\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=4,i=?0\r\netag: \"6989e39e-1ad1\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQbRUGbyDWeLZBFV0nJCZQUq2g%2BAsckwjuVv90fyQegc6EE0mCCDUjrb8dMMeLS%2BHTPpUwhpZ%2F4g8AFM%2BUcBhiilrGGFoY7gmWFZogJN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013b47fac5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6865,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"780fc0bba0436d2e007810a0ab31b50e","sha1":"a8aeac9b0b51d65393aaea9dbeacd6c281cfcc64","sha256":"4bd0177dc9f6cfbfab5d3df02ec5bb397b1410cdaaaea2dab787e54e30a3ff3c","sha512":"98a4061779796f16b22fb27dbab9fbd2e1c13ea3aac362e9db0f1062f2f5292f568ff1eaab9ac49528922ec842c35fa16e0a80a8bd4edef1f41b5c613290f926","ssdeep":"192:IjMvFrdgXf5H6fSoOOgZPAsps7URrsphkuD5HFlJiCCF0Soa:IIvxdgXfwoBaU1sbbD5HFlJaFCa","tlshash":"1be18dc00a1d9e9aa83f7cb5089606a24790752b62d66aa65dda86ea30f9c34244c397","first_seen":"2024-08-19T17:34:46.61216Z","last_seen":"2026-05-04T13:27:14.836435Z","times_seen":77,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/platform/Bifinance/logo_144.png?2.0.1770644385209","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:11.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /platform/Bifinance/logo_144.png?2.0.1770644385209 HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 1557\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=6,i=?0\r\netag: \"6989e39e-615\"\r\naccept-ranges: bytes\r\nage: 8\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SdW%2BoRNH63i%2FaoXR1DtdEIxYz3HRdLofiZmhfJ2%2BSwiYwwxDwoikl8Qg3PgxLD9kYYRjX9oS8xRcKuqwtREXCCgqlx9N4J%2B1VDLZbQCH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013bfb8c55868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"72cab663cac200ac4517916327aa0fe7","sha1":"2a44a780605f2cf10062d591cb3ffc2e58ac817b","sha256":"9f774bdb23d7eed7bbcaf449b11d1d98b368d2b1e5373258d0004458c878c1f4","sha512":"5cfa9af476d5b47b7d7819a2afac0f5b8ad1604852c047246b6339ff0536677decf1f75356aadb995df94632a6ffe48499add0504859f69388d85263696a3054","ssdeep":"","tlshash":"0e310a5247ad25fbed0e02f929909457b5886696daffd2754b8fb3e7509121c4cc4202","first_seen":"2025-09-08T01:16:02.841821Z","last_seen":"2026-02-24T15:43:30.878303Z","times_seen":25,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/index.c3b67a87.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:11.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/index.c3b67a87.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bifinanceb.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:11 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQ7pbZuKqdWRq1%2FTjkH4MjQcvaKmfjM7B5LODEQBdJ3fpnTMssl6XPjAc7URevrOqMnkPWayH2SghTzmC1C1obCKUmOfK8u19VY7DzpC\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e3a1-6c18\"\r\ncf-ray: 9d3013c3f91c5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27672,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27671)","md5":"8a3ceb403b0fe9b80866ab36b1d75d6d","sha1":"64cdfb78c70019f722aeac69dc7ba55c09829759","sha256":"b968345fb7d8056edda869379406fd06489c550b906ad8c5eca970ac0877a858","sha512":"932870bd1659f18e04c99ab337f5de9d065d4737c0c7e4783854d01cd75c095caf9b475d99f00d9a501b4fcbe246a560f8b4a592a006f0d9c36027c925c4feef","ssdeep":"384:rZMLhlYcCG0XS/s+yucXfwnWJoUosg1xrCeRRcXF4OP2hoW4IHTGPPs:rZMLXCRC0jWWKUos+r1R6RP2hoW6PPs","tlshash":"52c23fb5f92a8978f1b78951105c3509314cffd381508693b6fc2a199b93dbc378eb2a","first_seen":"2026-02-24T15:43:30.926206Z","last_seen":"2026-02-24T15:43:30.926206Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/solana.png?1771947792737","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/solana.png?1771947792737 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 25649\r\npriority: u=4,i=?0\r\nx-amz-id-2: MFd0CWDZ3NgmuJPeOmHL1/vOi072oEB4wL4OUriPusg12mSQWGMGmptp3xVT/NBXu8yq5MCxC3SUBZOEqxijWDE37DqrWypZ\r\nx-amz-request-id: JBRB08S3FKRAZ2W9\r\nlast-modified: Wed, 26 Mar 2025 12:12:22 GMT\r\netag: \"670c723abc22056bc5368ca2a97dd6a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F7MjDXMAfOs2kHyoVYbDfCLGGij5tWO%2FLHiuZLlH9qTje9erm5HPJi2HePrm53Fg3sNtdK5mx6W%2FUW8nf%2Fj5MvqblMdk3wUV%2FfQVJnSgC%2BbeBbDggg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8b9ac5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-06T04:02:55.294395Z","times_seen":678,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/USDJPY.png?1771947792750","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/USDJPY.png?1771947792750 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 25062\r\npriority: u=4,i=?0\r\nx-amz-id-2: U/wsM9LJCNAadflFL/G0mq9PrxCrqTUtK3p/tGSPPb5cgfAl+81UfCTCQfGH/mWuEluxHsY6N1OVVXhEN4Dt0Z+WW2nOejha\r\nx-amz-request-id: GDXXEJF53ZTM05B7\r\nlast-modified: Thu, 05 Jun 2025 09:06:24 GMT\r\netag: \"957d9475c8a72612b60beddd635237d2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ec29f475dbb7ee9804005bfe356ad41b5e81b4ba0bd5a9c44ce55f4a4b9690a1\r\nx-amz-meta-s3b-last-modified: 20250605T090422Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6JZwuiK%2FLng6Bs9rd9%2BgjrMnWt0htBOQpljGMAfKggxTCwTM8T0bhLrE7RjzNPkLxP%2F%2BNxxRHTv%2BuEpxOaB18vOBcT%2FA3L7dDIpY6m1Pi6COUphIFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8e9ba5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25062,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 742 x 401, 8-bit/color RGBA, non-interlaced","md5":"957d9475c8a72612b60beddd635237d2","sha1":"85acabab052b6c27e78f7f032914431ed2f884cf","sha256":"ec29f475dbb7ee9804005bfe356ad41b5e81b4ba0bd5a9c44ce55f4a4b9690a1","sha512":"20febabd5fc156be3404ef0735ab1a75885acecd8380758ec34ff527ae2beaac494a2343601dd176aaeb083a9093c1a0e5ce813e1a0873e678ea65b3227955e1","ssdeep":"768:QdxKEEehqrZe6JizQSbom7daCNdfRN74uvwV38k:QdRE9r8zzQIRQCb/vwV3Z","tlshash":"6bb2f17a2f0c11ec169ec3f4f601ac6093b25e0854e276c14abb455ac5782ad3717b8e","first_seen":"2025-08-07T21:15:59.961262Z","last_seen":"2026-02-24T15:43:30.916977Z","times_seen":28,"resource_available":false,"data":null}},"time_used":2182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1524,"receive":658,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/XAU.png?1771947792796","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/XAU.png?1771947792796 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 743\r\npriority: u=4,i=?0\r\nx-amz-id-2: dCjaJBWX+m1Jz3PvYNTUU+5Pv8AKxaH6ZyjqAzu34yZH69fs3MbuCbiFQ8YyiMFlXL+pnPHacsVwii2CIgqJembdDC6F9LK3\r\nx-amz-request-id: JBRFEAGDYYVCBD9J\r\nlast-modified: Wed, 26 Mar 2025 12:15:36 GMT\r\netag: \"05921b19d3be159b68972189c3f45773\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 0a31970641800f15755481368d5c2822ae1bf0ca87a5e934b5c914002b003dc7\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4q%2F3qv%2BZ0sgR9x2QGaUzfAI9utCAZ5jsjBn6NUfSx2oOJYg2Na5Hjk35B8th5RzNEwEYbK3g0If4j2dy65OqnA2z2c7T2t9i7b9PvoFDNUVtT5hNfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c949d45868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"05921b19d3be159b68972189c3f45773","sha1":"d477258c74a875bcdfa51090868782d73fc54db8","sha256":"0a31970641800f15755481368d5c2822ae1bf0ca87a5e934b5c914002b003dc7","sha512":"2157eed35a12d20c87ecfbb4c209c36b160a95d9610897b449c9dea16966a98b194c50070865e66ef54a6e8b61052d312dd56905fb396bd4ba93683341b8eaa3","ssdeep":"","tlshash":"c101e9631ab0ec4bc58ee430c1f75464ae1104a3008aed63d80fcef14d30387f2060c9","first_seen":"2025-06-23T17:22:26.242858Z","last_seen":"2026-06-05T10:33:32.145396Z","times_seen":67,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/XAU.png?1771947792753","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/XAU.png?1771947792753 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 743\r\npriority: u=4,i=?0\r\nx-amz-id-2: 8zpKKiijN5nyFPvfUdsDtTxiRkOlgg2lOXfk/EncSwvRHsC+B+LfP274fbRvLXwZ1lPvIN7H3BSNrG6A2HEhweycytZqS88G\r\nx-amz-request-id: JBR3FK2PM23BR8QV\r\nlast-modified: Wed, 26 Mar 2025 12:15:36 GMT\r\netag: \"05921b19d3be159b68972189c3f45773\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 0a31970641800f15755481368d5c2822ae1bf0ca87a5e934b5c914002b003dc7\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzU%2BjJzHuQ8pBYlbx66b%2FtrLDumpsVuWYzUU9EVCsDEvATa9ETUcB79IgUHwHlsUNlhEnFX%2FqC%2FsFCf71gpucqlEN7RJpeOGC8KAMmxqmh4Vv5Lf0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8f9bc5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"05921b19d3be159b68972189c3f45773","sha1":"d477258c74a875bcdfa51090868782d73fc54db8","sha256":"0a31970641800f15755481368d5c2822ae1bf0ca87a5e934b5c914002b003dc7","sha512":"2157eed35a12d20c87ecfbb4c209c36b160a95d9610897b449c9dea16966a98b194c50070865e66ef54a6e8b61052d312dd56905fb396bd4ba93683341b8eaa3","ssdeep":"","tlshash":"c101e9631ab0ec4bc58ee430c1f75464ae1104a3008aed63d80fcef14d30387f2060c9","first_seen":"2025-06-23T17:22:26.242858Z","last_seen":"2026-06-05T10:33:32.145396Z","times_seen":67,"resource_available":false,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1037,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/resource/images/common/home/Selection-b.png","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /resource/images/common/home/Selection-b.png HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 6865\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=4,i=?0\r\netag: \"6989e39e-1ad1\"\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBnO%2B4bMEm3qPh23yuPZsK7d48sTRN%2FSh%2FzMY4cMumUKqUcVDb01d8vc30NmYoIHAPBrldljYmjG%2F%2B5EDZ%2BJCyjLtLeyPJmy6jq9kxfd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c959d75868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6865,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"780fc0bba0436d2e007810a0ab31b50e","sha1":"a8aeac9b0b51d65393aaea9dbeacd6c281cfcc64","sha256":"4bd0177dc9f6cfbfab5d3df02ec5bb397b1410cdaaaea2dab787e54e30a3ff3c","sha512":"98a4061779796f16b22fb27dbab9fbd2e1c13ea3aac362e9db0f1062f2f5292f568ff1eaab9ac49528922ec842c35fa16e0a80a8bd4edef1f41b5c613290f926","ssdeep":"192:IjMvFrdgXf5H6fSoOOgZPAsps7URrsphkuD5HFlJiCCF0Soa:IIvxdgXfwoBaU1sbbD5HFlJaFCa","tlshash":"1be18dc00a1d9e9aa83f7cb5089606a24790752b62d66aa65dda86ea30f9c34244c397","first_seen":"2024-08-19T17:34:46.61216Z","last_seen":"2026-05-04T13:27:14.836435Z","times_seen":77,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/resource/images/common/home/Selection-c.png","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /resource/images/common/home/Selection-c.png HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 5088\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=4,i=?0\r\netag: \"6989e39e-13e0\"\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fUYqzkmOv8DZo0IptfNhPVcNw4utX71G5Gs7iOVEn24onJUpdAxpzGAk%2Fwm1xX9HQL6mA0s3A63qHsDSq3fSgSNDv89BJpHdSGd1oiOB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c959d95868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5088,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"c1e0cfa54461cfe2003359fe589984dd","sha1":"fd82904639342a643be65d67f8a24c5d16e445b8","sha256":"69e6f084038fd9c2196d3349b6be282bb366b9b47c5dfdb07b917a4956eb79fb","sha512":"dc0feff751431464fb48d538ac9dca32103da30c468e078100a2625ea616500cb026aa75a54c1450ce37539a93dad647a82a91e7bacf2f7dad9b9f4e639e73fa","ssdeep":"96:Y3l7a2ASmDfKAw8m2QCvNLPHQt2sotAi4EbsxVcgqiT56IaZ/IvEKdRh7zUt2:YFyPmO1Q2Leilb6F56Z3KRI2","tlshash":"15a18f7b6ce42c16cf86e6d90f86130c2b94c06f01586e13541eaad90f708f8329e709","first_seen":"2024-08-19T17:34:46.646268Z","last_seen":"2026-04-08T14:39:00.884363Z","times_seen":77,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getMt5Amount?coin=xag","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 3\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3,"data":"xag"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B1hYvrjFlUcyH4tbQf1EYC0zLuNYnHZwROEgTK9bi8O27hIw1F%2Bdu3mU1UwFaRENF0gYVUt2qnjm%2FOzgBxgY1Y02oSt9Q1DyIeEX0zzpSaJYjQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c989df5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b36b1b37ca50a43fb3744ec3372559ff","sha1":"7200cc9c731a214487186f09d4a6a0e51eaf9ce1","sha256":"edf68e4818cb1bfe9e843b41179e7d944ec237a48321b17350d27a95176bac0d","sha512":"9d52040ba99c4952c18bb2822173137e1e0d6a5d1c0ad4b2b85e7aaf9bd4a027f0eb82a004764a61b4bb0be69c70ada3dbc67868e1090f8a683b198e2231510e","ssdeep":"","tlshash":"0e9002555c298282a98304a595169244002431603635e2488d59512680881622040c58","first_seen":"2026-02-24T15:43:30.936877Z","last_seen":"2026-02-24T15:43:30.936877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:00.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Wed, 18 Feb 2026 09:37:23 GMT\r\nx-oss-server-time: 4\r\ncontent-encoding: gzip\r\nx-oss-request-id: 69958853E702E230368F185D\r\nlast-modified: Fri, 06 Feb 2026 05:58:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10938694382152741707\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: I5DtNpUGcEaato6qOAWR5w==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: z05fjWezrAz7E2S8-vUSBySY3-_OKplgQcuNxVuSk-JH4E6CuBO4OA==\r\nage: 540337\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20685,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20685), with no line terminators","md5":"2390ed36950670469ab68eaa380591e7","sha1":"711e527201d0e0be9d4712b3cda75085c70684c6","sha256":"87bfe2adc2bcdc039e5effaf223567652dee32107d68ab6e7b3a8181521106f6","sha512":"838fb858343e2465775cf494439c918b08ef5bdb02eec01c9c0f7ddae437c96548716a057dacdb9181def4aa21f5ba9009e4d63cec11e81246827e86133566fd","ssdeep":"384:dPygzNXbASlySwbgVTiB0WxjyyN1yL1hmGadeBT+SwQU:dygzxLTiGWc3LGdeBT6l","tlshash":"c792194870297cb8429e5a3315fea214307f1b852931d0a0f26ddb796f78e865177ebc","first_seen":"2026-02-18T21:57:56.58431Z","last_seen":"2026-04-15T20:10:01.050331Z","times_seen":332,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/bitcoin.png?1771947792776","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/bitcoin.png?1771947792776 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2691\r\npriority: u=4,i=?0\r\nx-amz-id-2: pf7RvWs5M/XMR3udSCZzpUvKTXuaWqX7xGreGKf7P/DG00h9tkoFNOC4jygpWhvYz9FXL3HIlpWHrg6Y8fINrC1+gVSwAj5S\r\nx-amz-request-id: JBREHYHYMGCJ2ZD4\r\nlast-modified: Wed, 26 Mar 2025 12:12:20 GMT\r\netag: \"2edf1ef8b333c40979976d1a49bc234c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9\r\nx-amz-meta-s3b-last-modified: 20250326T121156Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SES5WF9mF%2Ft0MHKah6IfnQgvh8zdtp0pUWJiec3Wcagot46gPhpEK57Irfk1MLzamCJ0RhT1jou0QXsHt512lhpqZcShMYLhAczRtwbyWKVm%2BJ53nA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c929c15868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-06-08T12:06:52.102307Z","times_seen":21671,"resource_available":false,"data":null}},"time_used":1233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":610,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/resource/images/common/home/Selection-a.png","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /resource/images/common/home/Selection-a.png HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 4030\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=4,i=?0\r\netag: \"6989e39e-fbe\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0pbinFfWCvz%2B70JwFxOfGsWWc%2BRjqeRc9sx59P2Wh2NFNvzkDYAbqUdts2jBqgThjknOWSvwsSAI2f5FR0tDYvF2GMZN6BdqX9kJeIdn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c959d65868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"d41eddbe11398decb778d09c35fe7c34","sha1":"5f81f58df40d09a3b8cfe3707ad3fd451c7e6859","sha256":"381aa09f34edb9c8ff2d3fb0ff09af42260fefc41c48a8e03ab14a9f2cd849a1","sha512":"e8da5839ebe24ef89aa2c7c15968a4a589303a2303329f20f44f360b62de3182cd0a431811297da1279d76cd2ec0c05da4ed13e1b587e35ba75a7f6cb3de30b2","ssdeep":"","tlshash":"b081807b352c750dcd2510742761408dc27229301ddb1079aeca6d42bd7297577603bf","first_seen":"2024-08-19T17:34:46.654099Z","last_seen":"2026-04-08T14:39:00.88165Z","times_seen":77,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getAllSetting","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://bifinanceb.com/\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 24 Feb 2026 15:43:07 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7YoefWkR7TJPTuZdQiOvrpfrUVMqryOFnOfzpLlqyI2agOQrUKPn83ASA1TUUhht6jFe4iDA%2FBWvPxbBWjEw7CuarpHvmKs16ffBrOIWha9FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013a29f45902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":34,"dns":0,"connect":8,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/vendor1_b8775aab.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/vendor1_b8775aab.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 03 Feb 2026 09:37:22 GMT\r\nx-oss-server-time: 4\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6981C1D223193835354702EC\r\nlast-modified: Tue, 03 Feb 2026 09:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15305004930386263030\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: TdEL+eOlXQT7AtB2+NiI/Q==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: BNo8AOFl46U6osk0ssqIMBivPTH1CNHc6UuvISX-ReHjYahwEPIL3w==\r\nage: 1836343\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":225000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49155)","md5":"4dd10bf9e3a55d04fb02d076f8d888fd","sha1":"73fe2ade639561e0fbee753a10ab3a8f64457ba6","sha256":"9b5cc937de300ae7ed821b3c25405086cd9fc0c25be5f6afc2213b06d1981408","sha512":"768877b7f6860408251dfc60ac57ed4499ac9ff259f506f98020a848b1f8dd67378758074406603c95d98bfa621d4d451d9a941f9932c2bc9ecfe1eb9e69f9ba","ssdeep":"3072:hUj1XOH0ipFe9OY0ceCK7KtWO77yzk83UzlgE6CjnWO:2kHbDCK7gf7n85NO","tlshash":"b22408c8b295b06143a770b4407f550bf13ab915680ec5a4f226e8da7cbc98e907bf7d","first_seen":"2025-05-10T22:57:10.916725Z","last_seen":"2026-06-08T11:51:53.409249Z","times_seen":2437,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/CommonMethod.114960bb.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/CommonMethod.114960bb.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/assets/index.c3b67a87.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4f7xkfbU%2BRQ89WWeZzd%2FIcwxMc5VE9ck2hI9onaOEq9y6q9HSoeRy%2BSsrpHlDVLLRHZ20qE8i8B36sXpcQ0XcVudmbo4vcaD4rVdSKcE\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 5\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e3a1-367\"\r\ncf-ray: 9d3013c4a9305868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (870)","md5":"c856833e2531708f2d446006311f9761","sha1":"4354eb0703575b84e93d451bb887e25af6996bae","sha256":"8b3cbf30fe1bbdd8b62f27d49be7118f49f4925dfb858acbef4ed1662ebda46b","sha512":"5f5e56bf5786e62f9c1eb0bef0e3692a6cb13276c537807f2c99341e640b17733e7abd41742551c94bc05d9f93a5e6bf337e224863664f6d27e08eee8de7e415","ssdeep":"","tlshash":"0911c0d0e48dfb2d0368df65a1248033f25d58b51f288368d0f95d657b29449b79ea30","first_seen":"2026-02-24T15:43:30.888617Z","last_seen":"2026-02-24T15:43:30.888617Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/coinInfo.png?1771947792783","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/coinInfo.png?1771947792783 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 55728\r\npriority: u=4,i=?0\r\nx-amz-id-2: r85r3VLlHV0H/EI5MtozXEzJ0HGRXNkyWsnJ3ivK92UWypTcoY+e468NL0sd2ig0/vSwMtMuETuifBKfpebRaS6IeVB3GJt9\r\nx-amz-request-id: JBR7B9GVR4NYNYB6\r\nlast-modified: Wed, 26 Mar 2025 12:12:21 GMT\r\netag: \"48384a67185dbdfeef3aa43c99d3319c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IRDZuhYEUV7W3vEp3Coerhrant9OfbCG8Y5T2nRNqyfgKXfyvKQWCB%2F2S9e1dJrvZEwKZsm4z06yuGiNnPeuuHh%2FunPHPXmR2I4DMcC5ZiKITdZISg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c939c95868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":55728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-06-06T23:47:44.168837Z","times_seen":643,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/option/rules/list?key=EXCHANGE_INTRODUCTION","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:13.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"OPTIONS /api/option/rules/list?key=EXCHANGE_INTRODUCTION HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken\r\nReferer: https://bifinanceb.com/\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B9Z6tjh1iZUzMMi7koip1QIMlJKNgy86KEatLJoXZbkVzTN2pmSbtTJV6r4zeu31kItkAgQW5b7NGvoIgjs7AjTKlochdwF7jJtDPSVlZJ6ijA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013ca69fe5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/core.esm.b4c18107.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:07.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/core.esm.b4c18107.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/assets/index.c3b67a87.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:07 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQkRuUrujf0hBBOt6sGCvcdrQyv2ucHnJ2sGcG4H%2FcmGg63pQi0YU70tJMH1iUea0fuk%2Ba0liWLoJt8ClP21t%2FQw9YKZIEShVWoO42aj\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e3a1-9e43\"\r\ncf-ray: 9d3013a66e7f5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40515,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39692)","md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-06-07T23:37:29.551901Z","times_seen":64,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/charting_library/charting_library.min.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:00.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AqSC0njhKZTfiBrBPCEXeJdBh8zTyb4k77BSPJXzxO7OO7FlC3Ir2tyc%2BoZbLbnuPrM7fnm9%2B1Bq88aqSPEvbkqH2nfy0u3toQcqLLD3\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6989e39e-2a6b\"\r\ncf-ray: 9d30137c29c35868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-08T05:16:21.679615Z","times_seen":1000,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getAllSetting","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:07.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 15:43:07 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c8za9TbCfJz7%2FFRkdVifCp8btYuUjRbj7cbt%2FoUG8ZLdRWom4dZbHqsSto99U7huw3lCTAKTkjd36jnUpWcnpc%2BlMDpxjNLXqiia0hJqQ4f%2BYA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d3013a5d893902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11474,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fee7030e588dc876f239559e49bad5b3","sha1":"64267261d25de8b24b938f80b0d5d6b92c99810c","sha256":"b49d5b5a22863bb263483dcfde588e1092532ef2784968c172cb7a8e8e4e02c7","sha512":"cb9f9d3dfcbb18a9e2d2cd2e505d6f143bd7fcbd4ebf49c2c247d6207ed30a1b5d370fc2154cfcd43b9e9dc13d779b1f2a5b38b059dd54787c7502b5d4cba2ff","ssdeep":"192:HAnwC0/l/fP3zzvNVehP+dCyoG+cExun2Ny5ztZipX2TJ/B59I662sReD1iMNqQM:n9Hv/p2u8d8EP2LD4MPS0UPDp","tlshash":"7832441830ecccbdd9d725c690e7768637ac25b3e658ac1ad4eaef1c4ad7570480e10b","first_seen":"2025-09-30T09:28:30.387639Z","last_seen":"2026-02-24T15:43:30.940636Z","times_seen":8,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/coinInfo.png?1771947792739","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/coinInfo.png?1771947792739 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 55728\r\npriority: u=4,i=?0\r\nx-amz-id-2: /H11r1CwuAPPjN3nNeahwz/0ICWd/IJKjguQ4oqRpmv98meK71ywQ5as5hOByOnbJGJfaNW6comTeijoqa4Z6H225Zkq0+vW\r\nx-amz-request-id: JBR4VQC0X6Q3TGHS\r\nlast-modified: Wed, 26 Mar 2025 12:12:21 GMT\r\netag: \"48384a67185dbdfeef3aa43c99d3319c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FdhPD3E35bsUImA3iGi0PL1ysZPMv%2BWWMMn%2BOTESzbGp%2FeDXS0Wr13O1uBgsstc0%2B1HVanwnYjLD2SPau2IuIodPQB0UUbjMwui6tg8jAc16sVOLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8c9ae5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":55728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-06-06T23:47:44.168837Z","times_seen":643,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/platform/Bifinance/logo_144.png?2.0.1770644385209","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:02.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /platform/Bifinance/logo_144.png?2.0.1770644385209 HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 1557\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=6,i=?0\r\netag: \"6989e39e-615\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeeJOJzNsb5aNx0EazjOjWuTJuHZileO1o59Invz1lEdDWUzFuC8IfZ6Spatqm8BXqM9ZOFt9kkkt9PKz4Kc3cq2no87iv6OisPiNP%2Ff\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d30138b6b205868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"72cab663cac200ac4517916327aa0fe7","sha1":"2a44a780605f2cf10062d591cb3ffc2e58ac817b","sha256":"9f774bdb23d7eed7bbcaf449b11d1d98b368d2b1e5373258d0004458c878c1f4","sha512":"5cfa9af476d5b47b7d7819a2afac0f5b8ad1604852c047246b6339ff0536677decf1f75356aadb995df94632a6ffe48499add0504859f69388d85263696a3054","ssdeep":"","tlshash":"0e310a5247ad25fbed0e02f929909457b5886696daffd2754b8fb3e7509121c4cc4202","first_seen":"2025-09-08T01:16:02.841821Z","last_seen":"2026-02-24T15:43:30.878303Z","times_seen":25,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getCoinList","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nSatoken: \r\nlanguage: ja\r\nlang: ja\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jw%2Fk%2FWEOdwLdFWn82SaqzvldFo9a0TVsrH40A1Vo17fRNmvGEyeuQ7JFEFoQwk6XWUNcIRxUfqamYR4C6NzCfHW5404IEJGNGJ2RSGjj3P3rPw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c4f9365868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28052,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (28036), with no line terminators","md5":"e340ebf53b14c5d822819011a36cd74b","sha1":"d0e025083d2c5e9497d6a88a09cbf53d80372f95","sha256":"ce125094c27a4ab9186f09607495e7f7a819a7367d66ee1435ffeeb0915437ef","sha512":"30106dea4ee2814c8743c30b2b974d1175d94b3b38cd8bba7823f4b59d1598e5740ce7ad697a56b2eebfc43cf63b0c48074152485939f3c3709114e570904754","ssdeep":"768:k/mZqNqMKMrtmZx+8ALfQf5Yc1biz62u+IPj+3U5w9vIhgMejaSRmZCA:k/mZqNqMKMrtmZx+8ALfQf5Yc1biz62K","tlshash":"21c2f055122ca5fdc939d0d11ebf7d16559c356fecc98d2ac2ce8d8c8ed4ab06a0af02","first_seen":"2026-02-24T15:43:30.942267Z","last_seen":"2026-02-24T15:43:30.942267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/usd-coin.png?1771947792785","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/usd-coin.png?1771947792785 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 11982\r\npriority: u=4,i=?0\r\nx-amz-id-2: 93T6FxvkCe0MnmyyEYVYeiF+Cgl/bNOEfYKo7wGIqTIH6b1ocdqYqtdSLId92taIDaNwdM4A3UKOkI3hxV5iiQkB3TADU5M1\r\nx-amz-request-id: JBR23BCV5JMCXYC2\r\nlast-modified: Wed, 26 Mar 2025 12:12:22 GMT\r\netag: \"190b493fb7b46d34ffce08977c9440ad\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f65ea1a4d3a2145003bdff208815186e307bfa28f607719cfe23619eb0947ab7\r\nx-amz-meta-s3b-last-modified: 20250326T121158Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGux%2BgzaubDuZBMrdilepGo%2F8eIC45C5XPutP9GXMHI%2FJ3l4Ulw8GZZ8%2FQQSJfqPVb86v128UbAu3QnIeSrJnpQW6vexvXGVtCgT7pZt%2Bk2Y%2BJchHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c939cc5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11982,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"190b493fb7b46d34ffce08977c9440ad","sha1":"cc39546ca0be2103d25ad0566c5b1a85dc868045","sha256":"f65ea1a4d3a2145003bdff208815186e307bfa28f607719cfe23619eb0947ab7","sha512":"a9711883bdbe3cdd869c7beb9bffa914d51125a7a723c4de256acd820d36eef3f54fc5e8af515c10cc7941c28e8ec3ee42943cb31914a1ca7166564970056e9c","ssdeep":"192:ayxQ0ZUzIx9hfTLf8iyKmXyI0R4I9gTkoa6bPrTxZqf09/9xX1EpqWhg+YUrrCXg:BBT9h7wi2OR4I9oagzTxZB9lxF4hgFUz","tlshash":"9e32bf7b1371c1e03965e36c995164b9358aac0fb4e0d5345ee172d83b2afab07a8387","first_seen":"2025-07-27T10:32:01.602974Z","last_seen":"2026-06-06T18:41:46.419968Z","times_seen":59,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/option/rules/list?key=EXCHANGE_INTRODUCTION","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:13.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"POST /api/option/rules/list?key=EXCHANGE_INTRODUCTION HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: \r\nSatoken: \r\nlanguage: ja\r\nlang: ja\r\nContent-Length: 31\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":31,"data":"{\"key\":\"EXCHANGE_INTRODUCTION\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OBowcFvso1kXZBsgmOuA3mX2U%2FqbEstgAyYhCu69Fe1lFM5lwGW0DJ%2FhpsMTEZ7Hy2BS%2BCVQUtTn1FFoV47imF41w5KjiEAfNw5R9YN43CtwBg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013cd2a275868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1b9a855123642275de337222b9462a9c","sha1":"794ad693eff3361a9c3bdccdd9911f04dbc96571","sha256":"5271e09c2aaba2805fc2f178cddc490385076f5e0eba9f6f30b80fa4395bb747","sha512":"d828b8070062280681bd994823de7c2e0fdda2b079d5da88a0fe8a9466da3555503873f52292e7d830ad47b762067f3faa146c14eb6d79544c70c1d653013056","ssdeep":"","tlshash":"459002551c189642a88300a9d506524400243160263492584c59512581881622440858","first_seen":"2023-05-12T20:49:51Z","last_seen":"2026-06-06T04:00:03.346435Z","times_seen":257,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/resource/images/common/home/Selection-a.png","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:09.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /resource/images/common/home/Selection-a.png HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 4030\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=4,i=?0\r\netag: \"6989e39e-fbe\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0WZkAmF5knKRc0I%2B2pumU3cws6Q9XHVsfX1ggQemMdQsWvYBMC3IPVPMP83Ekcsd28kXs5YtHCVGHFCbRYKuyEGFWDIJll7cCBYLJGs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013b47fab5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"d41eddbe11398decb778d09c35fe7c34","sha1":"5f81f58df40d09a3b8cfe3707ad3fd451c7e6859","sha256":"381aa09f34edb9c8ff2d3fb0ff09af42260fefc41c48a8e03ab14a9f2cd849a1","sha512":"e8da5839ebe24ef89aa2c7c15968a4a589303a2303329f20f44f360b62de3182cd0a431811297da1279d76cd2ec0c05da4ed13e1b587e35ba75a7f6cb3de30b2","ssdeep":"","tlshash":"b081807b352c750dcd2510742761408dc27229301ddb1079aeca6d42bd7297577603bf","first_seen":"2024-08-19T17:34:46.654099Z","last_seen":"2026-04-08T14:39:00.88165Z","times_seen":77,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/EURUSD.png?1771947792744","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/EURUSD.png?1771947792744 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 43457\r\npriority: u=4,i=?0\r\nx-amz-id-2: +Awq9dHrLAQWT+MO1d2iwPxq0wg6NTM/FT2Y/z5pN+UV9I8oa/wUE22XmGm9k5WWkbQNEChxVCw90f3pRRnM4dAZauT130DD\r\nx-amz-request-id: JBR3J4G19AZYXVJQ\r\nlast-modified: Wed, 04 Jun 2025 15:01:05 GMT\r\netag: \"3d10fa14d8d07aec6b031221689d850c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: e37da9af0fa1edeaa225d1f88da8a8f4ebe8c52d8374f9778edf35527f1a31d5\r\nx-amz-meta-s3b-last-modified: 20240910T152249Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6iHu9hx4b7tHkA63PuQuPHVZ2LdJd6Y5ag7XwAVlElMhZU2uHd65SwB3TPegPjJ4GXmxSIXGZ71EfjZhmGBea0dAyhw%2FI%2BBjuoQdvuYjmlCbOk5jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8d9b55868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":43457,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"3d10fa14d8d07aec6b031221689d850c","sha1":"aae2675323e43020653a05951644e5d84ece9a5f","sha256":"e37da9af0fa1edeaa225d1f88da8a8f4ebe8c52d8374f9778edf35527f1a31d5","sha512":"28cd6bfb7290220b7dec1ab03574a50f4b924062ebf2013f4d0cecf71beead956cb7a30463b85f2e38ee681083e32925f04ae931e1c04c04208308ae3ddbdcfc","ssdeep":"768:J4HNs8yuhLW2eEdWeRQPFHec/hLzsb+mYdh65sgxhWRyZbV:J4tNDhLZeVWQdH1N4ymY2VcK","tlshash":"1e13f1091c744ab5c969f650de85ca0e8f7bd06365658c8368efe607813cc50ccefb9a","first_seen":"2025-08-07T21:16:00.001965Z","last_seen":"2026-02-24T15:43:30.924062Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":859,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/ethereum.png?1771947792777","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/ethereum.png?1771947792777 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 9807\r\npriority: u=4,i=?0\r\nx-amz-id-2: ZiOO6Kg604NpuJYOzUXfmUJvp4KX6OUglq1CpfwLPABE3L+iSU+KgOBngaXbCDL08s0hGy1yopRPZMOV/vYhPumjuPIuUKV1\r\nx-amz-request-id: JBR7T40MESEKKE95\r\nlast-modified: Wed, 26 Mar 2025 12:12:21 GMT\r\netag: \"12d9722461759cefff02d9076a3d2718\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qiu6nu0Go%2B35oVq6X9z9WD76eU8G5e9ZIrtb1gN0Q%2BEPSAuU7%2FftAeKnXKKB4c1osmY83Oy6lrZ2sQT4RC63UAqWnDm2%2FVoqYRqrKGVns9CunZp9uQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c929c25868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-08T05:16:21.618678Z","times_seen":600,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/XAG.png?1771947792797","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/XAG.png?1771947792797 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 659\r\npriority: u=4,i=?0\r\nx-amz-id-2: dMFBP4N6m0TfVf/qXdI0L0RkNo4VJDl3hXxNaeBRufBu5KduZ4M8O/47Jmg3eO3rg+W6JnYiUt3rfX6U0F9DFfXwj32mdLkZ\r\nx-amz-request-id: JBRBQV72Q4NHRKZZ\r\nlast-modified: Wed, 26 Mar 2025 12:15:36 GMT\r\netag: \"5d36743437c9cab9218922a72775f9fd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ba878334f20401dbccb089792dfebdac5e90f8db1cc2e7c5f5365a1cc58e91f9\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8hgtz7Dvc2h83eWdN4p5sV0k4dkAj3FszIP3x5HUu11ww7SdXYeCE5tGofeXLQGJ3Kbb%2BdFanyg%2BtlWyM63istucgi9g%2FvDUhDHxVrrJgpsEC%2BdXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c949d55868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"5d36743437c9cab9218922a72775f9fd","sha1":"91383aaf31fa9eec0805bbbc40ca5cd0a7753419","sha256":"ba878334f20401dbccb089792dfebdac5e90f8db1cc2e7c5f5365a1cc58e91f9","sha512":"ad6a46a947518469fed771943f64f6ecc450519526e44810ab880872b7a189fe912538699ab50b65ac1521cd45dae7a1b1c542e3771c479d3181649e8ecdbc96","ssdeep":"","tlshash":"2301c88773cf2d28c15a1d63e939bc191573024a5017cf0e86497daed3b3746825f117","first_seen":"2025-06-23T17:22:26.279809Z","last_seen":"2026-05-19T13:29:08.723462Z","times_seen":92,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/index.cce86c6d.css","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/index.cce86c6d.css HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:07 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDZjOe6CNwW61sTPcvr6dV99V4v9B261RuVVx3iSB5b41MFAm7VtiOclCgQXzsMXfZpm6ODo1vNE3rcQjRUiMalPZCN7qzDPou%2FiNOol\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6989e3a1-3a58\"\r\ncf-ray: 9d3013a2de295868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14935)","md5":"a8cef6ebab67bc7923b733d1f6c6f2d1","sha1":"63f242bb8a619329df0175bfb59f0e9b3673ea2d","sha256":"cce86c6d949c42970095bec73c20147d19f59cea45fff4f5905590520f21ad8d","sha512":"8ea233979aa10756b0e2c6a68287a996bce0ca6f19fb0762a12d320a7cd85c82b313bc99fe6466d4d10a9561ef09b74d5abadc661eb6875bbb10ba81f939e9eb","ssdeep":"96:GEE2Z4ATSDr1VqXMPGdLrPmgbOnPUKuX88vHZ8j7W8voSQStltd1kkDQ/UsDU+Vr:hE2OrGXMu6Uh88h8jqWoSQStllbaUyim","tlshash":"d5628348b5ad2136b837e4596d98878e7042fb97880763dddc89a97ecdc3ae32734344","first_seen":"2025-09-08T01:16:02.907165Z","last_seen":"2026-02-24T15:43:30.91424Z","times_seen":25,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-common.c89c8366.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-common.c89c8366.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 06 Feb 2026 07:37:09 GMT\r\nx-oss-server-time: 24\r\ncontent-encoding: gzip\r\nx-oss-request-id: 69859A254BAB5F3438060ABF\r\nlast-modified: Fri, 06 Feb 2026 05:58:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13098974095763120917\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: nV/JYYHW5G0Bnwm00ndSUg==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: LxepPjhNuH8Yrozn0Edb92PY0WJRMn0AzFXi0Z9qwvm-021ONNm-Fg==\r\nage: 1584356\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26864), with no line terminators","md5":"9d5fc96181d6e46d019f09b4d2775252","sha1":"29727e3f3b0e59145e0f1ff25eeb28576a7bee6f","sha256":"05504a45064a116015be9b0eb83817af7c1b1042aae80c871726036ca0035436","sha512":"3a7a1401983a0b00d25c2baf14e98b2a6a4e0eeb9288b38108a9b2c7b3e2c1587fb3e00677f7b73bbed0954e8c63325ef8ade3b1c0ecb91ab44e7050668e3727","ssdeep":"384:kF9kWEuK2U72UecAvTbDPnPuTc2YejErqSqcDRVE1eDTaR5HJrCiKMcJHI7jW:q9mZ72UecAvrPuSqSpEPIMoyW","tlshash":"dbc222ccf2d7f0650b9a38a481bf110ae23e7d99b44e9196d261e0c17c3454da273f9b","first_seen":"2026-02-18T21:57:56.580919Z","last_seen":"2026-04-15T20:10:01.085959Z","times_seen":330,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/resource/images/common/home/Selection-c.png","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:09.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /resource/images/common/home/Selection-c.png HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 5088\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=4,i=?0\r\netag: \"6989e39e-13e0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tot%2FfmMSUME%2BYHNvqwagfIGbhMJ2OYGWOsMH8jNSylJB8GWjCLl9XB5p%2FNQwUaYLFsMcQWvssvsDuaTLYXZs3iAeI%2FnzgBwqHT1fPfb2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013b48fad5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5088,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"c1e0cfa54461cfe2003359fe589984dd","sha1":"fd82904639342a643be65d67f8a24c5d16e445b8","sha256":"69e6f084038fd9c2196d3349b6be282bb366b9b47c5dfdb07b917a4956eb79fb","sha512":"dc0feff751431464fb48d538ac9dca32103da30c468e078100a2625ea616500cb026aa75a54c1450ce37539a93dad647a82a91e7bacf2f7dad9b9f4e639e73fa","ssdeep":"96:Y3l7a2ASmDfKAw8m2QCvNLPHQt2sotAi4EbsxVcgqiT56IaZ/IvEKdRh7zUt2:YFyPmO1Q2Leilb6F56Z3KRI2","tlshash":"15a18f7b6ce42c16cf86e6d90f86130c2b94c06f01586e13541eaad90f708f8329e709","first_seen":"2024-08-19T17:34:46.646268Z","last_seen":"2026-04-08T14:39:00.884363Z","times_seen":77,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/resource/images/common/home/investimg.png?1771947792814","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /resource/images/common/home/investimg.png?1771947792814 HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 77509\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=4,i=?0\r\netag: \"6989e39e-12ec5\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yq9pBuY9ADt0jJB2HmljzznMDMHuhTaiRGSHhAN6aCrhBq5L5%2F6vhN0K1YmjcuGiTQsjsN9y19L5Boj2d%2BZTyMS1DNweKZpLx6ZYmuts\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c979dd5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77509,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 960 x 960, 8-bit colormap, non-interlaced","md5":"9267ad6af6eaacc24390a8f33870ef76","sha1":"6541d731da0afcd1af6587e1b4c13bc5f1fe4d52","sha256":"aa6a9c639280f31ff25cd23af4f8cb4f12b731b972a4468ae251daad06117b11","sha512":"de85a8516252d1fc79ef5fd40ddc19ebd4e3f7ca0e933bb0ae91715748bde79cca7b3e650851d421dfa44e69236722340f17deacae4b2e83150aebfea98b9eaa","ssdeep":"1536:i4LGU8vqIyjyXqRwksQsohMUqQHwqO3X6GU0NSKqYN/o/rTTkPjtbG7jqs:i4LGWIyjyaGksQvLqQHwx97SKqC/o/rh","tlshash":"df73013bb7bc0646900205a14fb212e92b660cbbe647fc86fe711ea19936d2b5115acc","first_seen":"2024-08-19T17:34:46.66014Z","last_seen":"2026-05-18T14:20:36.313023Z","times_seen":84,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":342,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/CommonMethod.114960bb.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:07.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/CommonMethod.114960bb.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/assets/index.c3b67a87.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:07 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=unluJqbYBg9eygYU55J6owujHD45BR7xwTAJ0t2EVMGbNo8ITCKSecHvpds9LM5WY7u3W2k3hmVXasN3sSfuYa0oqaZLBlLfUEzaNFsu\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e3a1-367\"\r\ncf-ray: 9d3013a66e7e5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (870)","md5":"c856833e2531708f2d446006311f9761","sha1":"4354eb0703575b84e93d451bb887e25af6996bae","sha256":"8b3cbf30fe1bbdd8b62f27d49be7118f49f4925dfb858acbef4ed1662ebda46b","sha512":"5f5e56bf5786e62f9c1eb0bef0e3692a6cb13276c537807f2c99341e640b17733e7abd41742551c94bc05d9f93a5e6bf337e224863664f6d27e08eee8de7e415","ssdeep":"","tlshash":"0911c0d0e48dfb2d0368df65a1248033f25d58b51f288368d0f95d657b29449b79ea30","first_seen":"2026-02-24T15:43:30.888617Z","last_seen":"2026-02-24T15:43:30.888617Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/css/plugin.ca8811dc.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/css/plugin.ca8811dc.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Tue, 03 Feb 2026 09:37:23 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6981C1D358A49D35395D89A5\r\nlast-modified: Tue, 03 Feb 2026 09:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4711444634510545221\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: GJkBkDDNMX5T+a6ZYreZHQ==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: CWRg12z3uPmkj2etlDqnIUAafRZ3PHhHLAreh8zCmi1IcWYnV5J9UQ==\r\nage: 1836348\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":77948,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1899019030cd317e53f9ae9962b7991d","sha1":"b9d94d577b4c079d5fa4823f82896df59f4d9b5e","sha256":"2d16333363ea5a097558bc8675e8fd989e71e6144b89c0ff537bfb5ca3a087b9","sha512":"152a11565d2e8f381451c197d63daadc1cc14baa9c2113361549949b0a2db1b1c5ad535a152b80eea4728caa8dae9ee32b26e15d42886dae45df70b97f9506d5","ssdeep":"1536:B+1IfcryTXKrMV4wU3k1rz0JUjMBwrjlvOb/E0/qPxE7aWSlsgTu1dQq5qsLxHig:g1Ifc6KYVh0JUjMBwrj6qxE7aWSlsgTg","tlshash":"5a73a832ca15312da177e125f5c0f9d930b5c207fa230aadfda47939c2f298527b668d","first_seen":"2025-11-10T12:55:36.307776Z","last_seen":"2026-06-08T11:51:53.374252Z","times_seen":1594,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/bitcoin.png?1771947792728","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/bitcoin.png?1771947792728 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2691\r\npriority: u=4,i=?0\r\nx-amz-id-2: N5rdz/ETkJUNsht+oJf3HWSp4efQTm3cOMEibJ4hhrxb5Iy5d4knZQs/oUOFjxR3/V2qNWtm0pV0iuk62N+H/RaTI4TNKdFT\r\nx-amz-request-id: JBRA587MFXAN2G36\r\nlast-modified: Wed, 26 Mar 2025 12:12:20 GMT\r\netag: \"2edf1ef8b333c40979976d1a49bc234c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9\r\nx-amz-meta-s3b-last-modified: 20250326T121156Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kfnm7fIrXbWqeuQyn0pNi%2BLgJEMc9ImDCk6yC7%2F8r0i4ZPcd3ze9t9GpZ4YD41g78kOX7cXz2QqoXdpVUGtR4QZvXM7kXE6hyeFWhzuC8v96mWeKOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c899a55868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-06-08T12:06:52.102307Z","times_seen":21671,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/GBPJPY.png?1771947792751","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/GBPJPY.png?1771947792751 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 33776\r\npriority: u=4,i=?0\r\nx-amz-id-2: 51EB3PxXRWdwMCiiaEwuP9IBNeXdfv//9vxSc68+sLxtec+HPWBEs6eDJrzFS5iFDJuHnsr9dQh2j4dEj40ZAD9+eP0QFLWY\r\nx-amz-request-id: GDXPM312TG6801GQ\r\nlast-modified: Wed, 04 Jun 2025 15:01:06 GMT\r\netag: \"a8013a9e4c747fa5a78631eeb6f0a868\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 69504a99a928be01453ef1e86af6df0fc01b824ccd9e80e275430578e7ec001a\r\nx-amz-meta-s3b-last-modified: 20240910T152249Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TSj%2BWkCEZtjrEmEX9OvSkzi9K3hQLIgRtcN3GZ3h8qk%2Fe5ZUj2JBrudQtF%2BE%2FflRVJFh35yQ%2FA7pholdEwlpgFqQPdQ%2FT1VaWXVky0uL0t4kKqHRGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8f9bb5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":33776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"a8013a9e4c747fa5a78631eeb6f0a868","sha1":"d3fd118cb61ba3890f2d28b16e865b882039fc95","sha256":"69504a99a928be01453ef1e86af6df0fc01b824ccd9e80e275430578e7ec001a","sha512":"3b75b1956f78c2bf9b557f8f12874704081b1d85c09c11ce828f35078937ac3a6ac41dd458d5870107952829448ac2b99dc2f1ffef05640f6d2c347be2a99ea7","ssdeep":"768:r7uTuGHCE7RMNN2ShmI71pA8zdcrRFey8xwGKX4zfMirw:r7dE7RMNgSNZpApbZ80XWMirw","tlshash":"47e2f2898c1b27718479764e61eb7cc158f48834ed4cbab568b8c4174e3bc2e15bf1b4","first_seen":"2025-08-07T21:15:59.954265Z","last_seen":"2026-02-24T15:43:30.949812Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1680,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1516,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/ripple.png?1771947792732","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/ripple.png?1771947792732 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2274\r\npriority: u=4,i=?0\r\nx-amz-id-2: vtAr0Thd9Pz+d5TjMAzYtP8En6ZzRbf7jz9OxS8XEcaCngOYIdlRC/uxiWuy/tEpR4Z772aJmhwKqwRHs/A1tGeZDmMfOTkZ\r\nx-amz-request-id: XY0XKYH6716E029E\r\nlast-modified: Wed, 26 Mar 2025 12:12:21 GMT\r\netag: \"674b0999f6083084a2a4b1d8b20f3bc1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHm9mujIhC6Ls0V6KQNlVuIA82n1yUfVrdnPrT4IGqLuWj%2BVkPlLBgGVM5RPHhOggzfRitvJw9nTTRR2do%2B9DdFw9C%2Fj50fovflopQm6ZgCRTIGcNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8a9a85868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-06T04:02:55.304252Z","times_seen":638,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/XAG.png?1771947792755","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/XAG.png?1771947792755 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 659\r\npriority: u=4,i=?0\r\nx-amz-id-2: Oo1FGXd+vp0Y0TICCtJEOUSp4mLXz/FEb50ubP3Omm3pjJodIjIYGLGActoz0CX2WcMhrvxxRcCRFVr2tW7qXUVCieru6P6+\r\nx-amz-request-id: JBR0JW2CCCK23N07\r\nlast-modified: Wed, 26 Mar 2025 12:15:36 GMT\r\netag: \"5d36743437c9cab9218922a72775f9fd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ba878334f20401dbccb089792dfebdac5e90f8db1cc2e7c5f5365a1cc58e91f9\r\nx-amz-meta-s3b-last-modified: 20250326T121513Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ArdLxpoOZhdcFv7YW%2FWsbPdIGKS8LTpc3XnKCBmUR7ogFBYbfbrG3Lb1Jc8UHFbGzGjgWcPFFeXU7R0E0KqUOcBHVXJCe%2FseMORXmxuD0tdsVOdCgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c909bd5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"5d36743437c9cab9218922a72775f9fd","sha1":"91383aaf31fa9eec0805bbbc40ca5cd0a7753419","sha256":"ba878334f20401dbccb089792dfebdac5e90f8db1cc2e7c5f5365a1cc58e91f9","sha512":"ad6a46a947518469fed771943f64f6ecc450519526e44810ab880872b7a189fe912538699ab50b65ac1521cd45dae7a1b1c542e3771c479d3181649e8ecdbc96","ssdeep":"","tlshash":"2301c88773cf2d28c15a1d63e939bc191573024a5017cf0e86497daed3b3746825f117","first_seen":"2025-06-23T17:22:26.279809Z","last_seen":"2026-05-19T13:29:08.723462Z","times_seen":92,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/resource/images/common/home/downloadimg.png?1771947792809","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /resource/images/common/home/downloadimg.png?1771947792809 HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 143002\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=4,i=?0\r\netag: \"6989e39e-22e9a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xek93hSKQbEgCqH4p87%2Bi7Lel3%2Fo4TVYJLPewjzzhWZetWF1XUOwNMQP9KT3mv16itNIBX36Skedhkt7NhochnzjennuwHGXGX5YnDst\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c979dc5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143002,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1368 x 972, 8-bit colormap, non-interlaced","md5":"4e59e1224e1c27738197d0b1c328c15c","sha1":"84f186b75c956ae9b5ff26b8d0e2b32ff0492e98","sha256":"1811704cad965db80f02ccca4a90b177600997e3c26128f4fd5a15e0dace500c","sha512":"7873a8c641cef1cc30fd926b9f99f558de23adca684a4c61c6d439b791a3e35a539d5c4da8970957d0fc1d1aea6a11939685779a41990f121c72a9426d085774","ssdeep":"3072:ruhlDWNa+r4srR2T+P9OkmGgv8uN2u7LM7xJNVewRLUhJJg8:hBrjAXEw5uJNVshJJT","tlshash":"6ed31283113a1650cdfefefb4a158f47861629b4c81ca35e5ebb29caa155f03f3a1603","first_seen":"2024-08-19T17:34:46.648366Z","last_seen":"2026-05-18T14:20:36.289104Z","times_seen":81,"resource_available":false,"data":null}},"time_used":1221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":861,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/bluzelle.png?1771947792742","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/bluzelle.png?1771947792742 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 29665\r\npriority: u=4,i=?0\r\nx-amz-id-2: Y+7qWvpdBK1T9VqLhz0/XB1IYQfvpw3OxF4TNah9+dOvFabzOgdCDAj/g35hugoly1pkBzw63+7BJhx8hrcvPeFSdau/Uo8v\r\nx-amz-request-id: JBR9WN99HTFBDD50\r\nlast-modified: Wed, 26 Mar 2025 12:12:20 GMT\r\netag: \"d15eea69fd48353af475b0b8c7288142\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: bba285295f75afa0bb794df0cde22edd090f8ebbc1d423b36c05053c997e6850\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUyyN7V3wzHzFhCoWi7i%2BMDOYWxaUfkN8NLoxrusYuPit9pm%2FNjSsOMoQ1O97RlxOqG7JAYxA2MjyOCwd7Jr1UCL2YtfBI9FOs4VqJnHGjXkgnXatg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8c9b15868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"d15eea69fd48353af475b0b8c7288142","sha1":"b240c83844217a758d443834c9dcfd72f12b9e92","sha256":"bba285295f75afa0bb794df0cde22edd090f8ebbc1d423b36c05053c997e6850","sha512":"6f7fa4b2ba0e9140a23f729750ea6ea991ef814fafbe4b8edfe24a26ab0ab4e3e81c3146d03502a726c2c9354e07b624cc2144d07146d982db17e025cfe9f854","ssdeep":"768:gx5zjKKIKkn+aThPWxu+tx7znRPghNbmKFN7Fj:gx5CKIEaThPouUhznRPWFN7Fj","tlshash":"7fd2f2ea84adffe58f683c906bb65d888d31f4230dd410683a35b34d74485be46d972b","first_seen":"2025-03-17T02:06:07.808081Z","last_seen":"2026-06-05T10:33:32.025287Z","times_seen":37,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/lever.jpeg?1771947792786","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/lever.jpeg?1771947792786 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5326\r\npriority: u=4,i=?0\r\nx-amz-id-2: Cx/uwNID8tQv5aHxGyY4u6hN1zsOhtpTTMssqR7g4Hhy9m8/Fxl4UcOMpjJB/WiJpmOe+mLadiTdT9RLuF6qHw3YarujYWro\r\nx-amz-request-id: JBRBTHX5P7N8ACM9\r\nlast-modified: Wed, 26 Mar 2025 12:12:21 GMT\r\netag: \"c58f4c5b071e5912836e45c01afa9e03\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ea10356f413860e7186404344d50b9516f8e0fe1317df7d53fc81ce81c8e7bb3\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NPmdrk13hUBdaM7TdC7XCry810xclDDsfNq7deUKQtALjaMLGxQQQDIvSwOfsSgE5TWcPV0ZNdKUdqfAnJYNwouqvDlUDTi4mRIkJ6BKMD579sP6kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c939cd5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3","md5":"c58f4c5b071e5912836e45c01afa9e03","sha1":"b6f7e2a28f9041fac42acd69b8713fd811ea9ea5","sha256":"ea10356f413860e7186404344d50b9516f8e0fe1317df7d53fc81ce81c8e7bb3","sha512":"d61e62b7171e37d01a1453feaf4685f922dad6afe642d687afd248eda211886d2b75d3afe06dbe9fc5bcd483a28cfe3f4541f0a1af9325c0a3c0163bb74a29dc","ssdeep":"96:emHUsasfObCPgp0gc3oj3OSj6rTvdv6OzmrzobXdslboM65PHMZ1:uJO1Yp0gtjhjIvdv6OKrzobN465MD","tlshash":"c3b16d72b762d9d8c519e1f1da024ba2600d6e7b01bf9cc95f6d1d9119f4081cb813cc","first_seen":"2024-06-11T12:53:28Z","last_seen":"2026-06-06T02:42:02.424636Z","times_seen":266,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/GBPJPY.png?1771947792794","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/GBPJPY.png?1771947792794 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 33776\r\npriority: u=4,i=?0\r\nx-amz-id-2: 1JLHbmZ89KMEYKwSCxpTr8iOpnWMl0RT1wK2h8MAvwUyIIrrfrVKv4kIxx1yiIFlKEfCs+/LE7YbFXOZ698l+0ny/WFb/GV/\r\nx-amz-request-id: JBR47Q9ZWM496B86\r\nlast-modified: Wed, 04 Jun 2025 15:01:06 GMT\r\netag: \"a8013a9e4c747fa5a78631eeb6f0a868\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 69504a99a928be01453ef1e86af6df0fc01b824ccd9e80e275430578e7ec001a\r\nx-amz-meta-s3b-last-modified: 20240910T152249Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6oH3Xfaiimy1g%2BJR0%2BGt4%2FDuMmPrGlsQ9O8YaZzWCAjdvrW8yQBcw1NZtkaC7bKVo6cEk0R%2BsRybQixxuluv4Yn8PXGKDOW5SEb1cLBvn8EGkODVnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c949d35868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":33776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"a8013a9e4c747fa5a78631eeb6f0a868","sha1":"d3fd118cb61ba3890f2d28b16e865b882039fc95","sha256":"69504a99a928be01453ef1e86af6df0fc01b824ccd9e80e275430578e7ec001a","sha512":"3b75b1956f78c2bf9b557f8f12874704081b1d85c09c11ce828f35078937ac3a6ac41dd458d5870107952829448ac2b99dc2f1ffef05640f6d2c347be2a99ea7","ssdeep":"768:r7uTuGHCE7RMNN2ShmI71pA8zdcrRFey8xwGKX4zfMirw:r7dE7RMNgSNZpApbZ80XWMirw","tlshash":"47e2f2898c1b27718479764e61eb7cc158f48834ed4cbab568b8c4174e3bc2e15bf1b4","first_seen":"2025-08-07T21:15:59.954265Z","last_seen":"2026-02-24T15:43:30.949812Z","times_seen":28,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/GBPUSD.png?1771947792747","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/GBPUSD.png?1771947792747 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 46684\r\npriority: u=4,i=?0\r\nx-amz-id-2: gd7e+qcEbt0a0AAdgFqdJoWBZYoa15Cdxy5csGT9FzyxOgEtNFFvwp0CxLVCCG7GjsNgkSZp1esiAonYMw6PWEMyNhCSX5xt\r\nx-amz-request-id: GDXPER4QXME9PPR7\r\nlast-modified: Wed, 04 Jun 2025 15:01:06 GMT\r\netag: \"f7dfb6428169ce59d671fc0424bf7756\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 4c4f7d5860032bd287899dc471f2997ffd2be12d0f09c5deddab00594239b140\r\nx-amz-meta-s3b-last-modified: 20240910T152249Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2xSGwGKNhlM7pgZyh7YuI7HwA9KVAk3MdqvX1NlFDqv72a3%2FGm%2F9buYXRWHB5cH8KlvMYVRCbYinHc9iutLNKgf7MOTlVqD57bH10LhYdkUly9ISUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8d9b75868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"f7dfb6428169ce59d671fc0424bf7756","sha1":"56e92743a810f3f24952b0a3d855101cc33e5147","sha256":"4c4f7d5860032bd287899dc471f2997ffd2be12d0f09c5deddab00594239b140","sha512":"3db1a5d716e3b545a787a4d49016745f1a8302d715f8e152ad84d919ac7c0cf35d4b2583e9486310d62344873973e6c04e3c44eb0b14346edf62bb0f18a86688","ssdeep":"768:BDWVumNp0yiT587Q2Kiwvoaahnjbwjm9ITUjCtDEQir5eHiHOn+q0K5fOWYX6c+O:BguGp0J5Syd8jbwY1zQu5egs0eOWgNoc","tlshash":"4523f2fd4853852b94c754729ead3968c2eef807cf82b14edadd4da32f8e6401c714a9","first_seen":"2025-08-07T21:15:59.985418Z","last_seen":"2026-02-24T15:43:30.952037Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1873,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1529,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_277806_284960_1742401785.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:00.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/project_277806_284960_1742401785.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 24 Feb 2026 14:45:38 GMT\r\nx-oss-server-time: 36\r\ncontent-encoding: gzip\r\nx-oss-request-id: 699DB992C05EDB3830BCDB80\r\nlast-modified: Wed, 19 Mar 2025 16:29:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3314092823114277322\r\nx-oss-storage-class: Standard\r\ncontent-md5: 86VuF0Y/7gLPjMCaBPYMeQ==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: _xrXPCpC2P35PmMOXqzPTyvzw-bhTviZSK38TCnPGRgvLiVQU9_31g==\r\nage: 3441\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1183,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f3a56e17463fee02cf8cc09a04f60c79","sha1":"ab2bd572160689d42b08c9497c7de63859a4987d","sha256":"d377553bcae533f39143c992ffb0c10202a33417349b000e927dfb7e563157b4","sha512":"a8cac233ba5d2ac6f674f27d84b4f3187d644a2a7065e1e22c349f398bc564485fc0002ba83d88d0ec0a0480f8dc210186bf8a4318a373f87712121465f4020d","ssdeep":"","tlshash":"0921c9471c63a4797bd5727b4b3f88ad3998a2433004cc10bc4dd4682f909e20e9eee4","first_seen":"2025-09-08T01:16:02.885316Z","last_seen":"2026-02-24T15:43:30.90186Z","times_seen":25,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":137,"dns":121,"connect":8,"send":0,"wait":74,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.156.60.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Wed, 11 Feb 2026 05:57:55 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\nx-amz-version-id: J6b7RzocQsVXwTzS3QxevgOr1gKTyblY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6851e5f468b237438eae4078fbc9d3b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P2\r\nx-amz-cf-id: 3Jlzf9nBZ5cONxhHczBA1EppszZRKtua8EM4CnQzO554Qg9RrpVGXA==\r\nage: 1158312\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":47223,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-06-08T11:51:53.380644Z","times_seen":2887,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":78,"dns":43,"connect":17,"send":0,"wait":20,"receive":32,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/ac-chat.js?2.0.1770644385209","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:10.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /ac-chat.js?2.0.1770644385209 HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0ASVG31F2RSQEPiTzFmJx%2FIRh3rbKY4VREiKdKsCbfy7hDXGHVg%2FcsLUUeTQbMfwWwYXT5kpgRs2ADglouyuijixUt1dFdy%2F%2BgcIx2t\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 9\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e39e-979\"\r\ncf-ray: 9d3013bad8595868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2425,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"1876b5ed96b30caadd25965563a59434","sha1":"12ea862fa74ece93342e453697caec412e67938d","sha256":"de24d01af18e56461133a28c1f19bcd3c242ea7296ff07b722ad6d6fb5dea7bb","sha512":"c371ceeb7e78575b310225f270808992b7e036490ddf13bd9f1074f30edaa9a8e5fefe87ad939184442f9876220ed9c4f76539335bc84461d622234d6ebc5c23","ssdeep":"","tlshash":"1241afab47790224c20b11f72d4650943232a01faa0a1d3c79fc60d8ffaab7555e1ff9","first_seen":"2024-08-19T20:18:19.588895Z","last_seen":"2026-03-19T19:46:55.449931Z","times_seen":19,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/platform/Bifinance/favicon.ico?2.0.1770644385209","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:11.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /platform/Bifinance/favicon.ico?2.0.1770644385209 HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:11 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XsRuiXSjmWiJg6JdmwJRsu7KPunkGSvfmmSPq%2FK4UmF5ldAClEdAQv3K9y3l2Y%2BToorKvcQgbA6nulcppD7EQ2PWWH7vSOGoHd8%2BONEr\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 8\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e39e-103e\"\r\ncf-ray: 9d3013bfb8c65868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4158,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"6dabda60a8fb67b650aeec733f82ec82","sha1":"79f396e69732d90c564c86a6bf442e21c39dd650","sha256":"58b423ffe3a910b9d24be43c68a1575c83ef90eb9ef096dcfbe4a27217a37f3c","sha512":"24368b1f35530f40951ceffd5d9837c4bccae26a4a01ede2fbc5c5640e6461e6825b1cc0792c5412fd47741a934dc062df8b6fdd65ce7365350262f05811ff39","ssdeep":"48:sD/8jPGvWLaVaPmaYaUdrrsMWi8OObFgypzABWsksso:O/GLLuhB87FgQzABjksso","tlshash":"5c819c010d0558eb9e208b611aa4d43e808b7c0086f9d92ed6fbf47559ff13d896fec2","first_seen":"2025-09-08T01:16:02.807632Z","last_seen":"2026-02-24T15:43:30.954092Z","times_seen":25,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/index.c3b67a87.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/index.c3b67a87.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/assets/index.2906993b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ewYVFd%2FThWfCZYDA%2BgUri89NBNAYnmtR5pc4rojNDoc4QH86d8ohadvGqWWyx3vzRmmndVyuX%2Beb%2Fpq2wk%2BBDI9QRXxHlvt%2Ff8j9aFlk\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 5\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e3a1-6c18\"\r\ncf-ray: 9d3013c4892f5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27672,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27671)","md5":"8a3ceb403b0fe9b80866ab36b1d75d6d","sha1":"64cdfb78c70019f722aeac69dc7ba55c09829759","sha256":"b968345fb7d8056edda869379406fd06489c550b906ad8c5eca970ac0877a858","sha512":"932870bd1659f18e04c99ab337f5de9d065d4737c0c7e4783854d01cd75c095caf9b475d99f00d9a501b4fcbe246a560f8b4a592a006f0d9c36027c925c4feef","ssdeep":"384:rZMLhlYcCG0XS/s+yucXfwnWJoUosg1xrCeRRcXF4OP2hoW4IHTGPPs:rZMLXCRC0jWWKUos+r1R6RP2hoW6PPs","tlshash":"52c23fb5f92a8978f1b78951105c3509314cffd381508693b6fc2a199b93dbc378eb2a","first_seen":"2026-02-24T15:43:30.926206Z","last_seen":"2026-02-24T15:43:30.926206Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/tron.png?1771947792740","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/tron.png?1771947792740 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 28273\r\npriority: u=4,i=?0\r\nx-amz-id-2: hZN+yPzxYparZ0cJfSeh7AR81KobeJ967JlUELucywEXutIdXNzh0K43CwPIlOYmgTbz4edPGYb+cnDNdng40BpLy4kG3zRx\r\nx-amz-request-id: JBR11091H7TR4BRT\r\nlast-modified: Wed, 26 Mar 2025 12:12:22 GMT\r\netag: \"d5ca5f90c7a46cb88e5f57b2d3046ba8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHVgsB0XImyuImXYgm3nY4jkuhrMJGIaoo%2B3uhbIsiiyBiQze55PH70auCDBpzJbFjmRnXux3Nm4n7yBy1vaOfB9bfSxbJLGogj74nG8Nkm6JPZDLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8c9af5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-06T04:02:55.285468Z","times_seen":581,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/css/chunk-common.047ebad9.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/css/chunk-common.047ebad9.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Tue, 03 Feb 2026 09:37:23 GMT\r\nx-oss-server-time: 6\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6981C1D3EE88453737F806AC\r\nlast-modified: Tue, 03 Feb 2026 09:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15301035701198459371\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: kuhLBjVJMHRRHJR6J/nD0w==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: LNq9g0M83uNuBPmQfhRPmtJzpdIckEDzKX84GXJX8_6jhxDa3UbZ_g==\r\nage: 1836343\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3567,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3567), with no line terminators","md5":"92e84b0635493074511c947a27f9c3d3","sha1":"1063727a5ae72bb23c46dad693b4b45828e2a74a","sha256":"85172738795fe7c2d724963c00cddb49256a70767071cea32d1729b809702ffe","sha512":"9ee606d5139307b4a204d111caf4297943a1894038526b59e9c0a4bd5a034fd328cdfc85edc24dd76732407f80e93aafa317fa53d85471a7dc45c23f4a72a854","ssdeep":"","tlshash":"e2710de5d50814ed7333c902a385b298ad92f5b2d8e04e67f01f562c8ff2655a291f39","first_seen":"2025-08-28T20:02:37.799245Z","last_seen":"2026-06-08T11:51:53.367735Z","times_seen":2142,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/bitcoin.png?1771947789413","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:09.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/bitcoin.png?1771947789413 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/da9bc5822529a2c225e057c0d8d50f36.png?1771947792736","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/da9bc5822529a2c225e057c0d8d50f36.png?1771947792736 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 12446\r\npriority: u=4,i=?0\r\nx-amz-id-2: hOzL19pe5fsakLgNh4ZpPt9ERjsL+3iVJKzYZS0n3yp3CMbquq2/ysKoq/N+FAQTgkqQQlx+FonIWmhv64vdqw7ZsL76dok0\r\nx-amz-request-id: JBR54YVXW6HRTR1J\r\nlast-modified: Wed, 26 Mar 2025 12:12:21 GMT\r\netag: \"da9bc5822529a2c225e057c0d8d50f36\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f51f30797900cc0ba2647fad1078d29725f4410442a472df1812ae70d89e22d6\r\nx-amz-meta-s3b-last-modified: 20250326T121156Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Atnv3F0AKOUEfqdTYECgKOUU%2F9tw4i7mwSozQReC8lfCXt54R%2ByZEPBwyH9gk%2B6y4Ix36VLZ%2BlaBneh%2FdLMriLTUx1mggAhtHxpZ6yAkbxlw156TyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8b9ab5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"da9bc5822529a2c225e057c0d8d50f36","sha1":"82b82dcdfcdb456c30cd1901d162f6eda4755768","sha256":"f51f30797900cc0ba2647fad1078d29725f4410442a472df1812ae70d89e22d6","sha512":"c9c6ab97fd64a5d5901b3b97e3e2ff445588c37246abd20315c9f23496ba7040f6a14d0d95b5b0012cf7a30ac026ae818b16befef162330410d38810248b2ff3","ssdeep":"192:lF5DMISPEWXUxj4OcJTctXlli9mso8hM4CaD0ze/uCPuuzxd3iDPr:tMVEBxkO0TctXS9K4J/uCPB1ReD","tlshash":"93428df604472703f9bc1c97a3de061d18750f359251ee25d0ec1c5972a8aaf1bf606e","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-05-19T06:31:41.587974Z","times_seen":66,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/litecoin.png?1771947792779","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/litecoin.png?1771947792779 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 34858\r\npriority: u=4,i=?0\r\nx-amz-id-2: apWiEIIMA/PFBUmRe/YD0tUvm6sZx7Srv2ViqVUzEaR2IhLcAswqhCJ9WLh6y5eLIr/a6XgwaiVNlRL6ZOHUgaxT3ewXouuc\r\nx-amz-request-id: JBR3YHCADSGAAWDH\r\nlast-modified: Wed, 26 Mar 2025 12:12:21 GMT\r\netag: \"bb27c369a3aa54d9c1f8e59e1706da48\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee\r\nx-amz-meta-s3b-last-modified: 20250326T121156Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHWp7JcQyXyGnbWTLok3csbzETVBjkbx7UUMv1Z2IvngOx8lY3lqz1CPcCwKWu6tGiUfIrtvGq8EvnBZPU64fQHq71k%2F2ZR6mlRLeoyrePR99AWFIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c929c45868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-06-06T04:02:55.293479Z","times_seen":630,"resource_available":false,"data":null}},"time_used":1803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":1031,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/GBPUSD.png?1771947792791","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/GBPUSD.png?1771947792791 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 46684\r\npriority: u=4,i=?0\r\nx-amz-id-2: kf651kcLR8M1UPFfgaCNqkFrneU4za1vxTcth8dCDwKMG1N9CUl8EoxhMhjfaAes2iGL740pXg4oFwlS6DNOKfpaZNRlsUAD\r\nx-amz-request-id: JBRA2HF9R7QNPAZH\r\nlast-modified: Wed, 04 Jun 2025 15:01:06 GMT\r\netag: \"f7dfb6428169ce59d671fc0424bf7756\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 4c4f7d5860032bd287899dc471f2997ffd2be12d0f09c5deddab00594239b140\r\nx-amz-meta-s3b-last-modified: 20240910T152249Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQdZWk6F2d3vlvoVYueTlUMx4yu1z8eMl92YdbGCsbe5qJdPfKaN9hhz76sBYVtY%2FHSZ1Lf1hvfMGEHtk8WnODipqKGK6T5zIHuAjCjrKCt260%2FWhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c939cf5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":46684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"f7dfb6428169ce59d671fc0424bf7756","sha1":"56e92743a810f3f24952b0a3d855101cc33e5147","sha256":"4c4f7d5860032bd287899dc471f2997ffd2be12d0f09c5deddab00594239b140","sha512":"3db1a5d716e3b545a787a4d49016745f1a8302d715f8e152ad84d919ac7c0cf35d4b2583e9486310d62344873973e6c04e3c44eb0b14346edf62bb0f18a86688","ssdeep":"768:BDWVumNp0yiT587Q2Kiwvoaahnjbwjm9ITUjCtDEQir5eHiHOn+q0K5fOWYX6c+O:BguGp0J5Syd8jbwY1zQu5egs0eOWgNoc","tlshash":"4523f2fd4853852b94c754729ead3968c2eef807cf82b14edadd4da32f8e6401c714a9","first_seen":"2025-08-07T21:15:59.985418Z","last_seen":"2026-02-24T15:43:30.952037Z","times_seen":28,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/CommonMethod.114960bb.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/CommonMethod.114960bb.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bifinanceb.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:07 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gVLAeO4%2FCr9u9C0OVSyWairqFrlNXxbOJMUz8uOE1s9RfusBFWHt325TuuACnbDbkUo8yES%2FhTzHxJMjqzJjGYw1a20M0eZFDKa8Cy8H\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6989e3a1-367\"\r\ncf-ray: 9d3013a2de2b5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (870)","md5":"c856833e2531708f2d446006311f9761","sha1":"4354eb0703575b84e93d451bb887e25af6996bae","sha256":"8b3cbf30fe1bbdd8b62f27d49be7118f49f4925dfb858acbef4ed1662ebda46b","sha512":"5f5e56bf5786e62f9c1eb0bef0e3692a6cb13276c537807f2c99341e640b17733e7abd41742551c94bc05d9f93a5e6bf337e224863664f6d27e08eee8de7e415","ssdeep":"","tlshash":"0911c0d0e48dfb2d0368df65a1248033f25d58b51f288368d0f95d657b29449b79ea30","first_seen":"2026-02-24T15:43:30.888617Z","last_seen":"2026-02-24T15:43:30.888617Z","times_seen":1,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getMt5Amount?coin=xau","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:08.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://bifinanceb.com/\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:08 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r77z0us1lLKFBx3wNkVWv0V0tqg3YyxknLriD7ltLOmfzkNb8gd2lXq5OogEOULJRB1uVbd4S9emah5ENl85ubEcRHAkxCldyY1v%2Feh3UY4r2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013ae3f0b5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/ethereum.png?1771947792730","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/ethereum.png?1771947792730 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 9807\r\npriority: u=4,i=?0\r\nx-amz-id-2: XbUthoI8HKhJMHT0ZtDhLbrUG7puuZPaUA/D+lIeG8h/pOJ304y43Q8Uku5N0obhvg5OiLUbjYoAcAty89FgJRN6Qm2GFHZO\r\nx-amz-request-id: JBR4Y1EYDYRJ0J0C\r\nlast-modified: Wed, 26 Mar 2025 12:12:21 GMT\r\netag: \"12d9722461759cefff02d9076a3d2718\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2FK1aTaa4B7WAbozfcU0dFcvSQhSPIBjbVWKTpHDeFXE1vOnC0rrf2FEp1pRbOCX3%2BxzrPHG%2FaTxETZm62HLQc28%2FV5nAipPMb0MrMAEdWvAy42JyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8a9a75868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-08T05:16:21.618678Z","times_seen":600,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-vendors.6ef765fa.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-vendors.6ef765fa.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 03 Feb 2026 09:37:22 GMT\r\nx-oss-server-time: 3\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6981C1D2231938383587FEEB\r\nlast-modified: Tue, 03 Feb 2026 09:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16184782789754269720\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: jniEYbqRWty/z6mxDDXyZQ==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: SwhUaQCOi-bNwqAuc64h-4qi8qzbhOPaVy7PKCfZkZLtMydcl1dYiA==\r\nage: 1836344\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":214670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"8e788461ba915adcbfcfa9b10c35f265","sha1":"bc3841eff0c3841cfdef9a2f1e1b5f1d0dd6c26e","sha256":"69ced1151fb1b32d26c8b70739681828a1d99333c4a08114c98cd8af90b3f2ca","sha512":"b20ea5f22352ee329e6982d0fbd14fa2f4607a186b2d2973a99e43975164b2c6142b8ce87f7d5f54f47cb41bd6a33329ec3d09fafcb971de6e316ce5c0c8cfe0","ssdeep":"3072:gZcGj+j4Cm4m5BJ1IWqq/1cuC+4DdC58+skrMJz+8:gG27J1Wycu+4ikrMB","tlshash":"1424f7cdbb92f06843a335a4806f150bf17b6a18f40e81d4e6a6d5d1ac78a8e5137f3d","first_seen":"2025-12-10T08:58:23.267899Z","last_seen":"2026-06-08T11:51:53.408623Z","times_seen":1221,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/core.esm.b4c18107.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/core.esm.b4c18107.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/assets/index.c3b67a87.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=30C4msDGfsPrux5RO22KB1%2FRYO1uFXTIBo2rf%2FsmrwhrP%2BgNz6ufz2EkhtpBSnSV1pA1QRoMU6NSp8IzGjACuTT8luUBkgNG9dHUlnTD\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 5\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e3a1-9e43\"\r\ncf-ray: 9d3013c4a9315868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40515,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39692)","md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-06-07T23:37:29.551901Z","times_seen":64,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/ja.6f7a9185.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/ja.6f7a9185.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/assets/index.2906993b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iGNPbMShZh9JTEYqvQhKAQwF3fRIotDuRWekAvB2VEck3C%2FaXeWdyC4SsPqk3WM%2Bm8sYO8vrpiy9hC4f%2F1VgPlMttQdb4B4CzMcDrUeQ\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e3a1-182f4\"\r\ncf-ray: 9d3013c7f9945868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99060,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2bf34a6741652de7786a7fe4a6bf50dc","sha1":"63d019763262d9371341b0c8330fcb8a3f466dd4","sha256":"b5e2b19e951acb114e413c60d489ba4ff97951f43f8c30b272a6050820610a74","sha512":"257f94b8c3473f1de4bc3893827efc696d3dc813837298ccb9011580a86cbbb284d9a40eb940184994c5f132893853789c5167b32ab911538df83dc24d89427e","ssdeep":"768:8V7AqNaUht1ffAGfUj3yEKaJyw0cya5g5rWpp3zHlqeZDfrh6U9sPfyxnPaXdwXT:Kfht1ffAoUj3yRTa5gi3JqeW8CHSx","tlshash":"caa3deefbc4d097f48b7469efe426a4768f05a0d1265f62f5ba8b6b23e10052534372c","first_seen":"2025-09-08T01:16:02.902988Z","last_seen":"2026-02-24T15:43:30.890705Z","times_seen":25,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/usd-coin.png?1771947792743","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/usd-coin.png?1771947792743 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 11982\r\npriority: u=4,i=?0\r\nx-amz-id-2: r2yM8JuKE3YzaJYhysAmv4NaLP5TYfIP9aIQuOBPv5tVo5SnCak2Qo1zwb2KCsy3hH+OyQ7RZVc7DBZpV/fQw8QiVDD9+Uv6\r\nx-amz-request-id: JBR58BAJNDKH3RFV\r\nlast-modified: Wed, 26 Mar 2025 12:12:22 GMT\r\netag: \"190b493fb7b46d34ffce08977c9440ad\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f65ea1a4d3a2145003bdff208815186e307bfa28f607719cfe23619eb0947ab7\r\nx-amz-meta-s3b-last-modified: 20250326T121158Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1TOOSMIsez5KUgzoXytC8nkkagIm78gt%2BS6XkYY%2BBp7%2F%2FANmoI%2F8OrJ48P%2F3c4VLodge2fmTJ8jMR5Y4Bcb9rFK%2F4T%2Bg%2BTD0sDORDAnbVbFEeeqYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8d9b35868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11982,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"190b493fb7b46d34ffce08977c9440ad","sha1":"cc39546ca0be2103d25ad0566c5b1a85dc868045","sha256":"f65ea1a4d3a2145003bdff208815186e307bfa28f607719cfe23619eb0947ab7","sha512":"a9711883bdbe3cdd869c7beb9bffa914d51125a7a723c4de256acd820d36eef3f54fc5e8af515c10cc7941c28e8ec3ee42943cb31914a1ca7166564970056e9c","ssdeep":"192:ayxQ0ZUzIx9hfTLf8iyKmXyI0R4I9gTkoa6bPrTxZqf09/9xX1EpqWhg+YUrrCXg:BBT9h7wi2OR4I9oagzTxZB9lxF4hgFUz","tlshash":"9e32bf7b1371c1e03965e36c995164b9358aac0fb4e0d5345ee172d83b2afab07a8387","first_seen":"2025-07-27T10:32:01.602974Z","last_seen":"2026-06-06T18:41:46.419968Z","times_seen":59,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/coinInfo/tron.png?1771947792784","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /coinInfo/tron.png?1771947792784 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 28273\r\npriority: u=4,i=?0\r\nx-amz-id-2: tnb1XCYiuSm9sqB24L6lIZ9w5xEmJ4d6JXdKbTsB+Ywre3t6kOJJAGuKm2lIPdmnDJRoXWgpYh5cIs/iSJrPiweTp67QtBIK\r\nx-amz-request-id: JBR888FNB8VM0Y77\r\nlast-modified: Wed, 26 Mar 2025 12:12:22 GMT\r\netag: \"d5ca5f90c7a46cb88e5f57b2d3046ba8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40\r\nx-amz-meta-s3b-last-modified: 20250326T121157Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CfdEpAiZ2leGOlOXZ8UaN4j%2BBaaNEriwBWJRsTbGll2ZhNs7PAfIaKcVAxNhjT5t2NZQER89aQcegISnayb7HGAD22YMVMRSJetBUZnBNsOGa1uPfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c939ca5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-06T04:02:55.285468Z","times_seen":581,"resource_available":false,"data":null}},"time_used":1259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":493,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/platform/Bifinance/favicon.ico?2.0.1770644385209","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:02.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /platform/Bifinance/favicon.ico?2.0.1770644385209 HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:03 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbz0mpgVt4mSvzxIou8xKchlc7mFW8sglFMqlEPpNRK%2FR3vhYuMkNlGtJ5AhKey1h6flT3uluWGTK6fY3weSFx2ovto9JtPgQnFeFx0D\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6989e39e-103e\"\r\ncf-ray: 9d30138b6b215868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4158,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"6dabda60a8fb67b650aeec733f82ec82","sha1":"79f396e69732d90c564c86a6bf442e21c39dd650","sha256":"58b423ffe3a910b9d24be43c68a1575c83ef90eb9ef096dcfbe4a27217a37f3c","sha512":"24368b1f35530f40951ceffd5d9837c4bccae26a4a01ede2fbc5c5640e6461e6825b1cc0792c5412fd47741a934dc062df8b6fdd65ce7365350262f05811ff39","ssdeep":"48:sD/8jPGvWLaVaPmaYaUdrrsMWi8OObFgypzABWsksso:O/GLLuhB87FgQzABjksso","tlshash":"5c819c010d0558eb9e208b611aa4d43e808b7c0086f9d92ed6fbf47559ff13d896fec2","first_seen":"2025-09-08T01:16:02.807632Z","last_seen":"2026-02-24T15:43:30.954092Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1030,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":681,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getMt5Amount?coin=xag","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:08.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://bifinanceb.com/\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:08 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bKeIwVAZsxiqm18Y9HuKugXZ4Btzp3dC%2F8qGUL%2Fw%2F%2BoyY1hnLE3ZpXGA1o76dJLTNFkUJjCrjwxt8NIh82GeViS3fJwj48kTJ%2BdQVLwoRQO2ug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013ae3f0c5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/vendor1_b8775aab.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/vendor1_b8775aab.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 03 Feb 2026 09:37:22 GMT\r\nx-oss-server-time: 4\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6981C1D223193835354702EC\r\nlast-modified: Tue, 03 Feb 2026 09:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15305004930386263030\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: TdEL+eOlXQT7AtB2+NiI/Q==\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: jKW6WyDFuGy67io-bW9yA47WSulU4W1cdXZGttBjKjWEA-y22yFG4w==\r\nage: 1836349\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":225000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49155)","md5":"4dd10bf9e3a55d04fb02d076f8d888fd","sha1":"73fe2ade639561e0fbee753a10ab3a8f64457ba6","sha256":"9b5cc937de300ae7ed821b3c25405086cd9fc0c25be5f6afc2213b06d1981408","sha512":"768877b7f6860408251dfc60ac57ed4499ac9ff259f506f98020a848b1f8dd67378758074406603c95d98bfa621d4d451d9a941f9932c2bc9ecfe1eb9e69f9ba","ssdeep":"3072:hUj1XOH0ipFe9OY0ceCK7KtWO77yzk83UzlgE6CjnWO:2kHbDCK7gf7n85NO","tlshash":"b22408c8b295b06143a770b4407f550bf13ab915680ec5a4f226e8da7cbc98e907bf7d","first_seen":"2025-05-10T22:57:10.916725Z","last_seen":"2026-06-08T11:51:53.409249Z","times_seen":2437,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bifinanceb.com/waihui/AUDJPY.png?1771947792749","fqdn":"static.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /waihui/AUDJPY.png?1771947792749 HTTP/1.1\r\nHost: static.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 33628\r\npriority: u=4,i=?0\r\nx-amz-id-2: 3J5YLNDWhzt/c1vph2H/28mW+H9xYw2WAKqhtj70QGLjxHEHn4WZhULKoBIKetFTxdLVgbY7SecBsmtA4TK2Bm9PalBvhrEq\r\nx-amz-request-id: JBR5CNEFNMW6W304\r\nlast-modified: Wed, 04 Jun 2025 15:01:06 GMT\r\netag: \"43e6c5765bcf8f7a1af5660a4cd0128b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: c00f038e6d09f14518284f8aa1e5b5261b785899fe075eb549fced496d0c7659\r\nx-amz-meta-s3b-last-modified: 20240910T152249Z\r\naccept-ranges: bytes\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2F6%2FLx8XNisZWnjpuivPl7lh5S8EbEI%2F1GjMzqkc9kirbs4fbbUZz3UlaYazJh4ceTotIT9MZplmy1XybpRa36RlBE2Mhaxp7EAC09Y8Ccl%2BQrgPaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c8e9b95868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":33628,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"43e6c5765bcf8f7a1af5660a4cd0128b","sha1":"2ecef791e9c2328dfe1fb732ac673a763841d9b3","sha256":"c00f038e6d09f14518284f8aa1e5b5261b785899fe075eb549fced496d0c7659","sha512":"e8b52cdd284475f3eedc80dfd18860283a7f3e7598dfac899226aa10e77447df87f34f7832e4d76f3568db071ebf8b9c4f17163c287bfec1e7411b2c6e4b73b1","ssdeep":"768:qyqjj6t+4CU/qFzx00p00iPr3Ti1B31FtuFx75hh0a:qykY+3UyZS020iPr3T8BvtuzlhhX","tlshash":"f3e2f13cdc83a194dd9a335178e8280487636f20f995716f38f394a7afa78db185d086","first_seen":"2025-08-07T21:15:59.989144Z","last_seen":"2026-06-05T10:33:32.148483Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":750,"receive":687,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"static.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"static.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/index.2906993b.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:00.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/index.2906993b.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ctFNbBL4jY2E9g5POl7%2FxW9ShrclyDL4ioeVrBL%2B3QukhJUH%2B0enKh4YEoVgKHityH%2B1VpS%2By4OALdNoI6zOJh53XMxxD3LZfi18ofu2\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6989e3a1-583d08\"\r\ncf-ray: 9d30137c29c45868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5782792,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19751)","md5":"a3d9068adc00a188afa94ac3b96878b4","sha1":"e4032efdf1146d0d937e8b5fa759a40db589de6b","sha256":"2b87c62f0b63922bc4e3af9a4cf0b760e9b21d2526645b7319920469a8bb6e3d","sha512":"e2855c42493a95fca3cccad17da3f108b4c1563cc89f7c525b911b6939c7ef39d753d36c9f67015b53b2b600a7cfebd9205fee486a7ef7e7d32996657231e910","ssdeep":"24576:AmivKaLS7fRYFD/Zum7pbXGsh5bAuObfb4RNWN4xNqLv0aL+Cgt/t9I4Lg7:AmivKaLS7fRYFD/Zum7dXGsh5bAuObf1","tlshash":"27255ad47595b4328bfa44d550ae0501b32d1b49b40898e0f0fecdad3a6bd50a2bbfbd","first_seen":"2026-01-05T01:28:23.843441Z","last_seen":"2026-02-24T15:43:30.956368Z","times_seen":12,"resource_available":false,"data":null}},"time_used":4816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":4461,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/core.esm.b4c18107.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/core.esm.b4c18107.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bifinanceb.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:07 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XGpvqxfH0AWFiWHWjixjX1%2FTx3v8l71s45UCTxrhn%2FSTPJX7VNYdKtC6Gnv0KHWQh2PUw9HjbvoWHueEaYRq%2FnerYZ0fNu2EmHL%2B73JM\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6989e3a1-9e43\"\r\ncf-ray: 9d3013a2ee2c5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40515,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39692)","md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-06-07T23:37:29.551901Z","times_seen":64,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getMt5Amount?coin=xag","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:08.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nContent-Length: 3\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3,"data":"xag"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:09 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e4PjG%2BPQHl64%2Ff17HM5ODPfj458FiLjZtTgXv7Z0QhUXwaQJjHflLE0EZ%2BG5djPm7x8eESBJ1gbGG7abSBxfM%2BxcpAa2ScxSKBh%2BqJbdl7GMEw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013afcf215868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2aa5f9f060afb06dbd48f1659cdf7caa","sha1":"c9e092d3c7467b9a66a03adff34ddd592704aac6","sha256":"e4e23ba3cc3e7d8434263e9ba288b0b784c9b896a8118009ac36b6f9afe0de86","sha512":"48d41b75d436a6a990c58d0ab8092bd71f0df473472365a2e55874ab60a1adc80b7f0541ddacde526c881c31c3776da7b91c918194672d6e7e7618ff8f63c5e3","ssdeep":"","tlshash":"0ba02200ec088082220380820223820000f0208c32008a08fe8ee230c00023a3083c28","first_seen":"2026-02-24T15:43:30.957846Z","last_seen":"2026-02-24T15:43:30.957846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/core.esm.b4c18107.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:11.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/core.esm.b4c18107.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bifinanceb.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:11 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IdfEMkYTB9lvrTChSN%2FUfXcuupOGOnftw57qezusJz7WoZTOEYU528loFIJBUMneJhe%2FbDfLm5Lg5cl1qPJ0o%2FvDUgLioI%2F44mKGVC5Q\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e3a1-9e43\"\r\ncf-ray: 9d3013c3f91f5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40515,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39692)","md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-06-07T23:37:29.551901Z","times_seen":64,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/platform/Bifinance/config.js?1771947786573","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/","date":"2026-02-24T15:43:06.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /platform/Bifinance/config.js?1771947786573 HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:06 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8Xrxa4qYJBAd0gbs7zMfwRhbgikH%2FnTatpEKr1ZooY2fB9lBWaLxpRb6HwdMOYCzzDvLltf2qxi9YjE08GVYm%2F6qQzLwaXhcL%2BqrUbR\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6989e39e-178\"\r\ncf-ray: 9d3013a22e1c5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"7492fe8c61a71dca7192799070871562","sha1":"4fea8078320d3b7499c8f133cc0e4857c6c1de5b","sha256":"35ccdc51188a4acc27990dd14a6c53d26b602c701a56b60ffb6ea5d5e79aadd6","sha512":"3683858ff544bf2a468d036c15f714e4ff6d5d9f26bd8e10ca75875634dc302619e0ce85ff999534995a7f4e5eeb4de465b188af95ff8b5c8305985ffaaa7aa8","ssdeep":"","tlshash":"4ae068db20b0654429300b3ee7de1ab1f1461273cc5d624e78786e44bffa90983748a2","first_seen":"2026-01-26T05:25:49.716203Z","last_seen":"2026-02-24T15:43:30.887086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getAllSetting","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:11.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://bifinanceb.com/\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:12 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CcZTGF4QTsE9p1fbLUkR%2FWhZErTInr4HRtDb2HS5wYdpz9SYHpMVct2OQAKrwxtSnYMql%2FyiDSHTU6IIVKLAwqnIDeukowClcSUZd8qUCM33fQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c3990c5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/common/getMt5Amount?coin=xau","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://bifinanceb.com/\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yuK9dQVSsmmGPcWyx3E44dtsAjx2X9giTDcBxmV9ltEuj2y0bWEyVI59IY1sI%2BTy71fC1pijvUQ%2FzqS7B44Dgr0iCFcJvYWXvBz0TK%2BgfbrPNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013c7f9925868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":930,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":930,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 06:10:51 GMT\r\nexpires: Sat, 20 Feb 2027 06:10:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 379941\r\nlast-modified: Wed, 10 Sep 2025 16:23:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35928, version 1.0","md5":"a317875aac104234bd7c39df8c501fbb","sha1":"870661970316f61acaab613e3209b9c09e2961f3","sha256":"065e2ab41209dcd60b1c88517c71a741803e3b0647059cb8ee7efff522ed1d40","sha512":"619f405a133ec8227767f08c598399a737d30cea6f76d3c065d2d97ce162bae040ced7fca13ed874d66a1f98472a3a07cf12bb146f432c8d4df24745488e13d0","ssdeep":"768:ybZHErhpxKts8YgN3IJe53ZnJREjqvYSVgXsdp+v0Gd:ybxErktsfgN3fXlicOzd","tlshash":"bef2f11c1a34eb974328047b840084b533ea6da7d63192b121a5fb44cca46fafecfdd6","first_seen":"2025-09-11T17:08:53.61315Z","last_seen":"2026-06-08T11:52:03.629137Z","times_seen":26490,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bifinanceb.com/api/notice/list?key=ROLL_NOTICE","fqdn":"api.bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:13.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://bifinanceb.com/\r\nOrigin: https://bifinanceb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:13 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: https://bifinanceb.com\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=goboC26DjPUmVndhWiDeS6OFCCuVGTwirx8scuVFEJ9RG8jFJq%2F4AqSBc5KoWRXOjj%2FhWdBAy12ZF0BFVgRXhKZGqS1JwApHt%2Fi09lWOUR5yxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3013ca7a025868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"api.bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"api.bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bifinanceb.com/assets/index.2906993b.js","fqdn":"bifinanceb.com","domain":"bifinanceb.com","tld":"com"},"ip":{"addr":"104.21.53.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:10.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bifinanceb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 12:01:06 GMT","end":"Tue, 07 Apr 2026 12:59:50 GMT"},"fingerprint":{"sha1":"39:E4:C9:8F:A7:E9:4C:4F:88:8F:C7:69:21:D4:BE:20:C1:05:04:0F","sha256":"FE:11:5F:25:54:6A:96:CB:F3:28:0C:66:EA:B2:91:06:1C:08:5F:2A:3C:A1:15:1F:95:20:69:CE:5C:36:3B:2E"}}},"request":{"raw":"GET /assets/index.2906993b.js HTTP/1.1\r\nHost: bifinanceb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 15:43:10 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ecrHesRpmPf9RXng9jX02xHQ1mnqISbRVkfY3%2BWSZK7YbAoggPw3Jx4zdUc49YOnfSsg8QUHLXVwdjxIvN8Y7bCpLoi5qBUMc7fN2ohx\"}]}\r\nlast-modified: Mon, 09 Feb 2026 13:39:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 9\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6989e3a1-583d08\"\r\ncf-ray: 9d3013bad8575868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5782792,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19751)","md5":"a3d9068adc00a188afa94ac3b96878b4","sha1":"e4032efdf1146d0d937e8b5fa759a40db589de6b","sha256":"2b87c62f0b63922bc4e3af9a4cf0b760e9b21d2526645b7319920469a8bb6e3d","sha512":"e2855c42493a95fca3cccad17da3f108b4c1563cc89f7c525b911b6939c7ef39d753d36c9f67015b53b2b600a7cfebd9205fee486a7ef7e7d32996657231e910","ssdeep":"24576:AmivKaLS7fRYFD/Zum7pbXGsh5bAuObfb4RNWN4xNqLv0aL+Cgt/t9I4Lg7:AmivKaLS7fRYFD/Zum7dXGsh5bAuObf1","tlshash":"27255ad47595b4328bfa44d550ae0501b32d1b49b40898e0f0fecdad3a6bd50a2bbfbd","first_seen":"2026-01-05T01:28:23.843441Z","last_seen":"2026-02-24T15:43:30.956368Z","times_seen":12,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"bifinanceb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bifinanceb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.156.60.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bifinanceb.com/#/home","date":"2026-02-24T15:43:12.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bifinanceb.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Wed, 11 Feb 2026 05:57:55 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\nx-amz-version-id: J6b7RzocQsVXwTzS3QxevgOr1gKTyblY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6851e5f468b237438eae4078fbc9d3b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P2\r\nx-amz-cf-id: ytj6PfO0MJzwbAjwCb9eBjZYoHqnkoeeZx_sx0t2bM-IvYeRPVf-NQ==\r\nage: 1158318\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":47223,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-06-08T11:51:53.380644Z","times_seen":2887,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}