{"report_id":"189198b0-1d36-41ae-88b2-fe03586a2755","version":6,"status":"done","tags":[],"date":"2025-08-29T13:23:57Z","url":{"schema":"http","addr":"bitgetnextlevel666.com","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":0,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"http","addr":"bitgetnextlevel666.com/","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"title":"bitgetnextlevel666.com"},"submit":{"url":{"schema":"http","addr":"bitgetnextlevel666.com","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":0,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-03T13:23:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bitgetnextlevel666.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"bitgetnextlevel666.com","ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":12,"request_count":12,"received_data":80429,"sent_data":5674,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery:1.10.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.106","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-08-27T15:44:28.417679Z","alert_count":0,"request_count":1,"received_data":93968,"sent_data":370,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"bitgetnextlevel666.com/","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e45d39d25d3359c1d332d2f9b696d2d9","sha1":"0b33971b8d1e1ab72275ffd9f5b23d87389459a7","sha256":"099a201bf66da23cf80857826ddb5fa8f84af2b4ddff00e12b0cc110ba03242a","sha512":"dcb4cf3aa6dacedb59fc4c49b02f08bd765aa9c0c61f783f318a1a49e1904c29660f6b37aa147f1447e922a6ed9c4126224be6a739054d27c9298288702a2b16","ssdeep":"","tlshash":"b0a0022622c53d307339d5805be6a3433f505cb1998d90286fb92f1866d2d4b0df07f4","size":69,"data":"","first_seen":"2025-08-29T13:24:01.012004Z","last_seen":"2025-08-29T13:24:01.012004Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c348a8a373a2e0dc0f8d9cf2c87dfe1","sha1":"ea6a7187a45f95aed8759c468904d16a052b6160","sha256":"8bf150f6b29d6c9337de6c945a8f63c929b203442040688878bc2753fe13e007","sha512":"787ebe399baffa77673d3c7355f8a7fa58b43d72b16f08b5816587db1aa69639537cedc974195c71993059dd1971602d0d3becaa7b71d5b6d54a45b31d4b5f41","ssdeep":"1536:O4TCgi8RzmZFX38J+L0kJQsYb+5k/QRZdC/RtfDwnv+p0WzH/IoSE7qABZnu0sFv:O4AkTtU2p0WPSIDrstfam","tlshash":"709308ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93057,"data":"","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-07-23T01:15:28.831988Z","times_seen":1898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"bitgetnextlevel666.com/scripts/common.js;jsessionid=270AF7EAA6730DC54842D24193DA7C00","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"04a224fa4a79710bb2cd94f02492e2d3","sha1":"80df1993ffc76b9ef2b116e21b9455f62df17661","sha256":"f17ced91c16a392f6f6e3b006727499bd80c245d9ff527dcad4533b10aa50869","sha512":"003772951aa823a244376540f9cde02ecaa745c3df98a33bb472830731cf931bbfffce1d65c91be93ff1852bbb248f4b555c1b5b45da1c232f6eb51f2d8e858a","ssdeep":"192:krXll7DJtMWGfO7ycyvWSJEiQW1pvWuPf5Ovwa+TA4WAbWCz6XEJ:KLWS8BOvwa+TZ9Z6XEJ","tlshash":"8972c74cf7ef481850373075896f124561789407b41aee223d2ca9d43f69dbde2aabf8","size":17533,"data":"","first_seen":"2025-03-06T06:06:49.854509Z","last_seen":"2025-09-08T23:22:57.591911Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"bitgetnextlevel666.com/api/file/?code=79fad931349438712eceb0c8e16e8bc61beb0073ef7a1709a7136bdd3939d215\u0026extension=jpeg","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://bitgetnextlevel666.com/","date":"2025-08-29T13:23:41.068Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/file/?code=79fad931349438712eceb0c8e16e8bc61beb0073ef7a1709a7136bdd3939d215\u0026extension=jpeg HTTP/1.1\r\nHost: bitgetnextlevel666.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://bitgetnextlevel666.com/\r\nCookie: JSESSIONID=270AF7EAA6730DC54842D24193DA7C00\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 29 Aug 2025 13:23:41 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: /images/uploads/79fad931349438712eceb0c8e16e8bc61beb0073ef7a1709a7136bdd3939d215.jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2835,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T01:50:58.104205Z","times_seen":17490279,"resource_available":true,"data":null}},"time_used":1774,"timings":{"blocked":749,"dns":1,"connect":253,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bitgetnextlevel666.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"bitgetnextlevel666.com/images/uploads/1ff40c0ca07c276c0b5c7a897db132b3015224932d6d264be6f6819d3ab19b78.jpg","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://bitgetnextlevel666.com/","date":"2025-08-29T13:23:42.098Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/uploads/1ff40c0ca07c276c0b5c7a897db132b3015224932d6d264be6f6819d3ab19b78.jpg HTTP/1.1\r\nHost: bitgetnextlevel666.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://bitgetnextlevel666.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=270AF7EAA6730DC54842D24193DA7C00\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 29 Aug 2025 13:23:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2978\r\nLast-Modified: Thu, 26 Jun 2025 11:50:18 GMT\r\nConnection: keep-alive\r\nETag: \"685d33fa-ba2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2978,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x80, components 3","md5":"3e8448e6656e08b7cadd7726bb5c8d6d","sha1":"f88cca66712ade9b1168809e2e48f923ede26932","sha256":"d582cae619c0b8319b24acbb361d58f92e70f9327863aec18f416bacc45fb27a","sha512":"62a866290580146b7ad0f9f2d914f03228403c9db7e3fc5d97da180019f0c04f48e6a4d6a31bb176b98f5a1d289e40a7deee976b0c39206631c49d98b8b57a01","ssdeep":"","tlshash":"ac512a879f18ebb5cb5f0ebf410500a2facb1ec17da85e3416b1d6b96120cf26105f85","first_seen":"2025-08-29T13:24:00.991191Z","last_seen":"2025-08-29T13:24:00.991191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bitgetnextlevel666.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"bitgetnextlevel666.com/","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T13:23:40.140Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: bitgetnextlevel666.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 29 Aug 2025 13:23:40 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: JSESSIONID=270AF7EAA6730DC54842D24193DA7C00; Path=/; HttpOnly\r\nContent-Language: ja-JP\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery:1.10.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":9005,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b3b029dbc31b11da99d9bf7a253da3ca","sha1":"9bb582f17845a24d8705d8bee5cf8d31e9e0d456","sha256":"d7418d4f37f6059c9ce1e6ea317261983b3ea4c02758f0aadb5e481237a1de51","sha512":"c6e280d8c319435ef213f419eceb61feba95e6b0145f61d9a64c30770a20c45b395e6775a03cd14d4aa68fa691fe9c659b1fa9d7372f7630b1c7d9fd83c56b04","ssdeep":"96:d68Mduq8+2XGVsI7E3b4g3UAIhJeDE96xmAX1XfqXilqprYe2N:YgqaMzE328DxxX1XfqXt552","tlshash":"9f02a21a324e6c27023a8063a4b2f745d46fdd31c2765c9079bdae7357c1a2ecc585b7","first_seen":"2025-08-29T13:24:00.994582Z","last_seen":"2025-08-29T13:24:00.994582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1018,"timings":{"blocked":245,"dns":0,"connect":249,"send":0,"wait":523,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bitgetnextlevel666.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://bitgetnextlevel666.com/","date":"2025-08-29T13:23:41.064Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ajax/libs/jquery/1.10.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://bitgetnextlevel666.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\nCross-Origin-Resource-Policy: cross-origin\r\nCross-Origin-Opener-Policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nReport-To: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\nTiming-Allow-Origin: *\r\nContent-Length: 32984\r\nX-Content-Type-Options: nosniff\r\nServer: sffe\r\nX-XSS-Protection: 0\r\nDate: Sat, 23 Aug 2025 15:06:01 GMT\r\nExpires: Sun, 23 Aug 2026 15:06:01 GMT\r\nCache-Control: public, max-age=31536000, stale-while-revalidate=2592000\r\nAge: 512260\r\nLast-Modified: Tue, 03 Mar 2020 19:15:00 GMT\r\nContent-Type: text/javascript; charset=UTF-8\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93057,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32056)","md5":"2c348a8a373a2e0dc0f8d9cf2c87dfe1","sha1":"ea6a7187a45f95aed8759c468904d16a052b6160","sha256":"8bf150f6b29d6c9337de6c945a8f63c929b203442040688878bc2753fe13e007","sha512":"787ebe399baffa77673d3c7355f8a7fa58b43d72b16f08b5816587db1aa69639537cedc974195c71993059dd1971602d0d3becaa7b71d5b6d54a45b31d4b5f41","ssdeep":"1536:O4TCgi8RzmZFX38J+L0kJQsYb+5k/QRZdC/RtfDwnv+p0WzH/IoSE7qABZnu0sFv:O4AkTtU2p0WPSIDrstfam","tlshash":"709308ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-07-23T01:15:28.831988Z","times_seen":1898,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":16,"dns":1,"connect":23,"send":0,"wait":17,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"bitgetnextlevel666.com/scripts/common.js;jsessionid=270AF7EAA6730DC54842D24193DA7C00","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://bitgetnextlevel666.com/","date":"2025-08-29T13:23:41.066Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/common.js;jsessionid=270AF7EAA6730DC54842D24193DA7C00 HTTP/1.1\r\nHost: bitgetnextlevel666.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://bitgetnextlevel666.com/\r\nCookie: JSESSIONID=270AF7EAA6730DC54842D24193DA7C00\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 29 Aug 2025 13:23:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 17715\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: W/\"17715-1734916809042\"\r\nLast-Modified: Mon, 23 Dec 2024 01:20:09 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17715,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"04a224fa4a79710bb2cd94f02492e2d3","sha1":"80df1993ffc76b9ef2b116e21b9455f62df17661","sha256":"f17ced91c16a392f6f6e3b006727499bd80c245d9ff527dcad4533b10aa50869","sha512":"003772951aa823a244376540f9cde02ecaa745c3df98a33bb472830731cf931bbfffce1d65c91be93ff1852bbb248f4b555c1b5b45da1c232f6eb51f2d8e858a","ssdeep":"192:krXll7DJtMWGfO7ycyvWSJEiQW1pvWuPf5Ovwa+TA4WAbWCz6XEJ:KLWS8BOvwa+TZ9Z6XEJ","tlshash":"8972c74cf7ef481850373075896f124561789407b41aee223d2ca9d43f69dbde2aabf8","first_seen":"2025-03-06T06:06:49.854509Z","last_seen":"2025-09-08T23:22:57.591911Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1004,"timings":{"blocked":244,"dns":1,"connect":252,"send":0,"wait":254,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bitgetnextlevel666.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"bitgetnextlevel666.com/api/file/?code=1ff40c0ca07c276c0b5c7a897db132b3015224932d6d264be6f6819d3ab19b78\u0026extension=jpg","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://bitgetnextlevel666.com/","date":"2025-08-29T13:23:41.070Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/file/?code=1ff40c0ca07c276c0b5c7a897db132b3015224932d6d264be6f6819d3ab19b78\u0026extension=jpg HTTP/1.1\r\nHost: bitgetnextlevel666.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://bitgetnextlevel666.com/\r\nCookie: JSESSIONID=270AF7EAA6730DC54842D24193DA7C00\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 29 Aug 2025 13:23:41 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: /images/uploads/1ff40c0ca07c276c0b5c7a897db132b3015224932d6d264be6f6819d3ab19b78.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2978,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T01:50:58.104205Z","times_seen":17490279,"resource_available":true,"data":null}},"time_used":1771,"timings":{"blocked":748,"dns":1,"connect":252,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bitgetnextlevel666.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"bitgetnextlevel666.com/api/file/?code=c1a5b3413ed8cc0728da6e30be8a269d1b9f6a8040c2010a487399183f9ed0e8\u0026extension=jpeg","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://bitgetnextlevel666.com/","date":"2025-08-29T13:23:41.071Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/file/?code=c1a5b3413ed8cc0728da6e30be8a269d1b9f6a8040c2010a487399183f9ed0e8\u0026extension=jpeg HTTP/1.1\r\nHost: bitgetnextlevel666.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://bitgetnextlevel666.com/\r\nCookie: JSESSIONID=270AF7EAA6730DC54842D24193DA7C00\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 29 Aug 2025 13:23:41 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: /images/uploads/c1a5b3413ed8cc0728da6e30be8a269d1b9f6a8040c2010a487399183f9ed0e8.jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1741,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T01:50:58.104205Z","times_seen":17490279,"resource_available":true,"data":null}},"time_used":1771,"timings":{"blocked":746,"dns":1,"connect":253,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bitgetnextlevel666.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"bitgetnextlevel666.com/freespace/img/pc/qrcode.png","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://bitgetnextlevel666.com/","date":"2025-08-29T13:23:41.073Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /freespace/img/pc/qrcode.png HTTP/1.1\r\nHost: bitgetnextlevel666.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://bitgetnextlevel666.com/\r\nCookie: JSESSIONID=270AF7EAA6730DC54842D24193DA7C00\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 29 Aug 2025 13:23:41 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"917-1566205947000\"\r\nLast-Modified: Mon, 19 Aug 2019 09:12:27 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":917,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"91b05d386a322f9ce3e726fe3173b0b3","sha1":"5cec52d6d7acc25510ef39d9175b2a0f706efc6c","sha256":"13c5ca30516f10b894e6b3d5227b803a1e4ff33adf8a1c398c738848ff13b1c0","sha512":"8bbf8d8b14ff8feb2faf4dc05fad49c8e7d5e3608dc76c1d03af301bc0b69dc77f5527c797f3f54204c7dbad123fb80b7c2f2f0c18ca226c207787540266cd20","ssdeep":"","tlshash":"3511c034304a6b5b177207a354b7b219c04fed06f1017822f15c91bb37d2604ec466b7","first_seen":"2025-08-29T13:24:01.003432Z","last_seen":"2026-07-15T03:16:39.63539Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1757,"timings":{"blocked":744,"dns":1,"connect":252,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bitgetnextlevel666.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"bitgetnextlevel666.com/images/uploads/79fad931349438712eceb0c8e16e8bc61beb0073ef7a1709a7136bdd3939d215.jpeg","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://bitgetnextlevel666.com/","date":"2025-08-29T13:23:42.102Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/uploads/79fad931349438712eceb0c8e16e8bc61beb0073ef7a1709a7136bdd3939d215.jpeg HTTP/1.1\r\nHost: bitgetnextlevel666.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://bitgetnextlevel666.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=270AF7EAA6730DC54842D24193DA7C00\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 29 Aug 2025 13:23:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2835\r\nLast-Modified: Tue, 01 Jul 2025 06:40:07 GMT\r\nConnection: keep-alive\r\nETag: \"686382c7-b13\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2835,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x106, components 3","md5":"c035d0e977ba2579d784fb233e5a182b","sha1":"89a9c2cfd694f23049c03d1f7246467343474f5e","sha256":"e2c755c9f59aa2d3462324f13c86f8643e24ca99429f4fa5806f836dea78737a","sha512":"79e6e126339154af2a2a49b89dc0982f8e89d42d1d5b74e3939e09dc8eabb8c05b91968c6a586b82505025f17c8ae4fae63ec19fe5d9dc4c6a4d7e29cf7eb803","ssdeep":"","tlshash":"00513a820327d794cf2354f151657e2296dc81c2bc96b8f63fb2116ec610ef88a5c75e","first_seen":"2025-08-29T13:24:01.005846Z","last_seen":"2025-08-29T13:24:01.005846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bitgetnextlevel666.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"bitgetnextlevel666.com/images/uploads/c1a5b3413ed8cc0728da6e30be8a269d1b9f6a8040c2010a487399183f9ed0e8.jpeg","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://bitgetnextlevel666.com/","date":"2025-08-29T13:23:42.105Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/uploads/c1a5b3413ed8cc0728da6e30be8a269d1b9f6a8040c2010a487399183f9ed0e8.jpeg HTTP/1.1\r\nHost: bitgetnextlevel666.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://bitgetnextlevel666.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=270AF7EAA6730DC54842D24193DA7C00\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 29 Aug 2025 13:23:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1741\r\nLast-Modified: Tue, 01 Jul 2025 06:48:45 GMT\r\nConnection: keep-alive\r\nETag: \"686384cd-6cd\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x53, components 3","md5":"eccb05fa6eb40df9627f629cac56de57","sha1":"c29432b562f7a60faa41753560e487bba8382dc5","sha256":"95d414bcec27f048219c504421435f8b1ea4b83a56c9f77d7dff0b299c080901","sha512":"98725ac0f7bff682a8a0fa92384fd7996076a18ebfc77712b39d380fea254ce17401f24c21fe549e54e90fd5b3b480c88257ba699235057f531032a06b348cbe","ssdeep":"","tlshash":"42313d198b963061cb030e730d5130bb71145c43fd353971bb2a43abc740cb80604e88","first_seen":"2025-08-29T13:24:01.007848Z","last_seen":"2025-08-29T13:24:01.007848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bitgetnextlevel666.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgetnextlevel666.com/","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T13:23:36.246Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: bitgetnextlevel666.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T01:50:58.104205Z","times_seen":17490279,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bitgetnextlevel666.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"bitgetnextlevel666.com/freespace/css/pc.css;jsessionid=270AF7EAA6730DC54842D24193DA7C00","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://bitgetnextlevel666.com/","date":"2025-08-29T13:23:41.061Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /freespace/css/pc.css;jsessionid=270AF7EAA6730DC54842D24193DA7C00 HTTP/1.1\r\nHost: bitgetnextlevel666.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://bitgetnextlevel666.com/\r\nCookie: JSESSIONID=270AF7EAA6730DC54842D24193DA7C00\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 29 Aug 2025 13:23:41 GMT\r\nContent-Type: text/css\r\nContent-Length: 33907\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: W/\"33907-1455840982000\"\r\nLast-Modified: Fri, 19 Feb 2016 00:16:22 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":33907,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"b5714b36616683c2e4aa836464e3f563","sha1":"da9adcfc4867e4260b9c7ba7dfa4f2634af79f47","sha256":"c64d8a13a1c971e745bc5ad2f09d9d0875d4f31ed79c9eee37a3a1ef333ae09b","sha512":"1c1264f6d01802ee4ba9133d5526a07c06e4cb992da4e46cfcb7189d021ec7070ab3871b909fb22b07674175d945d712be26f5f58797dfcb6842e0b324fbd96f","ssdeep":"768:ywSTTauvJP4Dd9IRhM4HWZ8J+QJZijYf7xwdOIff49JWjJO4A6hizER5iFbSHJy1:Ajhs6A9dZ28RU","tlshash":"50e27719a754344ea207b2e5ffb05fd5ae760030abef41fdb860722cd1ad85c26726d8","first_seen":"2025-08-29T13:24:01.009775Z","last_seen":"2025-08-29T13:24:01.009775Z","times_seen":1,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bitgetnextlevel666.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"bitgetnextlevel666.com/favicon.ico","fqdn":"bitgetnextlevel666.com","domain":"bitgetnextlevel666.com","tld":"com"},"ip":{"addr":"103.218.4.220","port":80,"asn":137386,"as":"Child Wisdom Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://bitgetnextlevel666.com/","date":"2025-08-29T13:23:42.369Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bitgetnextlevel666.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://bitgetnextlevel666.com/\r\nCookie: JSESSIONID=270AF7EAA6730DC54842D24193DA7C00\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 29 Aug 2025 13:23:42 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"917-1566205947000\"\r\nLast-Modified: Mon, 19 Aug 2019 09:12:27 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":917,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"91b05d386a322f9ce3e726fe3173b0b3","sha1":"5cec52d6d7acc25510ef39d9175b2a0f706efc6c","sha256":"13c5ca30516f10b894e6b3d5227b803a1e4ff33adf8a1c398c738848ff13b1c0","sha512":"8bbf8d8b14ff8feb2faf4dc05fad49c8e7d5e3608dc76c1d03af301bc0b69dc77f5527c797f3f54204c7dbad123fb80b7c2f2f0c18ca226c207787540266cd20","ssdeep":"","tlshash":"3511c034304a6b5b177207a354b7b219c04fed06f1017822f15c91bb37d2604ec466b7","first_seen":"2025-08-29T13:24:01.003432Z","last_seen":"2026-07-15T03:16:39.63539Z","times_seen":19,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bitgetnextlevel666.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}