{"report_id":"26df888c-89eb-4ca8-b8ba-83b2201f76b7","version":6,"status":"done","tags":[],"date":"2026-03-04T13:29:53Z","url":{"schema":"http","addr":"bitlydo.com","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bitlydo.com/#/","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"title":"BITLY","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bitlydo.com","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T13:29:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ws.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ws.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ws.bitlydo.com","ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-15","domain_rank":0,"first_seen":"2026-03-04T13:29:57.05731Z","last_seen":"2026-03-04T13:29:57.05731Z","alert_count":2,"request_count":1,"received_data":845,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bitlydo.com","ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-15","domain_rank":0,"first_seen":"2026-03-04T13:29:57.041289Z","last_seen":"2026-03-04T13:29:57.041289Z","alert_count":64,"request_count":32,"received_data":4991329,"sent_data":14709,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.bitlydo.com","ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":12,"request_count":6,"received_data":42116,"sent_data":3258,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"106.54.228.253","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-02-25T18:46:08.416376Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitlydo.com/static/js/chunk-vendors.030e7f67.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b19db4a8cf9a5434ff5d7c53e880f011","sha1":"a52cf42b5f7b9e2807947b990a3fc5271af1994d","sha256":"bde9b1d90450939128212595817e179525d6220071f53db15128b4dccb566b44","sha512":"4867cba3371df6fad92c6d62c79457e3ffbdc1a7d6a9f90fd33f566024fe8534806cd8453fe6995a459a5cdac613bfa6e7adbeb5900a4b1cdd3a096b9a636fa8","ssdeep":"12288:Do/oKCVFEqxT/4T5Bv//CgefkzepptamsyPEyrwICj8R3tHm4L9:lVFEqxTwT5pkkz6pt7PELIw8VVN9","tlshash":"57a51bc876d1b0a583a365a5402f500be33ead686c4c4454f767e8e36cb9a8d5237f3e","size":2255801,"data":"","first_seen":"2026-02-25T18:43:26.853596Z","last_seen":"2026-03-15T18:21:33.292147Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/js/pages-assets-anquanzhongxin~pages-assets-auth~pages-assets-email~pages-assets-recharge~pages-assets-~d59e0207.5420228d.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7e33bd0b294557059605214b1452bdd","sha1":"d9af510ce2cae5bec32fa08d568ebb204d067283","sha256":"bb2f9be34c66ed116cd510fd09383b80777a339f856450053451e6bfece0024e","sha512":"9da69c6783dd879aa19c834fee735c323e071e0af44974ea436c22082098bde1a7145f7029195ce1c687fe33c030312ee1d36e7e30bca0a6ce2979965a82303a","ssdeep":"384:xMFCkwRYYxU1ABGbscGTyNM/R+xru4gdCD:xMFCkwRLxU1ABGbKsMSruHdc","tlshash":"2c720a88f0c6f855059350b2813f4309503aada97117a69db7b9faf64e78a8d2353f3c","size":16935,"data":"","first_seen":"2026-02-25T18:43:26.842249Z","last_seen":"2026-03-15T18:21:33.288636Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/js/pages-assets-anquanzhongxin~pages-assets-auth~pages-assets-email~pages-assets-recharge~pages-assets-~c60eadd1.6c3a9883.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c28d420afd4bf3ac3a5c53a236cfcb0","sha1":"25ac729c36217fc7416f20747bcea1c1ef60ef80","sha256":"17a14eb1d79319d2be6ee5f6a6bb8083e328a17f6bae16fd6d4bc84206d94c48","sha512":"1fb4480ceb79f485c80ec7f774ca1e89b4bfc62f1240c3b316b0c9650cddaf40131b313e0d6391f0191b8ba6b395dac5c60b8bb69ef33031e806a0add5b3d4c8","ssdeep":"192:FReYgjvE/ElunecT/iApF/ktw01SSG5moOdxOyuJqRsjpdqRstdZTkN9Rs1RCTwY:ngDl2e/k5vUxb2pMyos10TwJOt","tlshash":"c0b2d9216087e4ab4e566025317f3d2582362efce427fc40ebb6e8d694f59cf132ab14","size":25133,"data":"","first_seen":"2026-02-25T18:43:26.824402Z","last_seen":"2026-03-15T18:21:33.270272Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/js/pages-assets-anquanzhongxin~pages-assets-auth~pages-assets-email~pages-assets-recharge~pages-assets-~a148167d.6d2a47ec.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37543807c68f6d322e84dec71015406f","sha1":"f0a0402959ad2836aca03b348f923cd787a2364c","sha256":"583ae4efa68d9285fd982789fc7c7bac303a5742a6352d28087fd65fb73d68d4","sha512":"f3ea939e282c600b7106efff4b6b5fcf0e10fb2115360344d55808a30cf553ee5535c4071b11bc22c5bd6f70ff16a029e4ef886397c5d64736cd311b6616b58a","ssdeep":"192:kwnLEYx2wqxc+gbkx/Dvw2Z/TV+ca3OQfMLE4CqRstW:kULhxxqxAVIVHa3OXLE43SW","tlshash":"c692a786d45c09e4bffbe40f935e721f2a447fa5c0a098649dbb418d09ddbb225b4b2c","size":20027,"data":"","first_seen":"2026-02-25T18:43:26.843086Z","last_seen":"2026-03-15T18:21:33.286882Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/js/pages-index-index.eb80e46e.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4acfe2213085cc90740bb73dad31ff6f","sha1":"b793c504a8591c2ed35ce61cca49497ad67d313b","sha256":"103ecfd2c713871f2f4575693422a7a7d47ed205289b76132fc1661367502bcc","sha512":"2fae74d4610b517f4254bfefd5f37124552ac2787e456155e295322d776664ca239a8edcfe3aec8a13eba502e2b4d21c482d61d531abb935b3aef86b577896b6","ssdeep":"192:I6NVAdPmlBCIHT9zXZf6vrTIokE5AqRsxyh57djSO6rXkyQ6Y2iFxJ9GW9uDL+/0:IBPmlLp0YMZyyh5xAk9GnxUcqM","tlshash":"38c2fa10f647e4abaa9fc81fb11f2b08653275e6e002e490f775ec6588ea846363175f","size":27543,"data":"","first_seen":"2026-02-25T18:43:26.844717Z","last_seen":"2026-03-15T18:21:33.280941Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/js/pages-index-FutureList~pages-index-Options~pages-index-Stock~pages-index-index.7450705a.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9defc8a5a1861e989a91f1bf5c7d9942","sha1":"b975c908703d75f65dd2b4b7218555da1faa7fee","sha256":"2657df8cefc304a5416dfcf2b095983eb76177c36b18b08696e6e5a4ea9b4f3b","sha512":"7542a356dd7d7fb3ed1eb99215a8a1bd0b8304159dbacb08cf65828203d84dc96f1b53d8ef470c90c8a5b17a11af034fb8ee2291072b57d9c6ac7ee8e3ae0502","ssdeep":"12288:PEI94zcd40jJlEOhv6sIOKLMLBiS7TqmcP8dGyvsT4dpsFM3D+4U8HsT54QdC:sqUOhvYvKkS/tg8d2qmM3D+4UAsT5DC","tlshash":"6b25f99cb654b03543a771b4056f090f9336680db50b85a8fb69e4ea6cbd44e323bf78","size":1044734,"data":"","first_seen":"2026-02-25T18:43:26.843909Z","last_seen":"2026-03-15T18:21:33.280167Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b17c22ebce0d3513e2066b34994b370","sha1":"654276b80e1693f6af1bda17c896ec120431cf5d","sha256":"422e25890aa37cbe958a672622cdf00b6d804a39478d2aaedf99edd0ddf366c6","sha512":"af32a06e9cf784426649531239e48f731a74d06fa9a2857d98926029d2715716f08c284c9fcff3db187c48dc9e00e6b715a3f2b82f9cf87e453431d3d9d4c526","ssdeep":"","tlshash":"29c08cb836201430074bb21c713ce3883db300023003350bb41c028d0ff0ec44231ea8","size":180,"data":"","first_seen":"2023-03-08T02:37:39Z","last_seen":"2026-05-30T07:44:14.686831Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/js/index.032b6039.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb840fdfccdef9fe113cd19fc5a57aa2","sha1":"168243e0296961bee4498367940be86086ec9fc3","sha256":"d89b39e5891b74927e426077dd427deee1630f369d4fce081b533f0a46148192","sha512":"04b3c605007bcc048aee782ef2da22f79741d46819b67816861443c831ef63d155fca5dd49dc3143ddf214b05b32a2160e114542e027d47cea99cb36da0a01d3","ssdeep":"12288:MD+Da/SRnRJ1d8yqL8xZr8kKm7a9mPdOHndl7s7iDR8xGO/U:8","tlshash":"9fb4171d248d6ebfc7e91380395fbf0630e41de39896d4cb439d2f012baab15a157a39","size":533617,"data":"","first_seen":"2026-02-25T18:43:26.855118Z","last_seen":"2026-03-15T18:21:33.290745Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"wss","addr":"ws.bitlydo.com/","fqdn":"ws.bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ws.bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bitlydo.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: X9zuNA6ePFJkoJ8fkSHpiw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 04 Mar 2026 13:29:35 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: z3uKWOoi1VF+A9H0ahD4sBcqLws=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=A%2FIQuTEhNR%2FUzCJ0ktcdWZwycsxczMSvziAeFitb80bGbpChxeS%2FLICOMQ3abL5e0XKE3CZfT1LU9nhOdFD713P0iV2g9MrH5W5DEKFXzCRWQkdvO%2B0i%2Bq0c%2B4oRgjzVBg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d713b0b1f7e4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=8365\u0026min_rtt=7556\u0026rtt_var=2434\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3111\u0026recv_bytes=1151\u0026delivery_rate=572935\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=a76c193f3d31718d\u0026ts=408\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":0,"dns":48,"connect":56,"send":0,"wait":389,"receive":21,"ssl":78},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ws.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"ws.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/images/search_icon.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/images/search_icon.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-7e4\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zriU9Fl7ZffhjhnWIaAIBQkcUNLJ%2BVVjUaJTJEh8J4nbfpiTcappEZ0jUyLXnfdLoMD7dvcz4pePlMQk4nem5hkTFr88jWcayDRR\"}]}\r\ncf-ray: 9d713b0afaebd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"650a1e361075505d9fc086fc5a4bd7ad","sha1":"77b4737f10328b1c199918cf68ced2819c4d64d4","sha256":"763458e179eb49c278aad4921a9446a12e07aa1c8363c416cf70128c305dbf5a","sha512":"ea0108fc598b6f4d461094bbc7c558f4b350edfa4331cb99d70818540fcbd78bd520e536700c3ea99f6be127a5bcdb35f55c202f5455f4320b9807de210d28bf","ssdeep":"","tlshash":"dc416c23da5b554dd8e06899d730c9a6ff1d24310186928127883544b736cec1fc4df7","first_seen":"2025-08-29T08:01:15.803029Z","last_seen":"2026-03-31T16:23:06.842241Z","times_seen":30,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/images/index/tba_2.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/images/index/tba_2.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-1446\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nMREAcwHeEmhyPgilsQa0XP2JZnCz50dKH3Y7NVdsU57%2FSdI6V9KqfWz%2Bs8bCqdN6odccl1bkgko%2FdO9Jc%2FNqrvFGbRlP3dF0j%2Bz\"}]}\r\ncf-ray: 9d713b0b0aedd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 99 x 99, 8-bit/color RGBA, non-interlaced","md5":"570c5e5a0a0e10a2b7a6ec339d614800","sha1":"edc66b52a6f3db000eb79fade431ab82ac78e823","sha256":"8b250b6b8eb47efcdc21f6cbec917e8d16e8f1c27d74dd7daf5951d830ae52d9","sha512":"6ad883d9e2ff82e248af48d4da61bdf489c2ddb8d2fcec57030d5f42c146476b5bfa1c8d4e9f5c9d13a434804eacbad71fe7cdd681b20cfeff91b77cc4f9577a","ssdeep":"96:reBGveelbaEeUW6B/OwL2euiEf0lv/MnTK0qM7b0dBd9c41pBpT7:KkNlZa6B2yy0BmTztkBd9pPpT7","tlshash":"62b19f8367f0f47c4fc1b3108065ab486fec39086dca32c5af56bbf478a1618e827620","first_seen":"2025-03-04T21:35:25.012586Z","last_seen":"2026-03-31T16:23:06.777862Z","times_seen":22,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/images/index/tab_sell.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/images/index/tab_sell.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-1476\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsmOX4ZqGXEAyxAQ25rqkXLixSLDxJ1fCtJYzfY48Fackou%2FSn5jyKk4YK4DIjTQ%2BjUIa2i1fyKKe1AVP%2BAw25nu3mlI2Nx9%2FBZb\"}]}\r\ncf-ray: 9d713b0b1af5d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 99 x 99, 8-bit/color RGBA, interlaced","md5":"c07aa79e847633a40360a34ca8d0cbd5","sha1":"b9c410b1bdce8b7a84e689c6a238bffaef956837","sha256":"eb544d6d622afb1807a7b72ee6d05aff1a95f3fb8d58e5df25bd71cd35940134","sha512":"550a286d26d5f9d68292345e61e8e52b616768cbc78747721daedb441717135af7ce3df11b36904e3db2dd71299d368c7a35261981494c91b09c0634cd8fdc33","ssdeep":"96:iS50oGKq7N0u2yADeT0SDySdezzhBdmmopISTLm+74RsRx+ABzP:lqsmN0urDptMzhEpIyLmQ4RsHp","tlshash":"f9b17d6b0cbdde81f3718b3625e50060cab810e554975d174086fdb6ecbb741a37a762","first_seen":"2026-02-24T03:22:42.367018Z","last_seen":"2026-03-15T18:21:33.256206Z","times_seen":7,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/tabBarIco/icon-tab-4.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-4.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-70c\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RmUGFwzb7hn%2F5GNQehOCoTdN866Lb848xFWaKKogP2cd2rAJ59OEPA%2BQNPslV%2FICpWO%2BTwwwXagyQyBQ2vPJPi%2FrvduANoLOnrb9\"}]}\r\ncf-ray: 9d713b0b1afad9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1804,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"84b383beeb0ecc4385b932a83d8af57c","sha1":"e9746a1a4547cba69541584649681d9763087cfc","sha256":"2511079eff341f97904b4a3cf0dd6250cb8a652eb003113072114c16c0884588","sha512":"8150640760268fd9c6f4c5cc0fee8d29d32e88becb373d2b199f9a8950d43be3619d62edd39194806e74e4fa4a493181b21e936cd84129d90bc303422160371d","ssdeep":"","tlshash":"c6312b4bf5b72463cd2d0487ece231c4f37199a225cd129eac23207cec2645c3c6651b","first_seen":"2025-03-04T21:35:25.017614Z","last_seen":"2026-03-31T16:23:06.799174Z","times_seen":26,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T13:29:31.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:29:31 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Feb 2026 16:26:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Te13SLK1DAG9lC9a%2BEzyD1lyQ%2BYShG4Bu972Nizbbm9OlTIu5uhJIIe%2B5%2FnQNN4rmuZUToZwXCOLWfuVUJscMdx6NrGOzJr5Bf4%2B\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d713af25aef07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1350,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (938)","md5":"9fc021d8f4a7411c269a9bd6cc21bc93","sha1":"e0ea022e6cd6e11c1b5880dd8a551dc9959576bd","sha256":"44bc4e54fa4b6e459295b97df2d3ace6fe3b0bcb9c4a32365d7e66ae8a482e69","sha512":"9873eac0b5214c424d640e63c5d3aab0a270641b37ea6537926c12b2d6e12ec6f998704c004b873873dbaee5d971ca728fd0fe933325edcb37d0640b510eeeb2","ssdeep":"","tlshash":"6b2156a73d34f05d47b04105b0bab12c48b74a506211d984798c48dd0be0fc88eb653e","first_seen":"2026-02-25T18:43:26.82781Z","last_seen":"2026-03-15T18:21:33.27929Z","times_seen":5,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":31,"dns":0,"connect":8,"send":0,"wait":416,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/js/pages-index-index.eb80e46e.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:33.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/js/pages-index-index.eb80e46e.js HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Feb 2026 16:26:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699b2e19-6b97\"\r\nexpires: Thu, 05 Mar 2026 01:29:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UgKa%2BA7CBABio4zcTnG86P9iFgwtXTUJbF4uOuwne8HsAmHP5uPXODteqy8Naivuy6b%2B4RvPqPLK7kJUG%2FsyDIeH3fh6VxqIDx%2FK\"}]}\r\ncf-ray: 9d713b0189dbd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27543,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26929), with no line terminators","md5":"4acfe2213085cc90740bb73dad31ff6f","sha1":"b793c504a8591c2ed35ce61cca49497ad67d313b","sha256":"103ecfd2c713871f2f4575693422a7a7d47ed205289b76132fc1661367502bcc","sha512":"2fae74d4610b517f4254bfefd5f37124552ac2787e456155e295322d776664ca239a8edcfe3aec8a13eba502e2b4d21c482d61d531abb935b3aef86b577896b6","ssdeep":"192:I6NVAdPmlBCIHT9zXZf6vrTIokE5AqRsxyh57djSO6rXkyQ6Y2iFxJ9GW9uDL+/0:IBPmlLp0YMZyyh5xAk9GnxUcqM","tlshash":"38c2fa10f647e4abaa9fc81fb11f2b08653275e6e002e490f775ec6588ea846363175f","first_seen":"2026-02-25T18:43:26.844717Z","last_seen":"2026-03-15T18:21:33.280941Z","times_seen":5,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/images/index/tab_gold.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/images/index/tab_gold.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-11da\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I4QTX%2BVZSZaSiemuqHmCRAWlOSe%2Fz7JAcNwCI7PT4LtFqTbWRNJqJEyy3xyR83nV0%2BTS7gW21m%2FoLdskVayR5PuKVMEFGQrM%2FcLU\"}]}\r\ncf-ray: 9d713b0b0aecd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4570,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 99 x 99, 8-bit/color RGBA, interlaced","md5":"1859b2e6483bd6089b90aaab7ec20365","sha1":"803aad57c775eaf977a6a7ca58a5ce6968812494","sha256":"de569bb194df59bdd2c2f87adcd82cf6611ad5c3da7fccdd89a98867d2720cdd","sha512":"e52523d7192c15e6e589508e97082bcc4b53931d3c96bc876bb91c6755f0284af78e177434e2e6b469c61a55db09bb2bd1ef1c9af3b15bf9a1e8c64313363f92","ssdeep":"96:iS5038j7QCum3hz3AQk6QDsa7883UsBYRY8Jtz+ePtR:lq38vQCpAQkpD1asBCnz+ePtR","tlshash":"dd916cf64e7129adc09fca26171d7124b7bb91b1143a2947bb28cf0980468c97ba52e9","first_seen":"2026-02-24T03:22:42.348716Z","last_seen":"2026-03-15T18:21:33.219998Z","times_seen":7,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/images/index/tba_5.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/images/index/tba_5.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-f75\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4vNEfx73s6rAILj7LuA%2B%2FZfOS0FMclePaJIJmeJCgAANUf8ttSxITFTIfy%2BjRKE6eyHUx6Lxpuvj%2FgP3itLTj%2F5ykVlbpyPg2swU\"}]}\r\ncf-ray: 9d713b0b0af3d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 99 x 99, 8-bit/color RGBA, non-interlaced","md5":"985da971667d59b92f246dea463ec1fa","sha1":"05a5b57353d3c7930d3a1141d9ccf11269430466","sha256":"c36dd60c99c2c1ada30ce849c136f64aa23f1b3693b2c787c5d22d7f447f34b3","sha512":"e0c7d13a3ac713d5d8a7c0c08284cf46bd56fbb2d8a97af51270a616485dbfa8db944845ff914881cfcbf00c1bb158407a505e6bb2f9e9dced236e9466efe973","ssdeep":"","tlshash":"85815c4c06158c27df12cb09693d65c8f8cb6402aa3d098c894ad378aa7ffb7a7e6145","first_seen":"2025-03-04T21:35:25.029992Z","last_seen":"2026-03-31T16:23:06.85094Z","times_seen":21,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/fonts/PingFang_SC_Bold.ttf","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/fonts/PingFang_SC_Bold.ttf HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 5744\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\npriority: u=4,i=?0\r\netag: \"6973babf-1670\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UT69JUwtC5uNmA0qH8VDPKquOGNz16X6IHCtDwXDfbtxJKVwW5j2DMOdAGHT3nx7XtFKAZvpR0ciOv7WhEESULPwsULcoAvB3pSN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d713b0b4b00d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5744,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 16 names, Macintosh, type 1 string","md5":"0ca8798f6e0f357dbfb996e641fb37cd","sha1":"e9b149104c1574af0d7142ad5ed6c0c10e5d4456","sha256":"60c022687761337a20fb754cf357c6092caf171d284353e3299d5ed14a9c9299","sha512":"97e0d9c4e5ea18af0cbadcbacb600157d901f5a4522b43eae3de172745569730efe89aefb896671669dc6ad16ff273576cef911c9e8947cd86536f2fefe39fc4","ssdeep":"96:XNfuMu095YOLt8m0Ti3H1+kULlGjdsv4FFTAXNY/ypTj3NW3r2HAI:X1uMu0XjtETVGdJFTAXKypTk2HH","tlshash":"2ec1e942c73ccd0ee90e97784c528b06abb9bf61e3a6071b8b650f4ddcc56894dbda14","first_seen":"2023-11-01T08:09:52Z","last_seen":"2026-05-26T02:12:58.293597Z","times_seen":558,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitlydo.com/api/common/index","fqdn":"api.bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"OPTIONS /api/common/index HTTP/1.1\r\nHost: api.bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang\r\nReferer: https://bitlydo.com/\r\nOrigin: https://bitlydo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization,content-type,lang\r\naccess-control-max-age: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YM6F6STAntv%2BV%2BDrbDXDQdRDHHjz6ioKftbS4xLXgx3ssg72RuBDoL111HRx5S8HatTZTU1tvh2fweW7t8Y%2FICLO%2Bg%2FZ5eRUhLZ8iZz27A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d713b0b9e2e6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":716,"timings":{"blocked":44,"dns":6,"connect":8,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"106.54.228.253","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 13:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Wed, 04 Mar 2026 15:29:36 GMT\r\ncache-control: max-age=7200\r\nset-cookie: __uni__uid=rBEQg2moM8CmYUu6A2bsAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-06-08T18:13:47.365785Z","times_seen":16229,"resource_available":false,"data":null}},"time_used":2058,"timings":{"blocked":696,"dns":42,"connect":292,"send":0,"wait":666,"receive":0,"ssl":359},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/images/index/tba_6.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/images/index/tba_6.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-1231\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EFRUDV0myz%2F5z%2BuYfPAHVrVySAddBhc8ljX%2FTCnOvAx2oZbR84qe96rAiZ4Z4Owkm0atHMb9C09ZKv3JTCIBx5Pif05x4%2FzPukPX\"}]}\r\ncf-ray: 9d713b0b0af0d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4657,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 99 x 99, 8-bit/color RGBA, non-interlaced","md5":"00244bf1e3f189229478376e95ad10ed","sha1":"2b6891c639a3c58c3c531be2a81b3bcab7e2aba7","sha256":"2f0647ba9f0214adb9ad94e33b4bcce3e8c6b6ce17961c70ff0f2da2aa4e807b","sha512":"c64e40c83699e93d253527baa0415a66da34654b35ba4e536e07f90da32ec821f2cc0c2706aa5ae8a6e3b902e55debe0e2704f3e01415d37b7187751b3e2b5d9","ssdeep":"96:KqFbopEgiG73W58byKVax0nMoe2Ym55y4Gxgstj5s96yCWhNKBW6ikV82o0:fFbZeyKUxqG2YGag6jjyC2cE2o0","tlshash":"71a17d88cb3b7c28e7e9e8028270034800d8666ab749d98cbfd0d351b71b97d496f019","first_seen":"2025-03-04T21:35:25.014884Z","last_seen":"2026-03-31T16:23:06.645334Z","times_seen":24,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/js/chunk-vendors.030e7f67.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:31.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/js/chunk-vendors.030e7f67.js HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Feb 2026 16:26:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699b2e19-226bb9\"\r\nexpires: Thu, 05 Mar 2026 01:29:32 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y18D%2BqfqhAyC%2BEfAb5tbA6KkT18cPqp%2BBu5FGNKeeOYKzwZoNASXKVNJXMAyKX9NiSpFSrPBBbFBwcahPf7hNgcy%2F7SIQrXaebju\"}]}\r\ncf-ray: 9d713af5e80ad9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2255801,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34509)","md5":"33234057aa0345a9cbb1de43dd091e07","sha1":"358cd02166b6e69dd9af4dbeedb14a7d8320d2b9","sha256":"7dbe81a5aa3674e5566477ec802b19c24e7e9399348d545c0859af69fdcc0593","sha512":"db1e32e259d3f742d48acff99ba9f851ccca0d64d71cc1c2b5072fb90bb8e26204807c5abca1848b11cb3f072ed5e322f70e1dc8e614921adaa696c32a35f073","ssdeep":"6144:nDKJ/jUKEPVHltKqa1ETPH0Gyvm/fGiK0ef5NbvlAcFhCgebgla/kkS:Do/oKCVFEqxT/4T5Bv//CgefkN","tlshash":"242517cc7292f07647e320b4003f210ba27b6968a84d8498f676e4e56d79d8d6277f3d","first_seen":"2026-03-04T13:30:02.46376Z","last_seen":"2026-03-15T18:21:33.260424Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":903,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/js/pages-assets-anquanzhongxin~pages-assets-auth~pages-assets-email~pages-assets-recharge~pages-assets-~c60eadd1.6c3a9883.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:33.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/js/pages-assets-anquanzhongxin~pages-assets-auth~pages-assets-email~pages-assets-recharge~pages-assets-~c60eadd1.6c3a9883.js HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Feb 2026 16:26:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699b2e19-622d\"\r\nexpires: Thu, 05 Mar 2026 01:29:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AgLAxdrYreKi%2BNCN0hxy9Dipw4RnKy2CQzMOZKavar1cgG0npEhZC4kR2l7SKemtl%2FGouGrj1At2JYJSxbZpiRXM%2BZ%2BrMURZbjLa\"}]}\r\ncf-ray: 9d713b0179d9d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25133,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23565), with no line terminators","md5":"9c28d420afd4bf3ac3a5c53a236cfcb0","sha1":"25ac729c36217fc7416f20747bcea1c1ef60ef80","sha256":"17a14eb1d79319d2be6ee5f6a6bb8083e328a17f6bae16fd6d4bc84206d94c48","sha512":"1fb4480ceb79f485c80ec7f774ca1e89b4bfc62f1240c3b316b0c9650cddaf40131b313e0d6391f0191b8ba6b395dac5c60b8bb69ef33031e806a0add5b3d4c8","ssdeep":"192:FReYgjvE/ElunecT/iApF/ktw01SSG5moOdxOyuJqRsjpdqRstdZTkN9Rs1RCTwY:ngDl2e/k5vUxb2pMyos10TwJOt","tlshash":"c0b2d9216087e4ab4e566025317f3d2582362efce427fc40ebb6e8d694f59cf132ab14","first_seen":"2026-02-25T18:43:26.824402Z","last_seen":"2026-03-15T18:21:33.270272Z","times_seen":5,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/tabBarIco/icon-tab-33.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-33.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-72c\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GC3mjyiobRFpBgvynF8Iz%2FfaabOuQF1m%2Bg7jJdJLvRl1RCnrMeQqoxjDpO%2BiRh%2BjdajMdOQun5WmAXdSFiwRKz5vTBb1iA9JZWPt\"}]}\r\ncf-ray: 9d713b0b1af9d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1836,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"6eb7a6a970da568cbffbe4658fbe408a","sha1":"cb06899edeb1e9803ca14c6229dfb4eaf1f90794","sha256":"122cc7273e4276d6e2e5f9a94abf34cd466a0ae8aa78c545cd5c4a036abfa8c3","sha512":"bd29f8e88856fcfe5976e7e85fe20afbfd9ea9d19e65aca4268868911d3fa42dfbb27eddb788c4f4c959fca37e4b2c70001caf51e8b1ac2a1c7e889d663e90b6","ssdeep":"","tlshash":"e7314b2b02d8821d38cce562fca3639446f7372682c36bc7129458b42378f1206aece3","first_seen":"2025-03-04T21:35:25.011173Z","last_seen":"2026-03-31T16:23:06.861814Z","times_seen":27,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/tabBarIco/icon-tab-55.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-55.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-791\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1kg%2BMOCEy3Q%2F9LuvPtqWuIQw0xCvCvNBzg18Q%2B%2FROoDap86MvEMT4mGNqHsEXSJMYNsPAg7ccmzRhzgc2DGfWXVohASS7IRAYu0\"}]}\r\ncf-ray: 9d713b0b2afdd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1937,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 48, 8-bit/color RGBA, non-interlaced","md5":"63905fad598692c99c308b6862c23751","sha1":"4268f686243cf9823a3ba066c44862d33fd08cc0","sha256":"ec86f50415b6f84376fda19876addadc5ec5b0f0a0ecbb5349ab6a13199a6164","sha512":"36fffbe6a224270039662cb2549e6a1a98dafc419db392676a0bf7636697dc6986134398d0ec3188d609b3757e053b5b3a10f42d7ae42f6f12bb1072c1faa336","ssdeep":"","tlshash":"46414edd4e3920edaf06461968699386c07d05934ce71b0f1de1eeb7284d0cc3e03653","first_seen":"2025-03-04T21:35:25.018166Z","last_seen":"2026-03-31T16:23:06.782847Z","times_seen":27,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitlydo.com/api/common/getCustomerUnread","fqdn":"api.bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"POST /api/common/getCustomerUnread HTTP/1.1\r\nHost: api.bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Bearer\r\nlang: en\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: https://bitlydo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"tokenAuth\":true}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:29:36 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCesQCoXDhm%2BhbpItmKHPo7dFgceetKZansRs3C9o%2FZWtMBrTE6lHWIwBvgvBX6Foc8Vwy%2BA%2F2PgQ0BQa02F9QpjknPZylHiTVHcMMK5Vg%3D%3D\"}]}\r\ncf-ray: 9d713b0f4dfe6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e56fb0f9c0ffc76cecdc8520de5500c5","sha1":"1cd36bb70de15ea246b41ec0c69c6d2f971485af","sha256":"21383eb68bc3998bb0a4cd775efb1ba371911031b77df5f51c8bedbb67d6aee3","sha512":"0e4c25e091638baaf109f6d1eee117e7c8836fb79e3b5f8e2cc39d34733328a328733f921b4274aec946ef21c67955563dbfe615f20cc031707828e65d9603a5","ssdeep":"","tlshash":"faa022002c082e022e03e802300b222088f22220e300020008fcc028ca0c828e00a800","first_seen":"2025-08-29T08:01:15.817238Z","last_seen":"2026-05-04T20:06:51.242811Z","times_seen":24,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/js/pages-assets-anquanzhongxin~pages-assets-auth~pages-assets-email~pages-assets-recharge~pages-assets-~a148167d.6d2a47ec.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:33.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/js/pages-assets-anquanzhongxin~pages-assets-auth~pages-assets-email~pages-assets-recharge~pages-assets-~a148167d.6d2a47ec.js HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-4e41\"\r\nexpires: Thu, 05 Mar 2026 01:29:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFlg%2B6e7GCn4Y1swhTmOqz6XfoPdj2jfeooVoghmvHtQuP7sgFb3CrDqCyiUgmBBZPAxdREM1AohusMeUbq%2Fwf7tytsK15FYhUdT\"}]}\r\ncf-ray: 9d713b0179d5d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20033,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19211), with no line terminators","md5":"37543807c68f6d322e84dec71015406f","sha1":"f0a0402959ad2836aca03b348f923cd787a2364c","sha256":"583ae4efa68d9285fd982789fc7c7bac303a5742a6352d28087fd65fb73d68d4","sha512":"f3ea939e282c600b7106efff4b6b5fcf0e10fb2115360344d55808a30cf553ee5535c4071b11bc22c5bd6f70ff16a029e4ef886397c5d64736cd311b6616b58a","ssdeep":"192:kwnLEYx2wqxc+gbkx/Dvw2Z/TV+ca3OQfMLE4CqRstW:kULhxxqxAVIVHa3OXLE43SW","tlshash":"c692a786d45c09e4bffbe40f935e721f2a447fa5c0a098649dbb418d09ddbb225b4b2c","first_seen":"2026-02-25T18:43:26.843086Z","last_seen":"2026-03-15T18:21:33.286882Z","times_seen":5,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/js/pages-index-FutureList~pages-index-Options~pages-index-Stock~pages-index-index.7450705a.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:33.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/js/pages-index-FutureList~pages-index-Options~pages-index-Stock~pages-index-index.7450705a.js HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Feb 2026 16:26:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699b2e19-ff0fe\"\r\nexpires: Thu, 05 Mar 2026 01:29:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3NAd1N%2BJxAtfyhnwxhPFJJFq6IJNzrcLX2h7o2DcvHyN3nlWELa%2BD7o50iALRKUApuAGqflADVqyPC9xoVS9MwYzkclzO0MISnRY\"}]}\r\ncf-ray: 9d713b0189dad9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1044734,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60274)","md5":"9defc8a5a1861e989a91f1bf5c7d9942","sha1":"b975c908703d75f65dd2b4b7218555da1faa7fee","sha256":"2657df8cefc304a5416dfcf2b095983eb76177c36b18b08696e6e5a4ea9b4f3b","sha512":"7542a356dd7d7fb3ed1eb99215a8a1bd0b8304159dbacb08cf65828203d84dc96f1b53d8ef470c90c8a5b17a11af034fb8ee2291072b57d9c6ac7ee8e3ae0502","ssdeep":"12288:PEI94zcd40jJlEOhv6sIOKLMLBiS7TqmcP8dGyvsT4dpsFM3D+4U8HsT54QdC:sqUOhvYvKkS/tg8d2qmM3D+4UAsT5DC","tlshash":"6b25f99cb654b03543a771b4056f090f9336680db50b85a8fb69e4ea6cbd44e323bf78","first_seen":"2026-02-25T18:43:26.843909Z","last_seen":"2026-03-15T18:21:33.280167Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":739,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/images/index/tba_4.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/images/index/tba_4.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-e21\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yc5faF10ilYk6Yhbs1pNO%2FihH2fVll2OFUTjGXJS%2Fulbt6PjITfe9kZUlYImAD0a5GSEXs4D5aI4gkJgYe6SbxVhmGg3S5hpjNM7\"}]}\r\ncf-ray: 9d713b0b0af1d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3617,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 99 x 99, 8-bit/color RGBA, non-interlaced","md5":"754c5575ac5f7f79122675ae3d43742f","sha1":"424ca91144aefaa9faa98dc5ac2a5a40d4e20536","sha256":"9e510114022d7a512024ea0099a7dbd52353235c6661a61acce0592d5873ade6","sha512":"eea5d733c51a8122b82dc56b1645dc52017658313a93902078b7b9df1ee85511aaabe3c60677253b44c004ce01a05e0bda16ea4667f6ce5742b98ae8661e2c96","ssdeep":"","tlshash":"13715edbc7d89874b069d2c07d0327a91ebe4ed924149ac56d4c0fab049362fd63e165","first_seen":"2025-03-04T21:35:24.999799Z","last_seen":"2026-03-31T16:23:06.664421Z","times_seen":27,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/tabBarIco/icon-tab-1.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-1.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-5b5\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vk9rN1pP3tYMH0WEK4z%2BHwa2VxrCuaaycprjnM5vKAVhRqe1J2Fr2cgDZPpAOUzRmFGG8o8DlZszzo9q5eVys0Mzyi1u8BMVcyRf\"}]}\r\ncf-ray: 9d713b0b1af6d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1461,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c12a5ae990c7f34b87710fececfec3fe","sha1":"f165a4a49a52f2ec6048231d4d68c9cef5f60898","sha256":"3a4561eef08cac87ad3515f6e248e62c01f69c99d8e3f89c6ade0784623b29bb","sha512":"ad21bc540e94bfcbc23b04303d028041088137f28f92b13629222523baa455107d5adb8a2e12191abbe934e57056f01e38dec074e8e16f85b86424f08242981d","ssdeep":"","tlshash":"2331a95676e37438b4453f1f4b7f9b6070a6194c489248490db7cb4786a0e551b35954","first_seen":"2025-03-04T21:35:25.028353Z","last_seen":"2026-03-31T16:23:06.796936Z","times_seen":27,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/tabBarIco/icon-tab-11.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-11.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 989\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\npriority: u=4,i=?0\r\netag: \"6973babf-3dd\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UY%2B%2Bmhhgi9auq7OgPgqVnW1qasHeByC%2BRnIbjmNJ7vv0K8ceX4QEqzEWKnOI5Of0i%2F0UNPx1y46WnKHFAynsWJgexud0aIrnrkq0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d713b0b1af7d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":989,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"23a3d09b9e49e0078791858641e3aa52","sha1":"5b6a4a1424affdfb18bb99637808706ce5c9f179","sha256":"a3ed87abbdcb897d93f67d77772c258349d19db461c7435b41190612d9647af9","sha512":"4cd786ab85a8a700c25f75b4c8e22146564c7ca21655ce8a58809845c456af88ce5c18b65280d5c3f0c6d554d788192f6f7573d8101a6861141a609de5b7ef6c","ssdeep":"","tlshash":"b911c8a11163c8af9b106e1bd17090cddba13344b202a27d0d297723fc0f6923b0295c","first_seen":"2025-03-04T21:35:25.00527Z","last_seen":"2026-03-31T16:23:06.747344Z","times_seen":27,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/tabBarIco/icon-tab-44.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-44.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-5e1\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwAVKgv1L6izZchEFStUQsBlSkqF6rNKd3hrgLfJ71%2BTePS2riI7qqJ2uXtAhx%2Fnn1VeGlKOMfclgyCmriDglYHoPRVLI3nbm0uc\"}]}\r\ncf-ray: 9d713b0b2afbd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"6d7dcb688ded4c4b2cd0bd0ce7f423f9","sha1":"c7c9f675e6dec8ff2061bfcfa1834bab4bf47567","sha256":"7a7546e17be6c7f3fdce16099fa8ba842a374fd18b250ff2620f78c30182397e","sha512":"343dde31f233e8653e0fc09e190f02c2a5a7b0d2409612fcc1065d044e3ec788c5380314a3a4111e2c7fbe2c1a11e59e5b2ed5988e2069a891ae9f2733322436","ssdeep":"","tlshash":"e031f9156097d90d9f75bc41f0cf0d6c1d153fe4420ae2e61482d53b2a4aea09e5808a","first_seen":"2025-03-04T21:35:25.008493Z","last_seen":"2026-03-31T16:23:06.85501Z","times_seen":26,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/tabBarIco/icon-tab-5.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-5.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-a49\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vG70hLTSi1Ek6Zds7qqapSikx8Q6i6Y%2FSPN2MlOKe5bgRrxhN73IktvYOkj2tU609w83QLo3DWotyYKsrW0jgDAkHEWw70EM9iZD\"}]}\r\ncf-ray: 9d713b0b2afcd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 48, 8-bit/color RGBA, non-interlaced","md5":"5513b2d40da0daf0a61107ea34020ece","sha1":"ce4e2ff0e459578f63d4aeeef0a2acad581c9575","sha256":"8f5c0f7ec7ae452665ff7c78bb98c593d761da88ea5611238ca440bfacf8c99c","sha512":"1b9daca345346851ca6a4223dbfccc295cb178cda9de9b6e515383a4d2abaa9502df7f85fd5b76c5a87d3fac82ffb5c32a31268015447f627193cbc7d43f1f77","ssdeep":"","tlshash":"b3515beb6dc3680da532f18c9b8cb0c6d82c4a9f8840590f6ca190f16c6944b7695fe0","first_seen":"2025-03-04T21:35:25.018795Z","last_seen":"2026-03-31T16:23:06.66803Z","times_seen":27,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/images/index/tab_buy.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/images/index/tab_buy.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-166e\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lMEdSES9zpaLyz88Ex%2BVsMQBOsIxu7PekTtIt72VV2aeAifwbx0mSq9felJymmzCfAoGOUb4SHS%2BW7E4ROCWrq2BV3aInZF9NOwr\"}]}\r\ncf-ray: 9d713b0b0af4d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5742,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 99 x 99, 8-bit/color RGBA, interlaced","md5":"359561038154bbe15b9cf8a6fd9aa6bd","sha1":"f7f371a0d0e8309d04cd51f454f11714cb4e6f01","sha256":"dbc67d02fd367a229a23fcdd475584b910c08d4ed2e8c5e7aefd15c82637ce25","sha512":"9408a07722bb2245a16ec8a215b1bcc64d6759ee7dac26d094cf0d09672883683009f7af02c454339d1d67f0c7a530552f47ea3d334908940fed34326f18e2ec","ssdeep":"96:iS50GHWQe6P6HJ7EK0sxjm46cll1zeyJrvjPtNAru8p9hOucKFOZsZS2GIfHHch8:lqGHTwJgK06Nnr5TFv7tmru83h0KQZsV","tlshash":"49c18d096a667cf58b088f3940097638325c2358c3ba675dc7dc617f04f505dbbb15ab","first_seen":"2026-02-24T03:22:42.343999Z","last_seen":"2026-03-15T18:21:33.221754Z","times_seen":7,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/fonts/Times_New_Roman_Bold.ttf","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/fonts/Times_New_Roman_Bold.ttf HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 832472\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\npriority: u=4,i=?0\r\netag: \"6973babf-cb3d8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pH1rF%2Bn8uO6%2BociwaoPDQUstl5rv5H2DdWGpSlssc%2B5sSE%2BY23KBVMHH5zELW5h7YuSs%2F8cOk%2Fr4lpXzDKInWy1t0TwvGB4hF0Vk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d713b0b5b01d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":832472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 24 tables, 1st \"DSIG\", 83 names, Unicode, � 2006 The Monotype Corporation. All Rights Reserved.Times New RomanBoldMonotype:Times New Roman","md5":"47e2cfe6c7f2d721956ff54f0ef18585","sha1":"93fcc01978716e9dfcb66639ae63a7083498a5bb","sha256":"50f5b1f27b7d34621090e437e8b1dd4510a22d2823fc876b3286bed327b64bbb","sha512":"d9d7e01e6e83382a5629aaf1c00f7c96ae0a0afb05c9a9eab2642f26e622e5693ac9fc55c1260a8b0ecab830ff4c9767321f98450db8a7ce7641609e0a204317","ssdeep":"24576:YI8eV0OJkBXNXqXlqE8+xl8nrrWOm5eDSqh9R5tbxoCo5UZ+au:YI8K0OJkJNXq4EflZ554h9lS","tlshash":"b505c047e3e3de0fe7c86a30c6a0e373d696ba54c72681bbef4d1518d0cf5a44a68950","first_seen":"2025-09-10T08:12:24.120848Z","last_seen":"2026-03-31T16:23:06.6893Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":1046,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitlydo.com/api/common/getCustomerUnread","fqdn":"api.bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"OPTIONS /api/common/getCustomerUnread HTTP/1.1\r\nHost: api.bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang\r\nReferer: https://bitlydo.com/\r\nOrigin: https://bitlydo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization,content-type,lang\r\naccess-control-max-age: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6w5Kmxf2DNbX9FoJEWBZM9MQlE9nXh7iFOG408rdtemXas9h1PHB200hHJbrTTOQ1KJzFTaKErb3iXgH7CtlXn75HA0fUz8UMFn%2FWl4Yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d713b0bae416e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":674,"timings":{"blocked":45,"dns":3,"connect":10,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitlydo.com/api/activity/useractivity","fqdn":"api.bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"POST /api/activity/useractivity HTTP/1.1\r\nHost: api.bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Bearer\r\nlang: en\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: https://bitlydo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"tokenAuth\":true}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:29:36 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 58\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2BIWYDRB%2F%2Ff0l1IjEwSueNqcjJxmamTjUrRB2p8U47Tt%2BTAEJEYKm7QgKnmIcyKfbEmeGNSAy6Yj7lh%2BIo4ek%2FdXglpEB8jecJcugoxU1Q%3D%3D\"}]}\r\ncf-ray: 9d713b0f5e336e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"79f20aec48661bc27881175877bc2034","sha1":"b928fcce3e74bb9a3521be079b5825cb4f20a17d","sha256":"d88485dd7b98cc4e2c46bdc9dcca0d7896c6bd365647b6402c7144cc7a45b653","sha512":"a93a412d5b63a8c43557eb5664330bdb77d617594373136b31c22bdd1707b615bfd3ced250f31d875dea725ce76d75ec8979a776d82289bb4cb45eb4bda67931","ssdeep":"","tlshash":"f1a022000c083cf00e03a802300a200088f030b0c20800b208fc002cc30c2a8e002808","first_seen":"2026-02-16T01:19:55.31534Z","last_seen":"2026-03-24T02:46:44.574469Z","times_seen":10,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/js/index.032b6039.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:31.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/js/index.032b6039.js HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Feb 2026 16:26:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699b2e19-82471\"\r\nexpires: Thu, 05 Mar 2026 01:29:32 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s132O4dYQAZme5VV5%2BDK2aWljpRoHR0IkEeM5V6sWAf01fSwsCEGkEKhyC8EbTK6ZVRCfRJxxNRrcFsJjugnoUop06UMs0fB1IIk\"}]}\r\ncf-ray: 9d713af5f80bd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533617,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60681), with no line terminators","md5":"468ce835bf480366207070952d99771f","sha1":"79009fe929074cdcb70d4b7691c6a4d891c2f307","sha256":"be4df8d139ea30aab8154cd0d0258b6a18ff9c316c4b956a7392d8855c6ba2b7","sha512":"ec0823129764a0c18436fe9c071d39552e4684a4a6341dfbb1010bbf3d82d57e8cc24d5cfd46b17c6ff986bbb9e4369fc72bc4da8638abec2fdefa9ff2f7f9b4","ssdeep":"12288:MDUoMP/SRnRJ1d8yqL8xZr8kKm7a9mPdOHndl7s7iDR8xGO/U:aA","tlshash":"88c4f84a648e9f7bc7e417d43c1abf4631f409d3988de0cb03999f812baaf256157a34","first_seen":"2026-03-04T13:30:02.487231Z","last_seen":"2026-03-04T13:30:02.487231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1016,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":595,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/index.883130ca.css","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:31.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/index.883130ca.css HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 22 Feb 2026 16:26:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"699b2e19-1793e\"\r\nexpires: Thu, 05 Mar 2026 01:29:32 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CuDbPzR%2FYcComcBSZOYSJ4hBQYQsoKwUWKQvIx5oSgm%2Brqcv34RGUzC9QMsPKk4jNW5bcKwowqQqGjAwn2FpD0I3Ao4PCfPvjFlU\"}]}\r\ncf-ray: 9d713af5e809d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2de2f2d3943b4b382a28a439daff5939","sha1":"70d04e1c3567cb4f248b29046b98386f215a4d38","sha256":"8a35934d019c2b120a31ae6c51c75b2327f22637824b2a2c2faf4ce17ae9d4d8","sha512":"eba9271e30d6e4b21954078e3ccd839a55e1dcc8212fa375c18dce42104d19a92655c2f289401525b0c9565971a31573b928666515a3ca89b1801bbd48c1de95","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:VApuK7hmVrS1Wu3iG41nrPI","tlshash":"f393f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-07-20T12:48:29.443135Z","last_seen":"2026-06-08T16:30:59.806169Z","times_seen":2638,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/js/pages-assets-anquanzhongxin~pages-assets-auth~pages-assets-email~pages-assets-recharge~pages-assets-~d59e0207.5420228d.js","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:33.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/js/pages-assets-anquanzhongxin~pages-assets-auth~pages-assets-email~pages-assets-recharge~pages-assets-~d59e0207.5420228d.js HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-4227\"\r\nexpires: Thu, 05 Mar 2026 01:29:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvQvygRXokW9%2FlgIKvHDtFaVQvYb2LJT%2B5%2B6xr5deBHMqdSjl2zWzLeAj6wXUlT5burHBRH14Rvs1%2Bg1JcJ7sEJ5ICJlJ6zIK5jP\"}]}\r\ncf-ray: 9d713b0179d6d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16935,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16393), with no line terminators","md5":"d7e33bd0b294557059605214b1452bdd","sha1":"d9af510ce2cae5bec32fa08d568ebb204d067283","sha256":"bb2f9be34c66ed116cd510fd09383b80777a339f856450053451e6bfece0024e","sha512":"9da69c6783dd879aa19c834fee735c323e071e0af44974ea436c22082098bde1a7145f7029195ce1c687fe33c030312ee1d36e7e30bca0a6ce2979965a82303a","ssdeep":"384:xMFCkwRYYxU1ABGbscGTyNM/R+xru4gdCD:xMFCkwRLxU1ABGbKsMSruHdc","tlshash":"2c720a88f0c6f855059350b2813f4309503aada97117a69db7b9faf64e78a8d2353f3c","first_seen":"2026-02-25T18:43:26.842249Z","last_seen":"2026-03-15T18:21:33.288636Z","times_seen":5,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/images/user.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/images/user.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-7e4\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EksM9dg%2FuECcKlcg4QbJlZNF6Y9pWqtGGq2RGhJcz1Q7xzma0SZQcGVIZJ%2FHl3Tfi5GY3DChHt1qJngF1Vu4%2BbMuXOaQBejQ%2FPPw\"}]}\r\ncf-ray: 9d713b0aeae8d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"69b2250bfd5e15c15b0acc4f88e3d646","sha1":"f0c3ede1c75f88860fcb3faad0a9d45e9cf28e42","sha256":"509e53a833fc09fd35969e8d27efe578d6833db9c2c98ba54ae2bbc321830886","sha512":"73aa035f34c2541bd71dfc3d12c613703a4d1cb94b1aa0e728d2bedc9666c60f2f6dd37b0582a3b07d29c6e3ac67c376b75283b47c8bf691e9d0ddf3de39c288","ssdeep":"","tlshash":"d7412ca699f9937cb065270358048314437c499ff9e1c086229fdb612b5552592c3346","first_seen":"2025-03-04T21:35:25.0091Z","last_seen":"2026-03-31T16:23:06.834502Z","times_seen":25,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/images/language.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/images/language.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-bf8\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gn7paiqCRTpqudtmxy2NnCLJfxdKmxDdHBvIqgFclaVu%2BLSgq6gob2uK8ItijDbiiPq89tVSIpsL2XOWFwhFpv2MvkWF%2FmymVeLR\"}]}\r\ncf-ray: 9d713b0aeae9d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"bcc8b2bb638505f40548ba155a8b8f76","sha1":"90923bb7d4c382eea4118b2330db7df07cb58219","sha256":"13d7d66d9b2c8f9005e70df1d4d4baac340b713079ce600a7247d8dc2a2f4487","sha512":"1f15a1054c07b032dc63873286847a596ffbe05a7bb34b20e9976feddd9fb76cf0b4fa2b1fa83fa2032c1ea8f967d039fadd550f060c462441a640c0772cc765","ssdeep":"","tlshash":"2e513bc672cb003287b549b9195d5724d4162bee3b99ee24bc060edcda5228d49250c3","first_seen":"2025-08-29T08:01:15.829026Z","last_seen":"2026-05-04T20:06:51.15484Z","times_seen":43,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/tabBarIco/icon-tab-3.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/tabBarIco/icon-tab-3.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-b50\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2GyXgbn6z69%2FDDDlSHXpxFMUeLLkiY%2BL8UZAgndt6g7WuRK0XazIAMsi1eRuU8IFhfdYIH2tHC8q3vo5u%2FjDYF%2FjGDLlEYMNpMQ\"}]}\r\ncf-ray: 9d713b0b1af8d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2896,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ad06d3b79db67136ad312cc5234219b8","sha1":"d79671cb60deb3d5e697d7efe4d4490003e88e69","sha256":"4a573e916e4c11a36faccd7f8f74e6c1e86f0ee05a58170d3bb8654f2bf55e75","sha512":"bdb9f17543c61f5b0856f929b7d5d1c4feb801ba4df90e9a62a5270b2ab357d84200beed083ef6361a9e62c6b75ea6aafbc58ee2eef0380cba019db6d1bbdd9d","ssdeep":"","tlshash":"08512b17bf763de1db08e2ad9e58598133e6c529906b2d0b7253d0e07f28f417848f55","first_seen":"2025-03-04T21:35:25.027744Z","last_seen":"2026-03-31T16:23:06.720872Z","times_seen":27,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitlydo.com/api/activity/useractivity","fqdn":"api.bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"OPTIONS /api/activity/useractivity HTTP/1.1\r\nHost: api.bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang\r\nReferer: https://bitlydo.com/\r\nOrigin: https://bitlydo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization,content-type,lang\r\naccess-control-max-age: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s2zJ0BGSC%2Bm6mmqJ1vmR3mm6frJUupGU37mn2I2oBA3ERB5XO11ldfsYm3WS24H5j4HDz8Wnp%2Bvx0X5zgLAw8UuthRynxyU6KEsRcHQBkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d713b0bae3a6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":698,"timings":{"blocked":46,"dns":1,"connect":9,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/assets/uniicons.2579c7da.ttf","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /assets/uniicons.2579c7da.ttf HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35824\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\npriority: u=4,i=?0\r\netag: \"6973babf-8bf0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BEKth%2BRBDYkXzz3kAtiRG%2B52oVNI%2B7W7eeyMBeREia9JHRiL92AlaOJY%2BkI4bEmsfJBp05h5QLqhCgXUj2zI%2FbHrdTluI473uEX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d713b0b5b08d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35824,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh, Created by iconfontuniiconsRegularuniiconsuniiconsVersion 1.0uniiconsGenerated by svg2ttf from F","md5":"2579c7da7e5cb4418f36e17c71125128","sha1":"de4aad75292f9386525b52ae801f9b2252ea07c4","sha256":"32e978a546182be7be788ebf4dbce57b8cc8b6f4d9da0c9d3a46a5e030bc1efc","sha512":"690b27e2d6c53eb6bff5ffba83b69cd03496c78c546aa79705639ea4526f89f85a1fb4ca0b7352d8c8a9428c07f14d5f61cbdc8c2c45156ee815095fd0504181","ssdeep":"768:NjUnym6cVBqac6riFK/d8PWenmP7p7+A9cbWL2eRGXSOu:ZUnym6mqB6WsdenmP97dqb4lSu","tlshash":"dff28d65176d4e6ada7e4abb188761130f7dff3060b2ea15ee8ebc4e84080f005d4b1e","first_seen":"2024-06-29T16:50:30Z","last_seen":"2026-06-08T00:46:36.385735Z","times_seen":561,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/images/index/licai.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/images/index/licai.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-d83\"\r\nexpires: Fri, 03 Apr 2026 13:29:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ShehhqPzua5YzO5BKTLpvdgFkmWw%2F%2Fl4YnA6%2BmEJFDYyX3SYvjptZ8cjCUtHZSW0j%2BgUvX1U852kg8S0jHFjIgSrsbOux3pUTZ%2B1\"}]}\r\ncf-ray: 9d713b0b0aefd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 132 x 132, 8-bit/color RGBA, non-interlaced","md5":"a8dacb3f6b4a62706c5a8d3ffe0f8bb0","sha1":"abf009d1c0df83c860d6ac1ad48ef9517a1d4af8","sha256":"cc8fecc7423e4884c3317a7a4cf35df4faf90d76568f302238dbfcf629da1a75","sha512":"fd3f5472e81604ca9cc0cfdef56f04b1cb5a4c56299bfa6767fa5886e9608d3494957243414a2672d99967471dbc2a3fa6b7c5e9d66d9c74026e3b7160a36d14","ssdeep":"","tlshash":"ea617cb97ca294fa3a521a2c02287db0c92134db1a636bf34b90082367d6427e374222","first_seen":"2025-08-29T08:01:15.822247Z","last_seen":"2026-03-24T02:46:44.541729Z","times_seen":16,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitlydo.com/api/common/index","fqdn":"api.bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:35.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"POST /api/common/index HTTP/1.1\r\nHost: api.bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Bearer\r\nlang: en\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: https://bitlydo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"tokenAuth\":true}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:29:36 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 58\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ivv%2FKvOobG4VBdXoNwoxCttGGKFUJ%2B4u8iVpAe39V7vFP9rYCwk7tYGCchL%2FqUaApuC8LjB8qFeSlGKZ0aRUOHzGKgSVOBYhZQJdYsD5kg%3D%3D\"}]}\r\ncf-ray: 9d713b0f6e4a6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37586,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d9497e22c24622e51db5f400ba21bd48","sha1":"ae168127b1c85415ce77eda3f89b8e42cfed6452","sha256":"ac095c288618d57ad1e6c63e791129dc31aedefe785c069d9f1cef44cdd17672","sha512":"6f0a08f88176950c4d6defe8d11c837d2d9e89e1feb5b8eae924f22722aa503395fb8f1a66e1d19b057519934b4230d1b7113acc6ccc35890cfd470cdabfd21e","ssdeep":"768:gzwHzNjPG2LvXPuK5T8XOrd9WRtVs+MOD:gzCNjPG27uK5vGP","tlshash":"82f2005203fc2aa9f160cd581a92ec30a91f724aed121fdb5acb0d9ce0c49f57669f17","first_seen":"2026-03-04T13:30:02.501382Z","last_seen":"2026-03-04T13:30:02.501382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitlydo.com/static/images/bitly-icon.png","fqdn":"bitlydo.com","domain":"bitlydo.com","tld":"com"},"ip":{"addr":"172.67.210.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitlydo.com/","date":"2026-03-04T13:29:34.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitlydo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 05:50:45 GMT","end":"Sat, 16 May 2026 06:49:18 GMT"},"fingerprint":{"sha1":"34:68:13:05:4A:C8:94:B4:27:7E:61:B8:CB:19:EF:AA:3A:FA:1C:A6","sha256":"3D:B1:CE:3E:D4:98:C6:F4:BC:74:A4:6E:28:49:9B:9C:A1:8D:66:7A:A5:F5:E6:55:D3:FF:2A:57:9B:7C:B9:46"}}},"request":{"raw":"GET /static/images/bitly-icon.png HTTP/1.1\r\nHost: bitlydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitlydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:29:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 18:15:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6973babf-38ae\"\r\nexpires: Fri, 03 Apr 2026 13:29:34 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVNItDeT%2F%2BBnV8T78AMYAoeQ9IfuwCmwy%2FHGae%2BHlpZaMRvePACPqEE%2F39jx1BKabQGyod1skEIo7IjUHUoPoszALs6AbdvFQmn7\"}]}\r\ncf-ray: 9d713b04ca44d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14510,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"611b31b7f3e3c447063ee9c8ac26e163","sha1":"971cdb707c7d82528b5b00679e90b40cdc14ec51","sha256":"5254379c064686b677d957e806e0820c9cd0d47fb83037ecab4f1954b7755049","sha512":"ed29749c6efed7c03e41357e5cafc4dd796e1ff369457b05d6d7798c3b6e23c5a353e32de195291b16d0d45640b39fc81227ca51c596a6bd8fc4b8323cb9cd68","ssdeep":"384:UQXrjkgv54BR4XeyrQj953If5IQ1HzUNfQbmGw:US54zCY5K5IITtVw","tlshash":"e452b06bbb7d0e6d84c1dece81f0da880b262421b48e2275f6ff92a159335596dc4d43","first_seen":"2026-02-25T18:43:26.848833Z","last_seen":"2026-03-15T18:21:33.218328Z","times_seen":5,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":396,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bitlydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}