{"report_id":"2ca56da3-75b3-4a08-9044-89733931cfac","version":0,"status":"done","tags":[],"date":"2026-09-17T03:30:06Z","url":{"schema":"http","addr":"byit.support/","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"byit.support/m/index","fqdn":"byit.support","domain":"byit.support","tld":"support"},"title":"Bybit","dom":{"size":24671,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21129)","md5":"7f3bd7a43a6150624ab5fad521de7dbd","sha1":"3ecbb1bd4a98314fc6c985339ca015aaac454e46","sha256":"9ed4cac2b77703d069449fbf5733ffdace7c015247ddc6d2a744140c49d17d7b","sha512":"a19395010048027ca53a116f44f4df573594de428c594cb318b06ef9072de7c59023a889d50fdcabb73bc7320c56a8d2cd98f735d104c35895deba2048607713","ssdeep":"384:z5yUi4sDAPj7PZRNmWRBpKOsk7l2XICn+W67lyP83VOjVokGh9nK:z5ZVs2hvdsAlkIC+By03VOjVokGh9nK","tlshash":"b8b27930d40070bb143becdeb961bf5ea096e70e9671c4007aecca5dcfd6de46a512a6","dom_hash":"domhashf91df1c547c9e642f13c55fcd1d9f74e","first_seen":"2026-09-17T03:30:13.814529Z","last_seen":"2026-09-17T03:30:13.814529Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"byit.support/","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:30:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"byit.support","ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-16T19:30:29.214295Z","last_seen":"2026-09-16T19:30:29.214296Z","alert_count":288,"request_count":49,"received_data":2960202,"sent_data":24247,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"SockJS:1.3.0","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-13T23:08:02.379663Z","alert_count":0,"request_count":12,"received_data":1438134,"sent_data":5901,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-13T23:16:40.429603Z","alert_count":0,"request_count":1,"received_data":279959,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93675,"data":"","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-10-14T21:14:42.710745Z","times_seen":4860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/js/chunk-vendors.d98a0f3c.js","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c624ded8d60e825b87f1c45dcbc4981","sha1":"bd4dca495b1e01a7d99d5795e662031cefd7f1b0","sha256":"e77aef903bf5f347ae320b881741325c522916c01f51c0a8f03fb3ebb398070b","sha512":"f0f018fcb4feef881a9bb940655b2466c1cbe3d825ee878ecca63475db61dab35da9a3c72f744429cac160d562480dbaf6e587dd4f3f4d931ea45c940938d809","ssdeep":"24576:82serpOhYLuC+VNptNI8Fl9rCcLyOkPfI3Em:1serpOhYLuC+3ptNI8FloUyOkHI3Em","tlshash":"2635099cb255b03143a771a445af040f9336680cb50bc5a8fa69e4ea6cbd44f327bf79","size":1139871,"data":"","first_seen":"2026-09-16T19:30:36.557423Z","last_seen":"2026-09-17T03:30:13.941665Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/js/chunk-1acf6699.1358862a.js","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d562ceb91ecb27750a5ca601bc5e988a","sha1":"e922e1e5b42f8121dbd11022363ad88a18128a38","sha256":"3539aa190884ddc86fe078f5ddac8113e3c949e3cd1ab6d70cd21a6db9ed3206","sha512":"eb8fbb880ae78be321c2bc9aded16531138ee3155ab0436182c3ae5a7efc012e68b8bca918d18dfe6c9dbd5e1573d6a9154c9d93274a8c43dcd62874da0f1b7e","ssdeep":"","tlshash":"62c0803db454b42714bb6093110b33d80d5b11043f75acb409b440d16b335cf5727b4e","size":171,"data":"","first_seen":"2026-09-16T19:30:36.525977Z","last_seen":"2026-09-17T03:30:13.88875Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/js/chunk-7884b273.a363be06.js","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b44a28a05657ba0a6d43e1efb8358fbd","sha1":"1a5e02a9ff6d11c9951a69836a4fb0353c588346","sha256":"396765995b019d996adb094ac317d6a6d0ddb681c291848e364c6a9f8ba03ec0","sha512":"e0daecaa06bb42864ae2e4de5ca6d9e35486c0d8744d83ccaf25bf7a8222d3cb602362e4ba0dd5d7baea8701515ce7e3e84eeb4b018d0a78aaa141acdf96c19f","ssdeep":"192:ewodX4oMMpxLG/EDisciYHzP2VGS3CJUTThVySyNWSciIHIn/o3eS2Tf5Ha5C96:ew1Ua0iVoG+CJ0TOvtw3eSufV96","tlshash":"05826408f883f6ba88665021512f1835f1393e94a031f041f734cde5aaf5d697b2ebad","size":18620,"data":"","first_seen":"2026-09-16T19:30:36.508813Z","last_seen":"2026-09-17T03:30:13.818627Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"622c4c9d5dc4b1ee29a2eb908186ec88","sha1":"491753a3f979f7d180af11e1929ffff85e30f921","sha256":"794d1c7ab27be77d366e0497e641488e50f5ae6581b4db51cc08de1e142eb47a","sha512":"2b2485006e3a36dbae0d0d8488ab63ae6085c34d5a6f72c3558c52b492294c157f67ce47c1c3b89498db9ff72f748485fedc04a881f1877f903cfa0df1c8be8e","ssdeep":"1536:PLFpwkiSucuVH8MBfaQQ979S17LMgRCSRjMbEjeb6Gt6UQ:PLbw1Sucu3Qw8gc3gk6Gt61","tlshash":"1f93618cbec6f06642636675413f900bb27a1a86745f89d0e12ed1e4bc7c98f413be6d","size":92050,"data":"","first_seen":"2023-04-06T20:58:39Z","last_seen":"2026-10-14T23:44:53.149925Z","times_seen":1669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c019be63e713ce6f2aa221c0df8fa0cb","sha1":"e5471888945144f233714d470959059c010eb667","sha256":"87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce","sha512":"6ca3ae5fb17dc20a2c27d4008454feb7cefc626bf104252354c1abd0977f73a315001d94293a7d4379ecfda6ba21d3f49a992f243a6f9249c935195527d407be","ssdeep":"384:BPdUYakDlUGQrDQxMQ4rJaT30WCxQI1cg:DUYzhUGmUMQUX3","tlshash":"cea2b7c6f56270270a9260e5183f1107a33f241d648d855df2d6e8ee2ebdd8e91a3f39","size":22805,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-13T13:40:40.470888Z","times_seen":1283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32e2eb91e6ed0512057b2ad1e6d1b242","sha1":"27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6","sha256":"e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5","sha512":"0ab7b445b586dd27a0aeb72396350982783129c9ba028ba1db847c9d2acc0de9c90c3c9636e76a21553fedf81031220f3676ea64bf7336644c04da33d744563d","ssdeep":"384:UUcnX3xpR5tumD+EaKGZRpqB1UdEPQFWmexTMCJ:7E3jXtuW+qGZK1UCP5mqMk","tlshash":"01b2c7ddb581b03547e326a0412f250bf27b358db44e8498f269e4d52cba85ec42bf79","size":24822,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-13T13:40:40.45262Z","times_seen":1305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.3.0/sockjs.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0a01fa31e644ca44836356a172ba7c9","sha1":"e81438a79e8a7f34423168c70696cff2a820dbf1","sha256":"840ea076b43dbf564a909bb082dc287740a96f3c4483fcc024f7176306daecc7","sha512":"a18f9c600996f8f31c046e80334cc794efff550c2286bc822ba7bbc197d99e4ce5f032133866b18cb9743a717b76e578cdb2a9fb5f6ebe42614d08ea1ea2e47c","ssdeep":"1536:XFWQV1ZGORGWiB67hAHLY/IyYT3uu+OLFckh:XFW8tG967hAHM/IyYT/Law","tlshash":"5853e8c5f46134a213e7a2b582bf11032376953a640c85b4b798dcf98d7d98c532bf7a","size":62797,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-07T16:47:06.454319Z","times_seen":1228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d75a045ada91e8b297dc25ca5080ebc","sha1":"5459c8d31303d82ae64e465707ea4c0b774a26f7","sha256":"3bbcd117f9c743158fa2c3e85837cada012be7f205946287fe8dd509c7a317ba","sha512":"7a44155e399fa84ca4f908072115d470b687598d9d35ccde28025515a3f312cc1bbcdc6bc8a464e278f28d3563ade49f32a6d0099033870d1bd61dad4beeede5","ssdeep":"","tlshash":"a3a002a363459b385cdd3ba65470cb9a3c385121bc16b445450d1920c5a8ec2445bd94","size":67,"data":"","first_seen":"2023-03-07T18:08:41Z","last_seen":"2026-10-05T23:58:32.168144Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/js/app.08ce6638.js","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c862a108aa583f4436c5e1f863169e0d","sha1":"aaa20c163461db1a4917a0e76c29eec88583e4d6","sha256":"cdcba6929417efb46326390ab365ce0ad374cce6bba660c6979f5167cadbbce4","sha512":"e89de370ca361dcbae291fa24bf34c335b5bc2ccefa59a612eaa36e5428133c00ef98ffec76a581fc6ba62680e9e799549548de7981bd421b19d8683eeb2a16d","ssdeep":"12288:zrGL2U76ks379MkdDpKqKB0sETVELyl706CuLy/+SYD2Q9q7QOoN5z6GCh6Nt9M4:UtiOsz6GfEBqe6","tlshash":"d7156c6c32deb6ba0182d141900f353c51291eb5e146d1d06ca6eae81afdfb59233fb7","size":958382,"data":"","first_seen":"2026-09-16T19:30:36.416739Z","last_seen":"2026-09-17T03:30:13.836347Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/index.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc6dfa2d326274455390160572856dce","sha1":"efd937a0eaa2f39487b612814c98c37a752c9a2a","sha256":"bc09e54472585388c0ef0b58e5818a448f03b5671df4120da425cd6cac70fb79","sha512":"d42e99eb85cefb310ba46cf4a5fd9514f6804d4fa95f312178b0b54723db60950908465b257cd7160e2a67e56b1b2855bada2e67f56c992f53fad520bb7a73f6","ssdeep":"6144:jlrTktiHOvAeyErnMb/KeG4tVhkiIAUYxRtS8islZST79eA:jNktiHOvAeyErnMb/0G1TUARQ79eA","tlshash":"e1c41a8d72c5b53147a36070103f250bb33b299ca40980dcb679d9ea6dbd909626ffbd","size":590640,"data":"","first_seen":"2023-03-11T09:11:20Z","last_seen":"2026-10-13T20:57:43.324703Z","times_seen":657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vant@2.12.38/lib/vant.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"353f46a80ba062c763753683f249266c","sha1":"f973bc985b3668de0dad22345b74346439835089","sha256":"eabf5ff11ce302bc0b2e8f1d140a34d057f1bb98dbd1f58b5c68025819e65796","sha512":"b7ee9a9d320cc68f4fae9b164b05095f2990fd8213777459083c3e8a6667cd4d167695c1b079a9597cd46c6bbfed451be3711a0c0e4ec89839453325b69eb3a7","ssdeep":"3072:Ruhi5vnXNdJpfzFgcxKn3HXJOLtvrye4SWXr1Gv+ZPbfXavZ6VVKSTTyCl:Mhi5PjNtjyx/1bdVryC","tlshash":"6054e78ab1c5b025079770b5403f110ab237298cb41a84dcba79e4e6ad7ca5da13ff7d","size":279162,"data":"","first_seen":"2025-05-28T10:22:38.260344Z","last_seen":"2026-09-17T03:30:13.824963Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/lib/flexible.js?2222","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1572c9446821f8b1dc1136b64b44e739","sha1":"6a786ef63db48581f50e85601ef4a3effe8bf095","sha256":"264ef2e4767a942ee634794619d94edbd7da642cb79277c16b974cac9795c246","sha512":"4283dbb16b94c7db39673fb92808835e7f2ccb34f64502d0524cd571fb28e91c82abddcbf1224d4b83c1fb30908c96a4d16b604b22ef0f491c2bdf2d00213598","ssdeep":"","tlshash":"5b81322806e322361e2330348fbf210539728067055ace447d5ee79e6fe4a654ef6bf5","size":4065,"data":"","first_seen":"2023-03-07T12:58:51Z","last_seen":"2026-10-13T13:40:40.478891Z","times_seen":974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"334149adf44476f28bfbf16c7b0382c2","sha1":"ad2ea246ebb53ed655ab50d44b33d4d6f942387d","sha256":"6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6","sha512":"0f9d66a68e400a2499cc1dbd79331892e9e62e278d8b4784e354b7a281c91fcc1401eedb0857ff6911d842ea853d39081b459fbdc0e30d927ee93b5ba1ecdbea","ssdeep":"384:hpI8XyWPbWeAExXqgxH7RqzGbcQdVzxbUm6HwT9eei:LbXdyGbcczx/6QT9e1","tlshash":"f25285ce7861b0a757e320f0805f4a0fb2b6552a754d84a0f660e9f66db542e8733f5c","size":13638,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-13T13:40:40.494142Z","times_seen":1309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c66594705de51675f08e3b83b9b9b38c","sha1":"40fa40f722043957a56324174ec6f80389391971","sha256":"e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65","sha512":"3cb0d6b77ac49d3c6c5c5740efa2fd9e3e0c79158c88a9d4f0b709f4713a38a7b72109a2b4c636377c783effc3c6457c718d8cdc2e9c7577db9691562e95375f","ssdeep":"192:90DuIfY7JtjC5ydUypH82+H8urFLR7BD4GOUo1MQl+B2GHPpB3QE7WA+MWnBP:9guIw7JtWqmhfldD4Eo64UgH3nx","tlshash":"4f1261ccf661b0764a377460623f120fe276a46d200a4468f598e4ef6cbe14d94abf3c","size":9875,"data":"","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-10-13T13:40:40.473599Z","times_seen":1603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ac19265b38d14235141d184bca54d9a","sha1":"c725eb5a33d093e331e25c3a5ef1272b0f1f648c","sha256":"e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e","sha512":"6476ae51cfef0724ba254cff1e5d68f2cda477840954b01b933f1c9608ed6ca5094fe006d5cef7e5a32d54b25fb4a418a3e2c3eb642bcafa0d6bebaacbeac21d","ssdeep":"1536:O/pPCitsufJthaK85kqzOAkRlojU6tU8r5MhkhGllpcXvH7WcWUKcOqylFE8BtOa:+JthJkOAkaRaaGl4fH7WcWUKcOqjtYD","tlshash":"2bc31849b35071e551e72256539ed601a3b66845b90ac0a831b2d8d7acbce8c03bfffd","size":128745,"data":"","first_seen":"2023-03-07T12:58:52Z","last_seen":"2026-10-13T13:40:40.512337Z","times_seen":2626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/js-cookie/3.0.1/js.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"511390c6668bb8cb2c65b03dc65cf6de","sha1":"9ec5bdca09eb11492910672fcb48594d04eb63af","sha256":"d07dcdbb3ddaba0dda7d56d496cbb5d8fbb1bdadc23f812126d3c4c6ab39e158","sha512":"c13eee3c4eed38feb0e28dbcbb50cdefbe636231d00297419e26f93e1a38441d0f81df72ede4a4015d414ea43276ea580c1f460614dc410cf234c3cc5777007b","ssdeep":"","tlshash":"ec31b8ee3185a8da07171450463f1207f2f91e56eddd98802264e4f50bb077a01e7f77","size":1681,"data":"","first_seen":"2023-03-07T01:07:22Z","last_seen":"2026-10-15T00:23:39.506403Z","times_seen":10404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"2675fab97e66abb2dc482356efb999b7","sha1":"3311edff263714f305e1e345e152bbee777cc844","sha256":"bc87ac65daaf5582b0084af46d5f173f84e35b6b39733943e908fd9023cf3bb6","sha512":"6d1ed57e31ecba4fd8d5e5bad006be0928245259a0d0a57a6c99029dc00cb4d2e74f0ee31a7c4e198b51bef9c544d9a55c559aad033e38acf75be73bb53873bc","ssdeep":"","tlshash":"121180cb99618a6896e214ee36fe3750b573e052f9446130751fcd103d9c70f036aaeb","size":889,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-13T13:40:40.518962Z","times_seen":1247,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/lib/jquery-1.11.2.min.js","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","size":96382,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-13T13:40:40.467413Z","times_seen":2003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"将根据已有的meta标签来设置缩放比例","filename":"https://byit.support/lib/flexible.js?2222","line_number":12,"column_number":17},{"level":"log","text":"devicePixelRatio = 1","filename":"https://byit.support/lib/flexible.js?2222","line_number":38,"column_number":17},{"level":"log","text":"dpr=1","filename":"https://byit.support/lib/flexible.js?2222","line_number":68,"column_number":17},{"level":"log","text":"initCoinSocket","filename":"https://byit.support/js/app.08ce6638.js","line_number":6,"column_number":451483},{"level":"log","text":"initCoinSocket","filename":"https://byit.support/js/app.08ce6638.js","line_number":6,"column_number":451483},{"level":"log","text":"Locale.usept-br","filename":"https://byit.support/js/app.08ce6638.js","line_number":6,"column_number":435540},{"level":"log","text":"websocket连接成功./api/websocket/server","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19007},{"level":"log","text":"订阅/getCurrentPrice/BTC","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/ETH","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/TRX","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/BCH","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/LTC","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/DOT","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/DOGE","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/ADA","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/EOS","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/UKOIL","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/USOIL","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/GOLD","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/XRP","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/LINK","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/ETC","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/Silver","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/Aluminum","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/COPPER","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/NGAS","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/Palladium","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/Platinum","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/Nickel","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/USDT","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668},{"level":"log","text":"订阅/getCurrentPrice/UNI","filename":"https://byit.support/js/app.08ce6638.js","line_number":1,"column_number":19668}]},"http":[{"url":{"schema":"https","addr":"byit.support/api/common/dictEnumMapAll","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://byit.support/","date":"2026-09-17T03:29:31.009Z","timestamp":1789615771009,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"POST /api/common/dictEnumMapAll HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://byit.support\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:31 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://byit.support\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9729,"size_decoded":4170,"mime_type":"application/json","magic":"JSON text data","md5":"f9ca4372167b22c440105567bd846c9a","sha1":"2e3004b572c8480ea765726e72df44d93e6bd389","sha256":"df51732301111afbf278050e1b8e0de987c5c7beb73619058b77a874cc7b5362","sha512":"99e7a47de01f0766b2e030816d09c758dc9378bdbc56074d46e5c0a496f7d0466f409eca0232c134c4fb6bbae0bc66c4e51d1347215450c13e0a6d9628c3c6a8","ssdeep":"192:IYnytqEWH6k8nSk262EQEpzKAvgZZQVKUET1ge5bkNqcQpPR78lSdysgpKfby:IYnxEuoSk262EQEdKA6QVyT5sSd5gpKW","tlshash":"a412d599b34dedb08c12e74612423c073eb16acef20c4250a5f4fb1db18d66b7912ee6","first_seen":"2026-09-17T03:30:13.816966Z","last_seen":"2026-09-17T03:30:13.816966Z","times_seen":1,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/js/chunk-7884b273.a363be06.js","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.094Z","timestamp":1789615772094,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /js/chunk-7884b273.a363be06.js HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a63abcc-48cc\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18636,"size_decoded":4518,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18454), with no line terminators","md5":"b44a28a05657ba0a6d43e1efb8358fbd","sha1":"1a5e02a9ff6d11c9951a69836a4fb0353c588346","sha256":"396765995b019d996adb094ac317d6a6d0ddb681c291848e364c6a9f8ba03ec0","sha512":"e0daecaa06bb42864ae2e4de5ca6d9e35486c0d8744d83ccaf25bf7a8222d3cb602362e4ba0dd5d7baea8701515ce7e3e84eeb4b018d0a78aaa141acdf96c19f","ssdeep":"192:ewodX4oMMpxLG/EDisciYHzP2VGS3CJUTThVySyNWSciIHIn/o3eS2Tf5Ha5C96:ew1Ua0iVoG+CJ0TOvtw3eSufV96","tlshash":"05826408f883f6ba88665021512f1835f1393e94a031f041f734cde5aaf5d697b2ebad","first_seen":"2026-09-16T19:30:36.508813Z","last_seen":"2026-09-17T03:30:13.818627Z","times_seen":3,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/theme-chalk/index.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.903Z","timestamp":1789615768903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.15.7/theme-chalk/index.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:29:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 18 Nov 2021 08:03:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7mKCLD0i%2FoL3uCWzGgshsu0v0JYBzwJzgV7gJHPKXZ5g4e3EaxNs7cSO6J%2B69QxF4nFWbQy3p9g2obS7r794TeuXeTjC4D3pCJ2ahIGaPHTJui1AtnZibnBc8MZxmUihg1Bt4Iv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c506dbcd9856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28267\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":241612,"size_decoded":29264,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"774fa3c7b5bc04dd5eedb39c1328d526","sha1":"fbd60cbab30aa6f8e2f82d3077cce8004f655ba0","sha256":"13272542d049f911547eb5e20f1ccf4a4ab689fc2a1631865ebafe41e2012958","sha512":"baa79e92c2a8c163ab1de7b950d9fa4eb602e1a6c3d2b33b199b5702ad6e5fe1657d71971e3a14ededf89ca912c9874f191e797cb0dbe8235faef3ae0f48135e","ssdeep":"1536:f28Y7SrW3YeWXA1u9w4HCe/l4TtgrfqME10e/78OaiZkW1YO8eWhhGktf8Ictg/L:k3L06Wf6g4D3/EDl","tlshash":"d23497219b07216b612bda6d76c0ba895f18c323e4729fbbfe55780cc7d34491263a4f","first_seen":"2023-06-18T04:06:11Z","last_seen":"2026-10-13T20:57:43.304257Z","times_seen":365,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/lib/flexible.css","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.906Z","timestamp":1789615768906,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /lib/flexible.css HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:29 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a63abcc-408\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1032,"size_decoded":839,"mime_type":"text/css","magic":"ASCII text","md5":"7524a2ba32138a0363ad48a78f4c7b9a","sha1":"aab46e82603b9de5b1880c0aaddc0d0f29dbf7a6","sha256":"d68ca73f7b227d0da6b310867a0a588530657bc433fce241b3b2aea1502c10c6","sha512":"77518eea3846fafd71ba1a086f06975e9ab22c2d1e55265795f62604d2411eec3a9a9ce50e6f5ce369fad4ad22e4346fb4547beae00e043fd7f48b5b21e9c252","ssdeep":"","tlshash":"081175315350b490a4f78e33320d955865304352cc378a60f320f198d5e203b27a2b8d","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-10-13T13:40:40.516365Z","times_seen":949,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/api/bet/coin/bigType/playList","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.071Z","timestamp":1789615772071,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /api/bet/coin/bigType/playList HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: pt-br\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49,"size_decoded":346,"mime_type":"application/json","magic":"JSON text data","md5":"4882351b6d087aac867a0eac03fff3aa","sha1":"1ce9147ac18b4774a278ebbb427343815104089f","sha256":"2fcc4ee64137b580c8b0854d0dfe7173b23c6f3bd1c1f057ede42a7466cfa72b","sha512":"852137b0c496048a61f9d97416e2150031dd4c6e692c728bff75497fad8104636d430d720e9678a87963e747e86644e30b32079a9baa60f741acf04a1d6dea41","ssdeep":"","tlshash":"439004507d35fc54f50501c5d04dd7c4043431530ff441515fc15310d3014751d04c34","first_seen":"2026-09-17T03:30:13.821549Z","last_seen":"2026-09-17T03:30:13.821549Z","times_seen":1,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/api/common/dict/allMap","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://byit.support/","date":"2026-09-17T03:29:31.796Z","timestamp":1789615771796,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"POST /api/common/dict/allMap HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://byit.support\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:31 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://byit.support\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7355,"size_decoded":3180,"mime_type":"application/json","magic":"JSON text data","md5":"6eded023932e682f4cc061cee1378448","sha1":"7b6ca95d659b07aedf36f74f1d57b14abe3840ba","sha256":"e0d0aa98e6657810dd90731fd170e7c4e2c23623edf1f282dc44c7424d83605b","sha512":"6dd0346af298b4df044858a0cf2b8bc488e6c315504029c11345be97d3498293c1a2b9a62b48d76de731ba243bbad0c57e0dfda312102638fa7e9e9269d439bf","ssdeep":"192:9ZTvz+R5kAzNpjzE9VycKGFa63UJ7360Mj9jQpIMYUHu7IzLOqziI6M3z5E9+JKu:vbWnNp3E9ocKGnUJ7K0Mj9jQqMYUDL5p","tlshash":"f3e1fe8efa4779f84c03fc5463ec245d10bebfba8d99c7949995aa0830f00415b2675f","first_seen":"2026-09-16T19:30:36.48774Z","last_seen":"2026-09-17T03:30:13.823138Z","times_seen":3,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/ETH.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.454Z","timestamp":1789615772454,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/ETH.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 904\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-388\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":904,"size_decoded":1142,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 50\", progressive, precision 8, 60x60, components 3","md5":"657b86ddaa3fa49cc3e8763ba3b2f584","sha1":"8d736e053ee43b2fe82a0063a5d1ee5a7a0a59dd","sha256":"24c9d0ac2573fbf6f01d39410213534a6f6b1b8b1c4541f2c9645d23f276a8ea","sha512":"3e729faa24916d4f8985c7c822017d950c029004b88876ebf8979b7b34faa719a06b01bc359fecdadf3af8cbe54260fd564d767142912bafbd0a9daf5c52e16e","ssdeep":"","tlshash":"1611f1d93b859782feaa01b3405c02d5374c9e4625705f432a557d706c7e1a44cc46d9","first_seen":"2025-05-28T10:22:38.265634Z","last_seen":"2026-09-17T03:30:13.82384Z","times_seen":13,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vant@2.12.38/lib/vant.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.938Z","timestamp":1789615768938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/vant@2.12.38/lib/vant.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.12.38\r\nx-jsd-version-type: version\r\netag: W/\"4427a-+XO8mFs2aN4NrSI0W3Q0ZDmDUIk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 17 Sep 2026 03:29:28 GMT\r\nage: 2326750\r\nx-served-by: cache-fra-eddf8230067-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 81901\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":279162,"size_decoded":82698,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57307)","md5":"353f46a80ba062c763753683f249266c","sha1":"f973bc985b3668de0dad22345b74346439835089","sha256":"eabf5ff11ce302bc0b2e8f1d140a34d057f1bb98dbd1f58b5c68025819e65796","sha512":"b7ee9a9d320cc68f4fae9b164b05095f2990fd8213777459083c3e8a6667cd4d167695c1b079a9597cd46c6bbfed451be3711a0c0e4ec89839453325b69eb3a7","ssdeep":"3072:Ruhi5vnXNdJpfzFgcxKn3HXJOLtvrye4SWXr1Gv+ZPbfXavZ6VVKSTTyCl:Mhi5PjNtjyx/1bdVryC","tlshash":"6054e78ab1c5b025079770b5403f110ab237298cb41a84dcba79e4e6ad7ca5da13ff7d","first_seen":"2025-05-28T10:22:38.260344Z","last_seen":"2026-09-17T03:30:13.824963Z","times_seen":12,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":10,"receive":12,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://byit.support/api/websocket/server/024/cs2axsyr/websocket","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.101Z","timestamp":1789615772101,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /api/websocket/server/024/cs2axsyr/websocket HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://byit.support\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 28X9ReoiW6q5ekvU+WRy+Q==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:33 GMT\r\nConnection: upgrade\r\nOrigin: https://byit.support\r\nUpgrade: WebSocket\r\nSec-WebSocket-Accept: 064bWA1TaV6bN9WG3Y8mPsMgkGE=\r\nAccess-Control-Allow-Origin: https://byit.support\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nSec-WebSocket-Location: ws://byit.support/websocket/server//024/cs2axsyr/websocket\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":470,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T23:38:37.058345Z","times_seen":19108804,"resource_available":true,"data":null}},"time_used":1199,"timings":{"blocked":212,"dns":0,"connect":246,"send":0,"wait":247,"receive":0,"ssl":495},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/BTC.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.452Z","timestamp":1789615772452,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/BTC.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 1169\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-491\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1169,"size_decoded":1408,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 50\", progressive, precision 8, 60x60, components 3","md5":"6fa97787ec56e41515451026c150e355","sha1":"0f29b197ccaa2900718cddcb6c72c631b2dfa584","sha256":"0cfd79a49dc11705c214f270c44dbd3fa99d82807b47d68d70f47a97183ad791","sha512":"3c63e538bcac98bdfe393ee5b8cbbd0fc78296b29d0a3966d17ad1efd9107ba527c52874bcbd8b99bf60a78ed45d51862dd0c1c6c8bb26bd06e3556654cb1f30","ssdeep":"","tlshash":"7121b53f3f638b13eab9803290dc52d23308af5422789f5b269228642e3f1e40dd8153","first_seen":"2025-05-28T10:22:38.218739Z","last_seen":"2026-09-17T03:30:13.826368Z","times_seen":13,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/DOT.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.461Z","timestamp":1789615772461,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/DOT.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 4271\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-10af\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4271,"size_decoded":4511,"mime_type":"image/png","magic":"PNG image data, 234 x 216, 8-bit colormap, non-interlaced","md5":"aa0814cacc3a9f406a3d04ac87ffbfb0","sha1":"82822d7b87401b0a4daf28aa67fa55cca88f4728","sha256":"42bed1e350f1d3740e454253e636da5dd3472708486bf55911cead83f22b68c2","sha512":"11ed343291f16814affce64891fe86f78dd3c7c276ecb085f1bac72efc2bcecd8278152d78e606352c8c64cf66c645e2998a88cbf25bc1cb6642a521b6cb3afb","ssdeep":"96:GMPBh8nooExFp5BzraRjEi6vWDldw18FV7IMYVM9WXdj+c6hoEjgLqOm:G8Bh8nof1Vra9EixDldw18FV78MWXd0t","tlshash":"e0916e53892bb8483df98c4bed67e4f1ced12b2da7323e02595279c917002cd1ec6125","first_seen":"2024-10-24T04:25:14.88595Z","last_seen":"2026-09-17T03:30:13.82715Z","times_seen":17,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":466,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/banner/1.jpg","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.956Z","timestamp":1789615772956,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/banner/1.jpg HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 225095\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-36f47\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":225095,"size_decoded":225339,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 690x300, components 3","md5":"96cd47f7cd1c97c001263909c5ec7631","sha1":"27f6ab42244095b9ae4b8b80c7dcebe4fa250b88","sha256":"4504a242724914d7e296024d34129476b21c20d04d00272155270d4ac5394419","sha512":"329887e8bd07f714ede004deca62f635a73f07dc19e62db6d768b13940871352de9b0ff3db2d48f678ba356482d04bc94ae80afdcabc15665825d5941f981dcc","ssdeep":"3072:8+ArOut0Ur5q9BiOrTp0xB2DmiaqtxvvlJaJmawxAeSPHPh400W+bWLo0i0e3hMF:vArwBiN+m7svvlsJjI3uh4fuo0FYs","tlshash":"b72413469fd633c611ffb2a90692aea71b0f5099d4771c4aee943c92fc9719933e408c","first_seen":"2025-05-28T10:22:38.222244Z","last_seen":"2026-09-17T03:30:13.828567Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":851,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/api/country/list","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://byit.support/","date":"2026-09-17T03:29:31.011Z","timestamp":1789615771011,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /api/country/list HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:31 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":965,"size_decoded":633,"mime_type":"application/json","magic":"JSON text data","md5":"072df3db3bf8fe69533d5ea5ad0357af","sha1":"4e01c96560a1b55405600aa8cc2f822ebe2b4ed0","sha256":"4932f121dbff0f1cfda82cdd47a1562872f55ea5cfcc2a2fff23ec9f3c494161","sha512":"e121afb727185583153cce79583c0063966c4c8a25a777a148878b7dd0475fa3f7c0eb1cacc99005c3ab40cc6eb6b68e0d8934c044b068660fcea92e0278aea5","ssdeep":"","tlshash":"1a112e5e577dfcfde5259083160eb76e58b9321584cd3f44f5cd4d6c9bc28a05708a22","first_seen":"2026-09-17T03:30:13.829459Z","last_seen":"2026-09-17T03:30:13.829459Z","times_seen":1,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/mobile/ico-notice.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.444Z","timestamp":1789615772444,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/mobile/ico-notice.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 2846\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-b1e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2846,"size_decoded":3085,"mime_type":"image/png","magic":"PNG image data, 31 x 31, 8-bit/color RGBA, non-interlaced","md5":"998e0fa9d2d325fcb32967f2a6f7e18e","sha1":"c6b79bcf8057944e8c4372728df6cb63086add2a","sha256":"b5ba1ff9d695cd27d973f94c99ceb23881104aeda8d29845dcc4b5a93a74d69f","sha512":"a1d76745d25c6cb6f648ac96661c647f29a76d200fc2fb14962a2b27cb1e68c95b5c1c21080cbe5b3325809f9ddab6c438a4db911c3d1b59af77a677a620598a","ssdeep":"","tlshash":"ff514d8cb3e238ba2c84ba9512eb55bce3195079175c66dcc127e8e996c6e4222c042e","first_seen":"2023-05-11T01:40:35Z","last_seen":"2026-09-17T03:30:13.831687Z","times_seen":20,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/LINK.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.470Z","timestamp":1789615772470,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/LINK.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 1299\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-513\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1299,"size_decoded":1538,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 50\", progressive, precision 8, 60x60, components 3","md5":"160672a0e176e3f63f7f64d7b5f6f0fa","sha1":"34f6a2972c748ffdf7e84ff7848787483a38b4a5","sha256":"02620e65357ba31c73e31f06a93247d5219659520ef781df80c956786e89b35e","sha512":"dd6ae8b0545ae07ab71e221144733ca7c690f3015c4d17f99864081204b95aae317830cbfa91ec01ad37b5d89c31a67c85d7aefbf2b3cedafdddac4486bf453f","ssdeep":"","tlshash":"002174b61f1ada23feb202398a7c07e477659d1d3330cf6726a15821c9370c0688025d","first_seen":"2024-10-24T04:25:14.9084Z","last_seen":"2026-09-17T03:30:13.832569Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1203,"timings":{"blocked":958,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/api/websocket/server/info?t=1789615771795","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://byit.support/","date":"2026-09-17T03:29:31.798Z","timestamp":1789615771798,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /api/websocket/server/info?t=1789615771795 HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:31 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77,"size_decoded":450,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c326bd0d8b192299eb610eaff980aa9d","sha1":"c9f7d384349df2c623adf13cf0fdf2259aa0193c","sha256":"689aecb7ea53b8e74d110ee022aaf4506d2e45f5febf37efe6198b115aa171c9","sha512":"54c909a5b9193d0be61804399e4d350bf70d8fb3107c5789cf02e40543f5d223f8e6b205669d4aec1aa81deff51a7efb601053550d189cf711c70376a2b06944","ssdeep":"","tlshash":"fca0125a842c20b564581b0102001f12541904ab010060e81128255406d1422211054b","first_seen":"2026-09-17T03:30:13.833303Z","last_seen":"2026-09-17T03:30:13.833303Z","times_seen":1,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/UNI.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.474Z","timestamp":1789615772474,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/UNI.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 48786\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-be92\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48786,"size_decoded":49027,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"b4ea068d73ce0e9b8b4e9f4fbbe68c2c","sha1":"4f0efed7cb9ace6dcc9f639ff1198ace9dc4c78e","sha256":"8ff5d17bde1f2a3821faf28a119d322a2c8ecee5235baef56f54b4bace1a87c0","sha512":"c99fcf513396a968b4fd8fc65ce1dbf250036e458892ff24d07873561e745ca12f3f201a14930ed994868b10b2f3fe677b85e26f3ebb80d8aac5fd27942d0f07","ssdeep":"768:4jF5A6V9oDm/TEPR0LilvbwFvXvdubPRE0fukxFezvnrthBDdbnwPSplTHE8PhMv:mvrV9o+Eq/fdubPVH4jtbdfzTHhZRuik","tlshash":"7d2302fb272cdad5838d9b239ccfd785724897965757cf2e1c60078edb024a8a291783","first_seen":"2025-02-26T18:31:17.535764Z","last_seen":"2026-09-19T07:21:24.066857Z","times_seen":52,"resource_available":false,"data":null}},"time_used":1449,"timings":{"blocked":1203,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/js/app.08ce6638.js","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.910Z","timestamp":1789615768910,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /js/app.08ce6638.js HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:29 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a63abcc-e9fae\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":958382,"size_decoded":288641,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53999), with no line terminators","md5":"c862a108aa583f4436c5e1f863169e0d","sha1":"aaa20c163461db1a4917a0e76c29eec88583e4d6","sha256":"cdcba6929417efb46326390ab365ce0ad374cce6bba660c6979f5167cadbbce4","sha512":"e89de370ca361dcbae291fa24bf34c335b5bc2ccefa59a612eaa36e5428133c00ef98ffec76a581fc6ba62680e9e799549548de7981bd421b19d8683eeb2a16d","ssdeep":"12288:zrGL2U76ks379MkdDpKqKB0sETVELyl706CuLy/+SYD2Q9q7QOoN5z6GCh6Nt9M4:UtiOsz6GfEBqe6","tlshash":"d7156c6c32deb6ba0182d141900f353c51291eb5e146d1d06ca6eae81afdfb59233fb7","first_seen":"2026-09-16T19:30:36.416739Z","last_seen":"2026-09-17T03:30:13.836347Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1971,"timings":{"blocked":-1,"dns":0,"connect":245,"send":0,"wait":497,"receive":737,"ssl":492},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.3.0/sockjs.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.926Z","timestamp":1789615768926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/sockjs-client/1.3.0/sockjs.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:29:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:16:21 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oh11R2F56SDKHM1qDES8sBfWi2qu7uZHu21fjAFNhDhUIzy3xyg9yjBcs8zIuKTYwOEy%2BILnCaKxxdB0ST7F9UzpEPDoG6FOpF7lfCndI61ZtFcLomW0%2FU9Rk2ZmzPI6h5HRoyUi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c506dbcd9f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16651\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62797,"size_decoded":17662,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (62696)","md5":"f0a01fa31e644ca44836356a172ba7c9","sha1":"e81438a79e8a7f34423168c70696cff2a820dbf1","sha256":"840ea076b43dbf564a909bb082dc287740a96f3c4483fcc024f7176306daecc7","sha512":"a18f9c600996f8f31c046e80334cc794efff550c2286bc822ba7bbc197d99e4ce5f032133866b18cb9743a717b76e578cdb2a9fb5f6ebe42614d08ea1ea2e47c","ssdeep":"1536:XFWQV1ZGORGWiB67hAHLY/IyYT3uu+OLFckh:XFW8tG967hAHM/IyYT/Law","tlshash":"5853e8c5f46134a213e7a2b582bf11032376953a640c85b4b798dcf98d7d98c532bf7a","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-07T16:47:06.454319Z","times_seen":1228,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.928Z","timestamp":1789615768928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs//Swiper/4.5.1/js/swiper.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:29:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 10845\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:04:02 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5V%2BhcStKar%2FDaFf%2Fdn7mcj5mCcWYugMedTun39yYJgerOS7mvW3obP4u8lBGARRyaS30VzKlgsSjmajeLCDEPf4%2BpDALGorWsgoXYgM7xfSQmgU0NUPrpXIyMM0EsbkRgJVDjiZ%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c506dbcda256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28993\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128745,"size_decoded":30014,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65269)","md5":"2ac19265b38d14235141d184bca54d9a","sha1":"c725eb5a33d093e331e25c3a5ef1272b0f1f648c","sha256":"e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e","sha512":"6476ae51cfef0724ba254cff1e5d68f2cda477840954b01b933f1c9608ed6ca5094fe006d5cef7e5a32d54b25fb4a418a3e2c3eb642bcafa0d6bebaacbeac21d","ssdeep":"1536:O/pPCitsufJthaK85kqzOAkRlojU6tU8r5MhkhGllpcXvH7WcWUKcOqylFE8BtOa:+JthJkOAkaRaaGl4fH7WcWUKcOqjtYD","tlshash":"2bc31849b35071e551e72256539ed601a3b66845b90ac0a831b2d8d7acbce8c03bfffd","first_seen":"2023-03-07T12:58:52Z","last_seen":"2026-10-13T13:40:40.512337Z","times_seen":2626,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/api/banner/foot/list","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.466Z","timestamp":1789615772466,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /api/banner/foot/list HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: pt-br\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":921,"size_decoded":563,"mime_type":"application/json","magic":"JSON text data","md5":"3e4ebf8edf5816c7632211c8ca2093af","sha1":"77860c661b16cfd084e7faf1bbda02c82203c8ca","sha256":"bef8ce4ffd35103d4315c1cbe054df370b5b9436c78d8174035375432843eea1","sha512":"bc6db5a65bd40d5ee9d3465ab227c0f6ac15b65bd55822fa1573d7532aebf76c10d883ed4f138c1a1d9ca4a9e43cfc6268d5374463f0d27dc54a20b0d0d57e6b","ssdeep":"","tlshash":"f0112202a1bcf8bb9a4841c290cbad8889eab50f08c611046296cf5c85dd0b6679d0d7","first_seen":"2026-09-17T03:30:13.839238Z","last_seen":"2026-09-17T03:30:13.839238Z","times_seen":1,"resource_available":true,"data":null}},"time_used":537,"timings":{"blocked":253,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/lib/flexible.js?2222","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.907Z","timestamp":1789615768907,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /lib/flexible.js?2222 HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:29 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a63abcc-fe1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4065,"size_decoded":1617,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1572c9446821f8b1dc1136b64b44e739","sha1":"6a786ef63db48581f50e85601ef4a3effe8bf095","sha256":"264ef2e4767a942ee634794619d94edbd7da642cb79277c16b974cac9795c246","sha512":"4283dbb16b94c7db39673fb92808835e7f2ccb34f64502d0524cd571fb28e91c82abddcbf1224d4b83c1fb30908c96a4d16b604b22ef0f491c2bdf2d00213598","ssdeep":"","tlshash":"5b81322806e322361e2330348fbf210539728067055ace447d5ee79e6fe4a654ef6bf5","first_seen":"2023-03-07T12:58:51Z","last_seen":"2026-10-13T13:40:40.478891Z","times_seen":974,"resource_available":true,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":1,"connect":244,"send":0,"wait":248,"receive":0,"ssl":492},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/lib/jquery-1.11.2.min.js","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.913Z","timestamp":1789615768913,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /lib/jquery-1.11.2.min.js HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:29 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a63abcc-1787e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96382,"size_decoded":33746,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-13T13:40:40.467413Z","times_seen":2003,"resource_available":true,"data":null}},"time_used":1412,"timings":{"blocked":-1,"dns":0,"connect":284,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/api/bet/coin/rateMap","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.072Z","timestamp":1789615772072,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /api/bet/coin/rateMap HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: pt-br\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":646,"size_decoded":483,"mime_type":"application/json","magic":"JSON text data","md5":"10b9bf9712c2c23f27e1c47bf9064075","sha1":"45ad1e4fab1325b3459caaa2f455b98d46b2adaa","sha256":"a1858dbffecc60c32ff4fc4e5ef40ec38c0db936309324d26aea302b73da44ff","sha512":"fee3b36e30ee44aa83235b54a8ea5c452e539966cf259ecc28916ff818baafa99a64b8938a7316a479bde8a9af9428ccb19bc2e747378fdefd2717edf95e0fe6","ssdeep":"","tlshash":"f0f079ef73dc28e573027e790caa1a082b552b799e3381f6bd6082f34d88c7016b452c","first_seen":"2026-09-17T03:30:13.844467Z","last_seen":"2026-09-17T03:30:13.844467Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/css/chunk-7884b273.739d35db.css","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.093Z","timestamp":1789615772093,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /css/chunk-7884b273.739d35db.css HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a63abcc-e20\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3616,"size_decoded":1132,"mime_type":"text/css","magic":"ASCII text, with very long lines (3616), with no line terminators","md5":"4dec9f3be1537a83bbade2f5f1a2169a","sha1":"9bb44f1bb069eef4dbf2d392447dbdcac10c0914","sha256":"42e20aac7437ea8e4faa23d9758aad59a6a444ca3b5947196886801649f90fbe","sha512":"371c6da974a625a3469b1915e56627883cee30516e55eb9316a41d1c1792ccf83397e4f7c1e67733ad84adc41c08c2f1b6397125d1d821203c85dc92308545ee","ssdeep":"","tlshash":"c4712333b11da307707fd3b5649a18ee3600e76bb152c3aaece96031de8b8673126745","first_seen":"2026-09-16T19:30:36.434909Z","last_seen":"2026-09-17T03:30:13.8471Z","times_seen":3,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/banner/2.jpg","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.957Z","timestamp":1789615772957,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/banner/2.jpg HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 68472\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-10b78\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68472,"size_decoded":68715,"mime_type":"image/jpeg","magic":"PNG image data, 690 x 300, 8-bit colormap, non-interlaced","md5":"b0b0c2ae9c1634173daf1b7bff208692","sha1":"073335891dc909779ecca1265c6c2dacdb44e86c","sha256":"0075ac9fd959c3e6fe788545cbe75243ca2c8971b5010340361e440b97de8e44","sha512":"51da4038c10005f7eab15211953446dd474c48fb998700217fdfa07afe81e89936da87303489038338cb12a3649a4f2915a1b1dc8fd445682ee5c3ae80731e6e","ssdeep":"1536:BhEXczE8nfKtreWWMgkFzKy3Sh5XKs0viM5PzR85/sH:4M56LzgVzngJzK+H","tlshash":"dc6312f0ed650fa64fe07e51ceb8fa5780d0e5f12e7ac084f0998a575b602a644372e7","first_seen":"2025-05-28T10:22:38.252955Z","last_seen":"2026-09-17T03:30:13.859511Z","times_seen":9,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":282,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/banner/3.jpg","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.958Z","timestamp":1789615772958,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/banner/3.jpg HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 82116\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-140c4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82116,"size_decoded":82359,"mime_type":"image/jpeg","magic":"PNG image data, 690 x 300, 8-bit colormap, non-interlaced","md5":"fa40a9668189df2088cc38d0670136a8","sha1":"7166b73967326df23be0d90411b7982f681b65a5","sha256":"3d11d576ad5e4b6c75d99906618a814ffe8a688e76c5b153c109ee3be71f0ffb","sha512":"6c7a0527b2e60031df91a0222b0d492efbe68bd178620cb1b29520cee11dc883eceb82f33949499f2355fecf90a53b6ce36dd2a8dd85540f8401655800d03c06","ssdeep":"1536:3KT9pZhG0/HQic08tCLlJpfIa7aYaZYozSsRHa1CQsU:6rlrkt6jIa79slaAu","tlshash":"3e83122c9bd8255a1d17d3ef36ebdf0d18cef6e282534cde0875d79027658a10a2b922","first_seen":"2025-05-28T10:22:38.216914Z","last_seen":"2026-09-17T03:30:13.860643Z","times_seen":9,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":488,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/DOGE.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.463Z","timestamp":1789615772463,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/DOGE.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 7623\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-1dc7\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7623,"size_decoded":7863,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"6b61a71ff9e3df71fea38e8632d81c9f","sha1":"b4e368689d01ce0f875ba0f8155b30f69667ae1e","sha256":"b4b86a92588370d16dff7ec598257ae61113229b52ab5ac49bbf740287fd4082","sha512":"bcc54ce262e513d864b7e80803dc9d4fdc3a99edf660aadd91a7c85efe5003c2ecc5bca3294e8b4e6b168e1afb5ba53794c45ce8a73253ba3cf4c94ab9c0cc69","ssdeep":"192:GbVxaeHMNaI7bv+ksgAEpZx+GlzriX6DDZZuYZPuSHrhdQUn:CHa+MNZ7bWvgTpZoGRr/ZZXrYUn","tlshash":"26f19edeb797d9bb18cb645b305cc0d197245a0ab87d50897ee11098f7c45d29228cbe","first_seen":"2024-10-24T04:25:14.877523Z","last_seen":"2026-09-17T03:30:13.86168Z","times_seen":14,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":472,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.915Z","timestamp":1789615768915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/core-js/2.6.9/core.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:29:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 135\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:09:17 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uiXx7K8MH%2B6QHWKyPWmXHgzoUqnwJ7v4O83FMWdvXN2q5JcRMBzbyKLcx5jWogUFPQDKzDMoFX7%2FcQcsEBSLcMuY%2BCYqX3ePzjJFTlmTs7JqSifdqp%2FMvzhkAkwQxThitk2RVD9t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c506dbcd9a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92051,"size_decoded":28077,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32000), with LF, NEL line terminators","md5":"622c4c9d5dc4b1ee29a2eb908186ec88","sha1":"491753a3f979f7d180af11e1929ffff85e30f921","sha256":"794d1c7ab27be77d366e0497e641488e50f5ae6581b4db51cc08de1e142eb47a","sha512":"2b2485006e3a36dbae0d0d8488ab63ae6085c34d5a6f72c3558c52b492294c157f67ce47c1c3b89498db9ff72f748485fedc04a881f1877f903cfa0df1c8be8e","ssdeep":"1536:PLFpwkiSucuVH8MBfaQQ979S17LMgRCSRjMbEjeb6Gt6UQ:PLbw1Sucu3Qw8gc3gk6Gt61","tlshash":"1f93618cbec6f06642636675413f900bb27a1a86745f89d0e12ed1e4bc7c98f413be6d","first_seen":"2023-04-06T20:58:39Z","last_seen":"2026-10-14T23:44:53.149925Z","times_seen":1669,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.917Z","timestamp":1789615768917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vue/2.6.10/vue.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:29:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3803663\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:48 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bqkm02EeBoAe4MkQf6JnyEa1eaay8JB8c1JMrVVXNk2vsN1aOFyQMxIC4BfqUdv0Wrv8FBhjXiqvw5AvlrZq5iXkq1zM9WopOZlkV3%2Fnv9nHGc%2BPy2NdZ53UJwKvNNTqw1dfdweY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c506dbcd9956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30769\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93675,"size_decoded":31786,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-10-14T21:14:42.710745Z","times_seen":4860,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.919Z","timestamp":1789615768919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/axios/0.19.0-beta.1/axios.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:29:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:06:02 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UJz%2F0QGwhp3YzlEiE1dv3l%2BhR%2FZK6pbGAhbPFRWth1leDU4ios1jErGTVHj%2FaEUTv1Oc%2F7DZL21UeAEp%2Bz1lvCCz1%2F7mxPsPlWfszSX%2Bg%2FVUWttfXrTeBoYwK3UMv1wHH%2FpJMOMY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c506dbcd9756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4213\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13638,"size_decoded":5239,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10313)","md5":"334149adf44476f28bfbf16c7b0382c2","sha1":"ad2ea246ebb53ed655ab50d44b33d4d6f942387d","sha256":"6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6","sha512":"0f9d66a68e400a2499cc1dbd79331892e9e62e278d8b4784e354b7a281c91fcc1401eedb0857ff6911d842ea853d39081b459fbdc0e30d927ee93b5ba1ecdbea","ssdeep":"384:hpI8XyWPbWeAExXqgxH7RqzGbcQdVzxbUm6HwT9eei:LbXdyGbcczx/6QT9e1","tlshash":"f25285ce7861b0a757e320f0805f4a0fb2b6552a754d84a0f660e9f66db542e8733f5c","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-13T13:40:40.494142Z","times_seen":1309,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.920Z","timestamp":1789615768920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vuex/3.1.1/vuex.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:29:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:51 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lEqq5u%2B0XRFLH7JURgtNvJ1jC%2BiOmVtZynjibx%2BL1NqaAdNTs8RjCt1CXP6OHDR6o%2B5XGDMxzUKYlGp48n5lTV%2FL8B99OaXJCZXpbbm3muz7eRopIUsdBh0L0SJP3wXbn2fXVoNU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c506dbcd9b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2776\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9875,"size_decoded":3792,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9815)","md5":"c66594705de51675f08e3b83b9b9b38c","sha1":"40fa40f722043957a56324174ec6f80389391971","sha256":"e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65","sha512":"3cb0d6b77ac49d3c6c5c5740efa2fd9e3e0c79158c88a9d4f0b709f4713a38a7b72109a2b4c636377c783effc3c6457c718d8cdc2e9c7577db9691562e95375f","ssdeep":"192:90DuIfY7JtjC5ydUypH82+H8urFLR7BD4GOUo1MQl+B2GHPpB3QE7WA+MWnBP:9guIw7JtWqmhfldD4Eo64UgH3nx","tlshash":"4f1261ccf661b0764a377460623f120fe276a46d200a4468f598e4ef6cbe14d94abf3c","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-10-13T13:40:40.473599Z","times_seen":1603,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/logo.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.441Z","timestamp":1789615772441,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 24204\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-5e8c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24204,"size_decoded":24445,"mime_type":"image/png","magic":"PNG image data, 77 x 77, 8-bit/color RGBA, non-interlaced","md5":"96727e375a5aa56ab8f8d14a89db6bc4","sha1":"98493a669acdfc39632f4834326d8b70011acb37","sha256":"323d6a480513995ea503ed747565b3c3c10cfb402ac6e7c902c840bc5008a279","sha512":"8f4dbf833a46e013e5f2d500015851bc9013eb914cc5f3ee9895bc9339d21f080f92bce8028f7e3a8f025fc1c6545751fa7d60b7ca59a702e5e104be17524dde","ssdeep":"192:qSe8cnJ08GELjQsbC2II1UX3LzS6wgRH3ANMFTSAl/CKDOjY8s6oAAHI7fAxFVdV:l5NugdIWsEDOA67CFBTzA2AS","tlshash":"d9b254177f01e917c5882e7689a4c7e42331fc49af12834734d6af6fadae6c36e05284","first_seen":"2023-09-10T16:04:43Z","last_seen":"2026-09-17T03:30:13.867563Z","times_seen":10,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/mobile/ico-pay.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.446Z","timestamp":1789615772446,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/mobile/ico-pay.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 11837\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-2e3d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11837,"size_decoded":12078,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"8bd980ed5a84c9d97b6988ddad63ddee","sha1":"ee4705217c3f4902c65711c6a934055440b7031f","sha256":"47f37496dab96a344b61d22cf3236a71061bf7297b8dd92b03b796b0c87a66b6","sha512":"cfface41405f077c221f89f4d7a39fc6c10684137ae6e71d7ad573d30480107c09cc0418237297ef4b0195b91e63dd818f4aa9337cf755da13e8d553348b150b","ssdeep":"192:X8HQ1cr+MTXlFcltm4n4D2pQOvY9xHEfYZ+j40XQu6D39VnmhWaePVm5s0KL6hfc:MHdL7Qln4D2pQOvEBEfRkq5o39lnPI7a","tlshash":"5532bfc4d98b554120313a87293f851fa2268bf6559bd2a3b0ce860fedf13f4958758f","first_seen":"2025-05-28T10:22:38.177653Z","last_seen":"2026-09-17T03:30:13.870121Z","times_seen":9,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/LTC.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.459Z","timestamp":1789615772459,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/LTC.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 996\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-3e4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":996,"size_decoded":1234,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 50\", progressive, precision 8, 60x60, components 3","md5":"237d6e76d3e9c1033c276d05f52c97f7","sha1":"a827954b3446baa9e92affa4bf94c3512eb99ff6","sha256":"a021c137ed005b3c1fa401a8e55675a55f65ecc5a498d84f7c948937ad0911cf","sha512":"a9dff70811b627d2c1e0d5f379c7bb7f0b3e7084e03f10b3af5a6d4e8b478d08b99ca359d5e3b9195aa82aa96b1354cf9a50c4181e598a1fb600ad9866af29ab","ssdeep":"","tlshash":"0b112fb91756d141fe3c423000df0bd0fb0aff9081b40f8722852c24ad3b0d8acd5624","first_seen":"2025-05-28T10:22:38.262808Z","last_seen":"2026-09-17T03:30:13.871863Z","times_seen":13,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":269,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.923Z","timestamp":1789615768923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:29:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:47 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aB44T79L6POA9p9WnvkReS8WaK7jxhzcAPIEkEfDLwxQPeyuo2RWjeAOg2mmQhH%2BPC6VsZAtfS5cbkSxNvbnMpPpji%2Bk4MoYfZHczjyP1bAX8hRcnpEn3ATZ4rQHxAmfrAE5hixr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c506dbcd9d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6201\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22805,"size_decoded":7211,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22712)","md5":"c019be63e713ce6f2aa221c0df8fa0cb","sha1":"e5471888945144f233714d470959059c010eb667","sha256":"87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce","sha512":"6ca3ae5fb17dc20a2c27d4008454feb7cefc626bf104252354c1abd0977f73a315001d94293a7d4379ecfda6ba21d3f49a992f243a6f9249c935195527d407be","ssdeep":"384:BPdUYakDlUGQrDQxMQ4rJaT30WCxQI1cg:DUYzhUGmUMQUX3","tlshash":"cea2b7c6f56270270a9260e5183f1107a33f241d648d855df2d6e8ee2ebdd8e91a3f39","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-13T13:40:40.470888Z","times_seen":1283,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/js-cookie/3.0.1/js.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.929Z","timestamp":1789615768929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/js-cookie/3.0.1/js.cookie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:29:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4420495\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 04 Feb 2022 14:14:49 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5OXD9TRUMcmecJDeX2hZRsrJ0m7qaryspmBp7eZs%2Fd4SB4hNhf7pIRXRLBAypD%2BnCWLdtmWf92yrpLTtkm6RG5CdLV6xDKlDDVuDW37QYcKFRkRgkqHpdoqZh4YbUkn1fBPYYJx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c506dbdda356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 714\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1681,"size_decoded":1729,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1650)","md5":"511390c6668bb8cb2c65b03dc65cf6de","sha1":"9ec5bdca09eb11492910672fcb48594d04eb63af","sha256":"d07dcdbb3ddaba0dda7d56d496cbb5d8fbb1bdadc23f812126d3c4c6ab39e158","sha512":"c13eee3c4eed38feb0e28dbcbb50cdefbe636231d00297419e26f93e1a38441d0f81df72ede4a4015d414ea43276ea580c1f460614dc410cf234c3cc5777007b","ssdeep":"","tlshash":"ec31b8ee3185a8da07171450463f1207f2f91e56eddd98802264e4f50bb077a01e7f77","first_seen":"2023-03-07T01:07:22Z","last_seen":"2026-10-15T00:23:39.506403Z","times_seen":10404,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/ETC.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.471Z","timestamp":1789615772471,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/ETC.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 1045\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-415\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1045,"size_decoded":1284,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 50\", progressive, precision 8, 60x60, components 3","md5":"1049d1b7f2e610def07b89bdf5825dd8","sha1":"1316d83fc578232a2bb9ba2a499bd625fabcc41a","sha256":"cc7f25caec96a6a90c0a9cfc8cbb05897d93969b11cf30a18c8bd12b7a2b5cc1","sha512":"e72681733e39707250ea14576ff6d18d8b3b59ef09c653285167be8c6f9cac9c381aa99c1c9e6d2721b906add44aff50e128b66d22f1df06396210c690bd03e6","ssdeep":"","tlshash":"001144b92f214602efb30a35417d06d6bbf89e55b6305f935154e9a0595b2d044f00c4","first_seen":"2024-10-24T04:25:14.927211Z","last_seen":"2026-09-17T03:30:13.877131Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1205,"timings":{"blocked":961,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/api/trade/product/list","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://byit.support/","date":"2026-09-17T03:29:31.531Z","timestamp":1789615771531,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /api/trade/product/list HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:31 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7217,"size_decoded":1604,"mime_type":"application/json","magic":"JSON text data","md5":"39a1ef5148064900141b3cce47b08c09","sha1":"92658fc58b7aa7310d93666068b12e507640512e","sha256":"2cce2816b348bfcfc2e2d02f19bacc3c8f55afc3ccf73804579b0f37546fbcef","sha512":"a14662c7ad6ec88bce57533ec839ce100d65bc4ef5326be38dabb4216396982d867b3defc74d3a80e8242b89b21d8c18cd87ce4a0fbb1044bac93c6f64c08e9d","ssdeep":"192:IsRecbvLzmujkQIbQjgt6AQhsxKd7itk41A:IsgkvLqujkQIbQ84AQxd7itk41A","tlshash":"0ae1efd4a88dc6b4f1712030ee877a19903c71dbe6ee8c1947dc9eb269d6af4218df05","first_seen":"2026-09-17T03:30:13.878747Z","last_seen":"2026-09-17T03:30:13.878747Z","times_seen":1,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/api/bet/coin/type/all","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.089Z","timestamp":1789615772089,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /api/bet/coin/type/all HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: pt-br\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49,"size_decoded":346,"mime_type":"application/json","magic":"JSON text data","md5":"4882351b6d087aac867a0eac03fff3aa","sha1":"1ce9147ac18b4774a278ebbb427343815104089f","sha256":"2fcc4ee64137b580c8b0854d0dfe7173b23c6f3bd1c1f057ede42a7466cfa72b","sha512":"852137b0c496048a61f9d97416e2150031dd4c6e692c728bff75497fad8104636d430d720e9678a87963e747e86644e30b32079a9baa60f741acf04a1d6dea41","ssdeep":"","tlshash":"439004507d35fc54f50501c5d04dd7c4043431530ff441515fc15310d3014751d04c34","first_seen":"2026-09-17T03:30:13.821549Z","last_seen":"2026-09-17T03:30:13.821549Z","times_seen":1,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/js/chunk-vendors.d98a0f3c.js","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.911Z","timestamp":1789615768911,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /js/chunk-vendors.d98a0f3c.js HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:29 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a63abcc-11649f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1139871,"size_decoded":361476,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52677)","md5":"a034ca135dcc24424f9b6602fa12bdea","sha1":"35726aa17d1e222f3e0b59d2f66e635537d0bcad","sha256":"f58f8ea6b86cfa131e98358e7c4588fb022c5f1c1faabc723b7e5d075d589374","sha512":"d7b39da53b3c63b0f3564c68f448134f8301954354c60e7122dd4a8aab7d453ede1adb58d494988199cca43ca7f45d97ca42f8031f9df67d485d59d96751d4eb","ssdeep":"12288:B+jMfNLI+UAvdu70Iefjp7nShYMouCS+2SaNptNI8GOv8Cjcs9w0OrcLrGOkPUby:82serpOhYLuC+VNptNI8Fl9rCcLyOkPr","tlshash":"f525f99cb655b03543a772a405af080f9336580cb50bc5a8fa59e4ee6cbd44b327bf78","first_seen":"2026-09-16T19:30:36.451243Z","last_seen":"2026-09-17T03:30:13.88145Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1474,"timings":{"blocked":-1,"dns":0,"connect":281,"send":0,"wait":496,"receive":738,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/api/translation/list","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://byit.support/","date":"2026-09-17T03:29:31.270Z","timestamp":1789615771270,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /api/translation/list HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:31 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":237,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"05831de6b3c0823656b58a473430aa7e","sha1":"2ddc7c9007eb7f05a35b155251b5d9dc47f0bdb4","sha256":"cdae01cd8a9d68fb877824070135ed4902f2ce1d526e1c5fcad8310635337d67","sha512":"f07fd210447d2765c601b91e5ad54b093555b087c824cdd9e168c0ab8164d37a07f3aca16fb0c6c86662fcf26b663a6576f6cb0b685bc1e4b815bf0a1459b5e9","ssdeep":"","tlshash":"35d0a7308c5afcfeb543c0c28a2d7602142c72317b5635149e48033569fef7401448b6","first_seen":"2026-09-17T03:30:13.882613Z","last_seen":"2026-09-17T03:30:13.882613Z","times_seen":1,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/mobile/ico-position.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.448Z","timestamp":1789615772448,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/mobile/ico-position.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 3203\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-c83\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3203,"size_decoded":3442,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"16873a239f423aa094ceb8751e00577e","sha1":"4ebb0c783cc2c8651988a22b6d2166f1194fa3d4","sha256":"399635981f5752b2eff2d254a195f01272ca2a2a84b45addbf9b67fece241009","sha512":"9c5861741fd544ace2768dc4f09c2ba3515f3a6bbb2d17fe19c61dd21440ae6923c9ba1819887b61bdfa48dcf2496a4e8b20ef5dc654c56a9602830876b36c37","ssdeep":"","tlshash":"2e615d8961f3eb5c96cb42e2416e25a1cb21bf08edda01e32009a533f86ad275672e50","first_seen":"2023-05-11T01:40:35Z","last_seen":"2026-09-17T03:30:13.885653Z","times_seen":19,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/TRX.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.456Z","timestamp":1789615772456,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/TRX.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 1219\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-4c3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1219,"size_decoded":1458,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 50\", progressive, precision 8, 60x60, components 3","md5":"b4cf357437e4ffa75ad9bc07c90d1f9a","sha1":"5288be66d0053c98f2b06feec247e747681729b0","sha256":"0239e57dd8a12d68c740fdfd583bbe8168229bb93fc159dd54f900ef71e7b418","sha512":"30e5e595b23d1874c3e8cb4727f57589a0799ee68b1c77afa5b2796ec2066fed4a2c96684cae0e0384df9153e83ac27e1658c6847f2e6b982d0c14215ec15fbc","ssdeep":"","tlshash":"35213d121362c5c3ea3792368aee29e277181e404630ae0322e56c64ec7e4dd4cee6a1","first_seen":"2025-05-28T10:22:38.239227Z","last_seen":"2026-09-17T03:30:13.88652Z","times_seen":13,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/api/banner/home_carousel/list","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.462Z","timestamp":1789615772462,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /api/banner/home_carousel/list HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: pt-br\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49,"size_decoded":346,"mime_type":"application/json","magic":"JSON text data","md5":"4882351b6d087aac867a0eac03fff3aa","sha1":"1ce9147ac18b4774a278ebbb427343815104089f","sha256":"2fcc4ee64137b580c8b0854d0dfe7173b23c6f3bd1c1f057ede42a7466cfa72b","sha512":"852137b0c496048a61f9d97416e2150031dd4c6e692c728bff75497fad8104636d430d720e9678a87963e747e86644e30b32079a9baa60f741acf04a1d6dea41","ssdeep":"","tlshash":"439004507d35fc54f50501c5d04dd7c4043431530ff441515fc15310d3014751d04c34","first_seen":"2026-09-17T03:30:13.821549Z","last_seen":"2026-09-17T03:30:13.821549Z","times_seen":1,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":217,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/USDT.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.472Z","timestamp":1789615772472,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/USDT.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 2804\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-af4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2804,"size_decoded":3043,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"fe75947bb87c085fc46ff5c9773ca1e8","sha1":"8a8706362f45987a3a3dcd6387aa39e50808a2c4","sha256":"19f5815f648b07e70b3a26bdf00cd611390942c6a3da5e6ff98b64486f69813d","sha512":"49bf4858320fe6a0d98592dcbe13036a5777b0489617ee58de6cc5970d837635780e9c326b68282cae0898af019300a381dbe08852dc83b5decb7cd3ec79b880","ssdeep":"","tlshash":"33514be670d346a4f87b39bc809c02a1415c8c4e27eaf01f3d2674f635b6cd92e5290a","first_seen":"2026-08-30T19:58:21.010267Z","last_seen":"2026-09-17T03:30:13.88727Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1397,"timings":{"blocked":1116,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/wav/notice.mp3","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://byit.support/","date":"2026-09-17T03:29:29.965Z","timestamp":1789615769965,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/wav/notice.mp3 HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:30 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 25077\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-61f5\"\r\nContent-Range: bytes 0-25076/25077\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25077,"size_decoded":25346,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"65cc6dedad33ade1d68080aec622932e","sha1":"a5ef21e09a2761c200089163b599beec5d78d9e2","sha256":"4305e63cd17b807bbd64ffed8e20dc95f8bd4ed85095071f906e14275280c965","sha512":"6ed8be903d5b206ac38d4730f0e8e9f962809d4ce4774b9e806f66c72d9724ffd2fba10d9b9c66aa2baac8fcd8b55c6919a438dcf8b89d843a99ddfab2a6f9c8","ssdeep":"384:sjnZk8brPILDIHM6/dJKctjp5SNfdeq2a+odrTIeRV8IKhH8Zm46hEdJ3czmG:sD7IPm118kmVujsEOfB3czmG","tlshash":"85b2cf04170298afb2c4affe61af85b7d6796d0e2d40cfe98081966e953b44bb7534c1","first_seen":"2025-05-28T10:22:38.261263Z","last_seen":"2026-09-17T03:30:13.888004Z","times_seen":12,"resource_available":false,"data":null}},"time_used":658,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/js/chunk-1acf6699.1358862a.js","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:31.006Z","timestamp":1789615771006,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /js/chunk-1acf6699.1358862a.js HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:31 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a63abcc-ab\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171,"size_decoded":415,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"d562ceb91ecb27750a5ca601bc5e988a","sha1":"e922e1e5b42f8121dbd11022363ad88a18128a38","sha256":"3539aa190884ddc86fe078f5ddac8113e3c949e3cd1ab6d70cd21a6db9ed3206","sha512":"eb8fbb880ae78be321c2bc9aded16531138ee3155ab0436182c3ae5a7efc012e68b8bca918d18dfe6c9dbd5e1573d6a9154c9d93274a8c43dcd62874da0f1b7e","ssdeep":"","tlshash":"62c0803db454b42714bb6093110b33d80d5b11043f75acb409b440d16b335cf5727b4e","first_seen":"2026-09-16T19:30:36.525977Z","last_seen":"2026-09-17T03:30:13.88875Z","times_seen":3,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.924Z","timestamp":1789615768924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vue-router/3.0.7/vue-router.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:29:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:47 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J72LlzyXHRu1D0fNMXgldwAcpTAcK%2BWwZgDjgmmQVaJA5vr0YVOmCgflatp%2FN8%2F5GaR43%2FVmNASurruFst5NFR1Jir%2Fu%2F1fUb%2BYgYgfD%2BngyQw99Tnfzb9o8u3%2FDL8e6DP%2F%2BES6b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c506dbcd9e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7869\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24822,"size_decoded":8897,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24752)","md5":"32e2eb91e6ed0512057b2ad1e6d1b242","sha1":"27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6","sha256":"e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5","sha512":"0ab7b445b586dd27a0aeb72396350982783129c9ba028ba1db847c9d2acc0de9c90c3c9636e76a21553fedf81031220f3676ea64bf7336644c04da33d744563d","ssdeep":"384:UUcnX3xpR5tumD+EaKGZRpqB1UdEPQFWmexTMCJ:7E3jXtuW+qGZK1UCP5mqMk","tlshash":"01b2c7ddb581b03547e326a0412f250bf27b358db44e8498f269e4d52cba85ec42bf79","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-13T13:40:40.45262Z","times_seen":1305,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/XRP.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.469Z","timestamp":1789615772469,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/XRP.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 1267\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-4f3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1267,"size_decoded":1506,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 50\", progressive, precision 8, 60x60, components 3","md5":"df0384f82cabcfe0ab282d7e9b8af645","sha1":"61967eee0a2c467a1153e6b79caf45278fd34274","sha256":"180c5e5fb66e791e90d499d4329cd69884a628b758514a365794ba34c9bbf273","sha512":"7dbdd4115a85735e82d4ddf4b28e8835f4ff6fa00e8f698acba77f69b0ab5fa91faa915622e8ec3167559ad1a3d0c8cbba7ffecf388399f304f373e195e04d7b","ssdeep":"","tlshash":"8e2174d51a638671e57e0372186d13d97704ee4801fb4e436b923d216c3d2a0b8c4c95","first_seen":"2024-10-24T04:25:14.890445Z","last_seen":"2026-09-17T03:30:13.890258Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1116,"timings":{"blocked":835,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/index.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.927Z","timestamp":1789615768927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.15.7/index.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:29:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 18 Nov 2021 08:03:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otvJS1i1KEl5qCeAzh9NRN65tcIBmWMFdnYNuKml3dQ26idRKbAQDPdaCY1B9tTxcp0O7aeIs4ZZ4MKVGZfmaNUFf2gmVt0wlTseuMrJ3hu0lE%2F7ksDkM25knaPCXbK4wKjTCz4f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c506dbcda156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122414\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":590640,"size_decoded":123424,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65105), with no line terminators","md5":"dc6dfa2d326274455390160572856dce","sha1":"efd937a0eaa2f39487b612814c98c37a752c9a2a","sha256":"bc09e54472585388c0ef0b58e5818a448f03b5671df4120da425cd6cac70fb79","sha512":"d42e99eb85cefb310ba46cf4a5fd9514f6804d4fa95f312178b0b54723db60950908465b257cd7160e2a67e56b1b2855bada2e67f56c992f53fad520bb7a73f6","ssdeep":"6144:jlrTktiHOvAeyErnMb/KeG4tVhkiIAUYxRtS8islZST79eA:jNktiHOvAeyErnMb/0G1TUARQ79eA","tlshash":"e1c41a8d72c5b53147a36070103f250bb33b299ca40980dcb679d9ea6dbd909626ffbd","first_seen":"2023-03-11T09:11:20Z","last_seen":"2026-10-13T20:57:43.324703Z","times_seen":657,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/country/pt-br.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.442Z","timestamp":1789615772442,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/country/pt-br.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 13610\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-352a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13610,"size_decoded":13851,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, progressive, precision 8, 500x357, components 3","md5":"ae47fdf66db159ab8feac4f8d47b1966","sha1":"5dc67c355a9cfb3f00e6b061949dfffe354ed988","sha256":"bd3e8ad4a1017e7efab39f869a2f4ebb1794dc5633a49fc5ad0da1c11ab64a38","sha512":"6999553a25a432892c47c7ca1d9d7dffb90b51fada3744a73eb1e08770f199ed4685a9511145b710d2dfa6b66455c6e1105f2fb0c1f3ad196879499f4f14a19d","ssdeep":"384:dE6jceXIH/eS57sv75GXCjbaJ+VRX/CjPimpurig:dE6aWso7GKbaIRvaimBg","tlshash":"c952c15fcb70844fe99c2b3a8c86761aaf122e39108e2d454b4525d96ce528d654d09f","first_seen":"2023-05-03T23:27:44Z","last_seen":"2026-09-17T03:30:13.904336Z","times_seen":188,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/BCH.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.458Z","timestamp":1789615772458,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/BCH.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 1127\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-467\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1127,"size_decoded":1366,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 50\", progressive, precision 8, 60x60, components 3","md5":"d6a9f64aab50ee026c80bbce0fbd9242","sha1":"2cada903c757aafc78ab06120827a83b5c6d9523","sha256":"ebeaecdab61ea3516ae1cae055e0836e7b4073d248b529dfc200277a2e3bbf5b","sha512":"7cf18e2711326150014601203c2d37e8621a5d2344bc9c9389a072dd289dc389eaf6754fb1f0facf9fa96a5ee6d5808aa42b20de944674cb92d1799c731818d7","ssdeep":"","tlshash":"76213eda0fa28263fdb64a339add5ae07766ec0632f08f4312993c392e27bc41cc4550","first_seen":"2024-10-24T04:25:14.8738Z","last_seen":"2026-09-17T03:30:13.906092Z","times_seen":14,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":263,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/ADA.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.465Z","timestamp":1789615772465,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/ADA.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 1369\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-559\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1369,"size_decoded":1608,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 50\", progressive, precision 8, 60x60, components 3","md5":"f7917f1589198b5cb27e9a680cc5bffa","sha1":"a051b2f8bd3ea44ecdb8378498e0e17ac95cd8d4","sha256":"815f8d9bed270da4315bfa4964c7595ecf90efea4a4633b853fdfed98b838608","sha512":"fa9392be4ac8466798f4e04ea1a101521ae3cd6809d8429b4430beb86db8561b092abc7a23256cb74c0b8d7f6ba2c3bba47284de05d3cf390e9ae52185ff05cd","ssdeep":"","tlshash":"d72195a2af14d642ea7a0bb104de03d073043d0566711f05688a5d344c3e0e80d903a7","first_seen":"2024-10-24T04:25:14.895016Z","last_seen":"2026-09-17T03:30:13.910234Z","times_seen":17,"resource_available":false,"data":null}},"time_used":958,"timings":{"blocked":713,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/css/app.4b04f767.css","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.909Z","timestamp":1789615768909,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /css/app.4b04f767.css HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:29 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a63abcc-15406\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87046,"size_decoded":21082,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f4faf36ef87eee9967a52d6a44dea5e2","sha1":"b24e8362413bc3149aaaf3ed6bce239374dc656f","sha256":"95dd8130acfc5e0f21bc6bd59f50c05e3de632ec17c57f50b004f2995289ea37","sha512":"05f02edf505faec7df1bf84efaaf0f7e5c29969cb933f47e14a664f2ca229f72895965830ed427339c84c3d46c04fa2cd7ebf6396156bc8b76d48ced3deec3a2","ssdeep":"768:iId3U6o3nIfSWv/tYvoZyuc48gQ6pVU8eS2A6EgVIIEsa5PgZTYO7Si4QU0YKr7t:iIK6o3nIfSWsIIdTYVoD","tlshash":"f7832587bad9254dd99b8e91c55a7ebcfebb091083829cc3d4533bba9f453db221101c","first_seen":"2026-09-16T19:30:36.532803Z","last_seen":"2026-09-17T03:30:13.917138Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1225,"timings":{"blocked":-1,"dns":0,"connect":243,"send":0,"wait":492,"receive":0,"ssl":490},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/css/chunk-1acf6699.87233cb9.css","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://byit.support/","date":"2026-09-17T03:29:31.005Z","timestamp":1789615771005,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /css/chunk-1acf6699.87233cb9.css HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:31 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a63abcc-dc5f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56415,"size_decoded":5939,"mime_type":"text/css","magic":"ASCII text, with very long lines (46623)","md5":"4ef282b2f5aaaf3914e48f9765436a7e","sha1":"d00c1bca391b9f29f34495ed50727927d305b206","sha256":"2de81d92d826d3a0f1f5d453134172483d539ba4f0d8a915376dad1ab38ad242","sha512":"8a37b80ed40fa8c0ec58bfffa2081c10d6789baeb1e3a532d40f73a79dc6a0c0aeff2afe13e93192bb4c647c6e636c505990c2933b9542f40c541ec56f3b5cf0","ssdeep":"768:E9Z4dmvIXQLUkJQWEkZgRUp2R7p2ROwo1OAPkuD336ya5hrCen0eTg:fEEkZYwo1OAPkuD336ya5hrCen0eTg","tlshash":"5743089b58a1224494224e52dbcc9fa8473dc75364b25cef33827c4bc745bae33da617","first_seen":"2025-05-28T10:22:38.185426Z","last_seen":"2026-09-17T03:30:13.921936Z","times_seen":11,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/favicon.ico","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:31.394Z","timestamp":1789615771394,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:31 GMT\r\nContent-Type: text/html\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a63abcc-2a31\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"SockJS:1.3.0","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":10801,"size_decoded":2820,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (7341)","md5":"7cbce59450734d853009bd5ae5626a67","sha1":"11ce43889fd5390a3209b894cda6fa83d49d4067","sha256":"0000230ed4d8f9f697c11cfa9e4c0069aa84b8588088c430a22aff9daf7af54b","sha512":"569cb7af484e2f6abadc2a80072a88c7f1e270a4444b4efc3c4fedd9e44e2f3093ef8bd3036bcf2ca93dcd77d3b02cee6cb5357e45d087584a677632bc7527be","ssdeep":"192:P9XCeKIC+LFGSFGmQnqQnv0jM/hO3Tjz9B/J757di2QntyztM4KZ9/2:P9yU20Y/wTjz9BB757ZQntyztM4KZ9/2","tlshash":"34224a39d600619ea9e1ce9b5e69fb69d4eb8c3b2470e050b62d8c5f8f74fc40663583","first_seen":"2026-09-16T19:30:36.428168Z","last_seen":"2026-09-17T03:30:13.925344Z","times_seen":3,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/api/bet/coin/all","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.091Z","timestamp":1789615772091,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /api/bet/coin/all HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: pt-br\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1007,"size_decoded":565,"mime_type":"application/json","magic":"JSON text data","md5":"f5470485038d0486a1fb872c5832466e","sha1":"5f59f5f89dbb36d3df4bd393426eb7f2f2c25019","sha256":"eabef3f17ce721f253efeac158a4f1e764829ebd5f8aef4bae5ae061575de170","sha512":"caa38cf360d1ce4cb838f683baac9b3611ce658b8d3b5921f4f5979a654238179c464a3e7c64849af5a556469bd83929d26c460da7c44a17980e4f28695348e5","ssdeep":"","tlshash":"c7116361760b3ee59f1b77f409eea6791562131398df04488debcfe982ead54820c34c","first_seen":"2026-09-17T03:30:13.928984Z","last_seen":"2026-09-17T03:30:13.928984Z","times_seen":1,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/api/poster/notice","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.464Z","timestamp":1789615772464,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /api/poster/notice HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: pt-br\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:32 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"6788a6cdfd0d879427ee8fb7eb97af3b","sha1":"5f1518dbc8f042cbe7b9af0e26d3a7cdc3d1e159","sha256":"4797b6bd8d50603490b070204dcc4b47630c9e0359d77474dbf3dbba2d0accfd","sha512":"199d301a067944b2347f60a5ccc29947e2ff618413d529e0ba7a0d8fce9d26c33642bf42c9b53312d09adb46d9eae9170c8573b7a61c1b2719ea95abb8afb0fb","ssdeep":"","tlshash":"409004505535fc55f00501c0504c57c4453531430fd441411fc00310d1014550404414","first_seen":"2026-09-17T03:30:13.935831Z","last_seen":"2026-09-17T03:30:13.935831Z","times_seen":1,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":224,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/static/coin/EOS.png","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://byit.support/","date":"2026-09-17T03:29:32.468Z","timestamp":1789615772468,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET /static/coin/EOS.png HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 1038\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a63abcc-40e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1038,"size_decoded":1277,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 50\", progressive, precision 8, 60x60, components 3","md5":"61ea0493a3598b90a99393fec961033b","sha1":"ee621af30109d5f4bc4f23513e22a8038cfc65af","sha256":"6167ac6cae0d07abe9dc73121e47dd10a6ce5b118b7169f63e3a3b5e4b88937e","sha512":"51fe9756bf9a331888a26da22737ea30ffddccab9f42fc965b44fc7676f8051d65e4a4a2666b8524a4f22a5694510bd885999d4d23fbee41ddfe2aab199b181d","ssdeep":"","tlshash":"ee1163d967225393da36433ac59f85c93b5c990517b20f472f822ac4ecbe3e80898c83","first_seen":"2024-10-24T04:25:14.898101Z","last_seen":"2026-09-17T03:30:13.938194Z","times_seen":10,"resource_available":false,"data":null}},"time_used":960,"timings":{"blocked":716,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byit.support/","fqdn":"byit.support","domain":"byit.support","tld":"support"},"ip":{"addr":"182.16.88.117","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:29:27.562Z","timestamp":1789615767562,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"byit.support","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 15:03:24 GMT","end":"Mon, 19 Oct 2026 15:03:23 GMT"},"fingerprint":{"sha1":"E1:5E:46:42:37:16:29:33:FC:2D:98:B1:C8:98:67:8E:66:25:44:EE","sha256":"90:CC:79:2F:91:5A:CE:5F:7B:7E:63:FF:EA:4D:0D:17:8D:9A:51:E7:BF:DD:E7:BC:C4:CF:DF:F7:B8:F4:9F:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: byit.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:29:28 GMT\r\nContent-Type: text/html\r\nLast-Modified: Fri, 24 Jul 2026 18:15:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a63abcc-2a31\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"SockJS:1.3.0","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]}],"data":{"size":10801,"size_decoded":2820,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (7341)","md5":"7cbce59450734d853009bd5ae5626a67","sha1":"11ce43889fd5390a3209b894cda6fa83d49d4067","sha256":"0000230ed4d8f9f697c11cfa9e4c0069aa84b8588088c430a22aff9daf7af54b","sha512":"569cb7af484e2f6abadc2a80072a88c7f1e270a4444b4efc3c4fedd9e44e2f3093ef8bd3036bcf2ca93dcd77d3b02cee6cb5357e45d087584a677632bc7527be","ssdeep":"192:P9XCeKIC+LFGSFGmQnqQnv0jM/hO3Tjz9B/J757di2QntyztM4KZ9/2:P9yU20Y/wTjz9BB757ZQntyztM4KZ9/2","tlshash":"34224a39d600619ea9e1ce9b5e69fb69d4eb8c3b2470e050b62d8c5f8f74fc40663583","first_seen":"2026-09-16T19:30:36.428168Z","last_seen":"2026-09-17T03:30:13.925344Z","times_seen":3,"resource_available":true,"data":null}},"time_used":988,"timings":{"blocked":-1,"dns":2,"connect":246,"send":0,"wait":246,"receive":0,"ssl":494},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"byit.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"byit.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.12.50/index.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://byit.support/","date":"2026-09-17T03:29:28.935Z","timestamp":1789615768935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vant/2.12.50/index.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://byit.support/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:29:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 17 Sep 2022 06:08:01 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WbqTt5JWbqtz87KrrYfi3bqnnWevNmIc9yPcTT%2BmosOq374uAbH0NF8HnkfBCFdMzisrcsL9IJHhdX7UqpDwnZQ%2B7sfLoX8MRXeiG9ula4zSKwL%2BaGtAoafEnT9zf%2Bg1S%2BQg5RSh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c506dbdda456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143622,"size_decoded":39111,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9a547188fa485f8ca9b2cc7d6d2524ef","sha1":"7893335159a1f637eb24cd05aaba96ac156c7f65","sha256":"897e513fc70a4e1759ceb06ed3c9348d036b36b724dc60d815f9f3124de6f433","sha512":"23653fb8a5c2f4cbc15cb35f215f166150516d84b8bcc143aff2d9c73056ce8e33689ef0578010cad93ea2c2e04423d3cc9ee1f5535a6bcb1e2302e5d47da263","ssdeep":"1536:KUyCltWrqoK3U0iNEBVcZH5NHMja4drYaAfP1rz1jVLSV:KTeVc5HMjajXfNf/SV","tlshash":"e3e3c52756c0236cb31bcd219bc096c5e224c123f5121bfaf1517a2dcfdbb9616a2b5b","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-10-11T06:21:06.559484Z","times_seen":2278,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}