{"report_id":"335f5cb7-8d43-4263-a694-b32bcd6315f6","version":6,"status":"done","tags":[],"date":"2026-02-03T08:55:02Z","url":{"schema":"https","addr":"usdt.bictu.vip/","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":0,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"usdt.bictu.vip/","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"title":"Mining","dom":{"size":16083,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14618)","md5":"49ed7717be311d1a6c00dc0737e42447","sha1":"1c3373df00afe94ae8b72e059cea7a7a4235e415","sha256":"879e9c25ba55ac5b4ccd7ade83168f2133d8ce293480f79d1daed9a74722b5f4","sha512":"455e5c5a3b8b66e7af06e062205bde1765a6792bb2a25c177e4d18f7dd040e67a8921754b169af00ee7393d9f3a538f7b3f39ce207942f09dd0a4d7abf399553","ssdeep":"96:noK+nf3HgJkV+Ku1/XL/6pnTD63tn7SEAx9VgR85RSTxt+GyycAAUo8M6an4Nofl:o7nPskSXDfoHgRtV49l4pVi","tlshash":"d57294709242013f962bced4b4b0db3db496d38ede57948ee2bd42e66bc5cc4dc96218","dom_hash":"domhashc609ce295dd16c284b827beaf10d3dca","first_seen":"2026-02-03T08:55:06.829419Z","last_seen":"2026-02-03T08:55:06.829419Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdt.bictu.vip/","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":0,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T08:55:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"duapi.bictu.vip","ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-03T08:52:24.916214Z","last_seen":"2026-02-03T08:52:24.916214Z","alert_count":0,"request_count":23,"received_data":231374,"sent_data":10483,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"usdt.bictu.vip","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-03T08:52:24.916662Z","last_seen":"2026-02-03T08:52:24.916662Z","alert_count":0,"request_count":21,"received_data":10412636,"sent_data":9218,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.okx.com","ip":{"addr":"172.64.144.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-07-03","domain_rank":29351,"first_seen":"2019-04-12T18:26:11Z","last_seen":"2026-01-31T14:53:38.522947Z","alert_count":0,"request_count":1,"received_data":1312,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdt.bictu.vip/assets/index-BY8-VjF5.js","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"765d89ec1fe7bba73c510224b480fef4","sha1":"ed21a32a755cfa5acc3614dd2820b66a526312ef","sha256":"bf45df9c0d04c539cc0b05ba8ae2a8715a7378a4a08ec7bff293274bbf588a6c","sha512":"a4d35e04b75ca6f3e50690bc7b2434a71dd7cacaec1503f3f2131afacc27b2b3fd25106261c6552fcaae4b15faf117fa277871244ed23942a67f8bdaabdd3f9e","ssdeep":"12288:0okV4ijac4lrx3NfWZ6GCSnQuxqH+E1t+l+pvVOW9kWXdohi5eb1j+VsLS5ogLpC:0okV4ijac4lrx3NfWZ6GCSnQuxqH+E1k","tlshash":"78e49152e3d4e6ec174b5fab771ea8f8f45a089da54409dbd1d4fc50b8b9202f2e8630","size":673500,"data":"","first_seen":"2026-02-03T08:52:29.97053Z","last_seen":"2026-02-11T04:19:43.392669Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/assets/vendor-modules-ooA4ScDb.js","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a621b4d538e2a03ad4f1c2f5e06c4fd5","sha1":"08fa7101189bdbcc0b513ef8f8c333c322fc5434","sha256":"b831047bc9076a003489d633ac18e3fc6c11d7b8f6af6f98146314468450e48d","sha512":"7178849fcab05a1a4f7eb81973b8debfe2ba04b4b229bce2622db0877a5d65c7b0e0fd80a35e615ba9752a9c1824f4d8b2d87366e8c00a7b77d681c0d49712cc","ssdeep":"49152:svugAY6ba0qa72fGfQ88L+d0KkFzbi4BqVR39ngEQco3/1SIIBuYPOoN38SNHuHN:/CFfjBq41VGuYPOoN3RAqgY+Z1j","tlshash":"ef265b4df760bc32029365da887a3155b3343f2e7514c0e87d9ca4de1b96adad0b2b39","size":4790036,"data":"","first_seen":"2025-12-28T06:38:48.743335Z","last_seen":"2026-02-11T07:08:47.699174Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"duapi.bictu.vip/api/pages/home?lang=en","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/pages/home?lang=en HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.bictu.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"c01-Ct/V3mzaO9E6NWn3xh30k/POUmI\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3073,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"30050c435f782d8f940d9a4db83cdfe8","sha1":"0adfd5de6cda3bd13a3569f7c61df493f3ce5262","sha256":"0e5385ba83c4970e321ec65df798b8b3c2643623ae671e2a6cd4d55915160218","sha512":"d710038ea5b1b2f260a0e368c6db86c1396b09d2e9a73bb8d9aa48fb66ba62b5aa619cec924ed30d3fbe2a23f6769b40c90858fd86ac8d4c4ad06f931ae52ee0","ssdeep":"","tlshash":"ac51dd7f0bb5d0ae8aa156c2c8eb7a95d04a7062c9d019e4e7de4f8cc4547b1de0f950","first_seen":"2026-02-03T08:52:29.961842Z","last_seen":"2026-02-11T07:08:47.694263Z","times_seen":15,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":345,"dns":1,"connect":171,"send":0,"wait":226,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/pool.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /pool.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T00:51:56.928895Z","times_seen":17878665,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/static/1769517077811-962.jpg","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:44.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/static/1769517077811-962.jpg HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43740\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\nlast-modified: Tue, 27 Jan 2026 14:07:08 GMT\r\netag: W/\"aadc-19bffc79325\"\r\nexpires: Tue, 03 Feb 2026 08:55:44 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":43740,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=408, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1122], progressive, precision 8, 750x273, components 3","md5":"8cba27e84cbe58c0b642e7656df2ccd4","sha1":"fdc96ea68dc148cdcee4c7f3f3ad158182009f51","sha256":"e8fac3d4a61f424436fed0dc9c5537ce760b147036995933e67b5383798db95e","sha512":"a1646ea4533b49fe8798e4eb875a22485049353f2c11f3405ff777820ee512e372c8553684290a46625ce349a0c45906846f00f235baa45f2955fb385df0ed12","ssdeep":"768:otPeyTSzphieABwOnivpaQ8QwWZ7r9Rp6uIfB0fDOxoQ:o+zphjABwcwYQ8QwWRvp6u8eOxoQ","tlshash":"5c13e0147f5a0f21edd2267204f1d71b72a58c8ea9f39b5ff58d1a813b726d0ac38151","first_seen":"2025-09-07T05:35:18.516055Z","last_seen":"2026-02-03T08:55:06.831588Z","times_seen":4,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/customer-auth/profile","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:47.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/customer-auth/profile HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.bictu.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/serve.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /serve.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T00:51:56.928895Z","times_seen":17878665,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/activities/activities","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:51.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/activities/activities HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.bictu.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T08:54:39.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:39 GMT\r\ncontent-type: text/html\r\ncontent-length: 666\r\nlast-modified: Tue, 03 Feb 2026 06:07:18 GMT\r\netag: \"69819096-29a\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":666,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"2eb50a05770b74c95dc372a1bae74096","sha1":"d08c825db0d8a1d3ebc384d9fc1fa83b5f11f28c","sha256":"beb018b84724e4d150e3b80118f6dc90cdf5a26e34bd24b93a8c65f3318c1c3e","sha512":"96968a87d9aabd08e3c7eea4f3bb295e40d355fc6f9ad0f7a779a84541352545aec2cb3cb64a3a9cd4270910cc9fef645394ba6916e663e2b39bd58badec6e4b","ssdeep":"","tlshash":"e601490564e18e0643201754fec1f459aec3b74b8649ae54b1aea0bd1f85b938edf8b8","first_seen":"2026-02-03T08:52:29.96383Z","last_seen":"2026-02-11T04:19:43.382455Z","times_seen":7,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":331,"dns":0,"connect":164,"send":0,"wait":217,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/assets/vendor-modules-BI7Vve6c.css","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:39.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /assets/vendor-modules-BI7Vve6c.css HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Feb 2026 13:58:54 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6981ff1e-c5f9\"\r\nexpires: Tue, 03 Feb 2026 20:54:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50681,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (50550)","md5":"948d20ec45da4003196b451dc0f7e2d6","sha1":"64aed070e88535d8c4f7f6af10c2db9a5b594ef6","sha256":"5e5c2aea9a1d1b69ebc80cd93ddb913101b1679a623a0e43649168e31f5b7d88","sha512":"41a749b93e32110d05e8d9383ca28dc80ac5678f195377d033096eb6d05f2b5b31324105285c5297d3605df5d6ba3b6b7d00f16fd5ab5adcc10861d6fed1902b","ssdeep":"384:mnRRvYvrYKi8UlNl9aybPdWDN9Lr5Gp56ed283ZcW23qWF7O36YgzQ4lYf1oKPFW:MgqWDPLr5Gp56UJoYgzQISoKPFEwi","tlshash":"b333db49bd1e3e3e7123a33980c094ec134bb75fe9b94397f891664d6d8d384226da39","first_seen":"2025-12-28T06:38:48.726641Z","last_seen":"2026-02-11T07:08:47.690728Z","times_seen":16,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/static/1768017057400-822.png","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:44.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/static/1768017057400-822.png HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 12325\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\nlast-modified: Tue, 27 Jan 2026 14:07:08 GMT\r\netag: W/\"3025-19bffc79306\"\r\nexpires: Tue, 03 Feb 2026 08:55:44 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 82, 8-bit/color RGBA, non-interlaced","md5":"2ae7d923e3f4ea6168911f93d7c31749","sha1":"1a4fb39348b3f35158bf1996c11ca048c5c83b1f","sha256":"e5e960dd8780ab588aa328037ff5ca3708d0a70bd36f594c9515b65ada4cb8cd","sha512":"039fb9edae47c340c852268a45b3540aad5ce1d3821bff4e45bf11bc76f792dfaf13f606d4aebb411b8da9ccb029bbe7ddcea5de477916a4e695c40084f7b702","ssdeep":"384:450wrg7c0cQHI90L4vGY3WImNWCbwGadYTzd:2Qc0cQ5LdR8MyAR","tlshash":"a642c07e653816ea070fc7a0e0aff63382f7eb6480755da91216810f4b56d709d25e92","first_seen":"2025-07-29T01:06:09.81159Z","last_seen":"2026-02-03T08:55:06.833598Z","times_seen":5,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/assets/index-Sv8bNMT3.css","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:39.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /assets/index-Sv8bNMT3.css HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Feb 2026 13:58:54 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6981ff1e-71f1\"\r\nexpires: Tue, 03 Feb 2026 20:54:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29169,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29168)","md5":"852a9ad2984c35508867051b95027d02","sha1":"15c880baf66c49008d1a17900ed267611ff94c5c","sha256":"3eb1931b64a60e25f6587e381297dc3fb35f9747700bc4f139592dfd74f84a72","sha512":"03aa09465e8a6d52c925cef10f83e41a5448fcd179f1da2d2b209ff8a62be45ea143d9201b0fcd5bb297d3d01e0c5eda42d1491543d591b6fff8c9f4102a0a6b","ssdeep":"192:O9JyW9JyyxwO7dGmJRoDsfxsflsfzsfw6L+QHY9mTnonccLKjHiHxu66LJ1TX/Hg:kweGmJRoQQ4G+c5r6STX/Hxrw5","tlshash":"31d2302dab55003b7c6740f5d6e8aa5df21bb0c1df3a6aeabd82112097d23f71c97604","first_seen":"2025-12-28T06:38:48.737428Z","last_seen":"2026-02-11T07:08:47.687838Z","times_seen":16,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/favicon.ico","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:42.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:42 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"69818ef7-e3b8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58296,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-08-14T00:29:06.29047Z","times_seen":13916,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/user.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /user.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T00:51:56.928895Z","times_seen":17878665,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/invite.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /invite.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1272\r\nlast-modified: Tue, 03 Feb 2026 06:07:18 GMT\r\nvary: Accept-Encoding\r\netag: \"69819096-4f8\"\r\nexpires: Thu, 05 Mar 2026 08:54:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 48, 8-bit/color RGBA, non-interlaced","md5":"0da0307dfdc46d5d688aad8ce344ea7d","sha1":"64d1a483d46efc5c28b021a34e44bba820b706c4","sha256":"1a03b8f904b902035af9dddebf8789d4c697be1a008c9aad4c17c583ee907290","sha512":"4af243097d99b3cf323b1a251de17c5339ac225fa13b5a9efdbe819ad4cfb0df669a519a35ec30762cfa7de576d00409acdcd8c2a7097c0ab5f1decd460e58e1","ssdeep":"","tlshash":"92211a13139ec8ec4e818d0ae0701002484edb954e0aacdd0b330950d04dd45880ef87","first_seen":"2025-08-21T21:12:17.973931Z","last_seen":"2026-02-11T07:08:47.685757Z","times_seen":19,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/settings/statistics","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/settings/statistics HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.bictu.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 201\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"c9-QlCQPux9fGajCBaSl38UNUUhbco\"\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":201,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3dd2552ffbf2bece5a422729604e0763","sha1":"4250903eec7d7c66a3081692977f143545216dca","sha256":"6a36b385d41985474a47a410262f60698083c8dabb4c29e04f2858462853a2d0","sha512":"3b676cb673f4cfe292346e62e19c6a941fc0a563e0e0c8c6f37876921f39a8d6b4a7ecb5a2fc1b8e9b34510e0fcb9d524fb6e804f09f2ca3cdaa5e97fef5d6c1","ssdeep":"","tlshash":"5ed022031ea204e9da142cca0a836b435fa8223380011a1039edc6e4e23d00c76b282b","first_seen":"2026-02-03T08:55:06.835542Z","last_seen":"2026-02-03T08:55:06.835542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":904,"timings":{"blocked":337,"dns":0,"connect":167,"send":0,"wait":226,"receive":0,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/activities/activities","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/activities/activities HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.bictu.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":971,"timings":{"blocked":372,"dns":0,"connect":184,"send":0,"wait":222,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/activities/activities","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:45.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/activities/activities HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.bictu.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/serve.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /serve.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1218\r\nlast-modified: Tue, 03 Feb 2026 06:07:18 GMT\r\nvary: Accept-Encoding\r\netag: \"69819096-4c2\"\r\nexpires: Thu, 05 Mar 2026 08:54:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"a6a84267b41d28be4da0212eacd3ad71","sha1":"72e773efd61b38e8377df386dc9a0c96ab608739","sha256":"2721404d226fe6b9692a9588c0f4758c058d7cdff0f30122b73d8071e796fc69","sha512":"5695da79f179bdb54e603fbf4334c998c6cc4915d43788b3e2ecffc3c1304ecb0b5b521f2306979e2140ac8b2d03f20fe5fa4398c5c0f11027c5e033a5a80c7e","ssdeep":"","tlshash":"aa21daf7ca4f29a6c84a52688e223578d256238ec1f11b5617a1bcfd40535db5848705","first_seen":"2025-08-21T21:12:17.998964Z","last_seen":"2026-02-11T07:08:47.692028Z","times_seen":19,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/static/1769518570166-638.jpg","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:44.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/static/1769518570166-638.jpg HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43740\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\nlast-modified: Tue, 27 Jan 2026 14:07:08 GMT\r\netag: W/\"aadc-19bffc79326\"\r\nexpires: Tue, 03 Feb 2026 08:55:44 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":43740,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=408, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1122], progressive, precision 8, 750x273, components 3","md5":"8cba27e84cbe58c0b642e7656df2ccd4","sha1":"fdc96ea68dc148cdcee4c7f3f3ad158182009f51","sha256":"e8fac3d4a61f424436fed0dc9c5537ce760b147036995933e67b5383798db95e","sha512":"a1646ea4533b49fe8798e4eb875a22485049353f2c11f3405ff777820ee512e372c8553684290a46625ce349a0c45906846f00f235baa45f2955fb385df0ed12","ssdeep":"768:otPeyTSzphieABwOnivpaQ8QwWZ7r9Rp6uIfB0fDOxoQ:o+zphjABwcwYQ8QwWRvp6u8eOxoQ","tlshash":"5c13e0147f5a0f21edd2267204f1d71b72a58c8ea9f39b5ff58d1a813b726d0ac38151","first_seen":"2025-09-07T05:35:18.516055Z","last_seen":"2026-02-03T08:55:06.831588Z","times_seen":4,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/static/1768016731776-27.png","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:44.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/static/1768016731776-27.png HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 2145\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\nlast-modified: Tue, 27 Jan 2026 14:07:08 GMT\r\netag: W/\"861-19bffc79304\"\r\nexpires: Tue, 03 Feb 2026 08:55:44 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2145,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 144, 8-bit colormap, non-interlaced","md5":"f7ff2fcfe714aa8478980b55b88650ba","sha1":"e196d933f45051a362cdeb010d6c779e95530f4b","sha256":"7f30052371d184adae8d30047b12b494cfb8fe6a4d2489ce01dfd3ec3477f9e3","sha512":"cbf0e58655c90fd9c89c274e4821c6c3fa14ce27d58e9fd1532733dfdbdd1d8ea7b9e7b9f19edf23034b23af77c11473f6b3e78a763312714841a892e5c578c7","ssdeep":"","tlshash":"1c411a4c7c2bb31ad4a6adb5564093bc5ea7014c925c9bd804b5f04b1c4b405eee5332","first_seen":"2025-08-06T15:30:47.155858Z","last_seen":"2026-04-23T16:02:40.117897Z","times_seen":10,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/customer-auth/profile","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:51.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/customer-auth/profile HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.bictu.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/flags/1f1fa-1f1f8.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /flags/1f1fa-1f1f8.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 350\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\netag: \"6931eb10-15e\"\r\nexpires: Thu, 05 Mar 2026 08:54:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"8fc9e2f18b56022325cb61f37813b58f","sha1":"35366ecf058d3dd824aab54654796e4167ba8e92","sha256":"f21f8537b9b087805efd4334b8f0904aa547ba84c2c6a647d002fef16f42aa26","sha512":"96bac1f6c0899dbd6147cc9ba8ef66905a464abbd79aa6f0c69f183739f47bc29378b0defd7463a3eb57e6c2adde7e2824b760d54e51ade516fabfcb0506016e","ssdeep":"","tlshash":"1fe020819dd7ee3cc07596ab4d3c1180daa3544af435596330058b5133553c463895cd","first_seen":"2023-07-13T01:52:17Z","last_seen":"2026-08-13T08:53:27.37495Z","times_seen":178,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/customer-auth/profile","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/customer-auth/profile HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.bictu.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":338,"dns":0,"connect":165,"send":0,"wait":224,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/static/1768016861216-383.png","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:44.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/static/1768016861216-383.png HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 8789\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\nlast-modified: Tue, 27 Jan 2026 14:07:08 GMT\r\netag: W/\"2255-19bffc79304\"\r\nexpires: Tue, 03 Feb 2026 08:55:44 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8789,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 82 x 83, 8-bit/color RGBA, non-interlaced","md5":"271946672df8486941c41b596cbb98bb","sha1":"00f70d88a1eafcf550421b78ba5b98e8cfb4cdec","sha256":"8cf8ddec5d55874abf9805370caac9c30095508617d6cf39be1f25229b6328f1","sha512":"8c086a51c55d92fab035ad54abdccdb5bd33d6708b84652daa0adfbc07d4f9dc85e8055a7ca45fb492ee9185b7400c2961a2dc288bfb134f78ecfe90237b9186","ssdeep":"192:sSHIIHUCD4waWk+k5FVMmUG370QJCRS7qxtwZbwKuYYfhvBxxJG:r50wQd5FVV0RS7mthJvJG","tlshash":"b902cf899b40589fa573ca05a463ca43489eb2d412973fcc44ebc22ec91bc517833bad","first_seen":"2025-07-29T01:06:09.85432Z","last_seen":"2026-02-03T08:55:06.838143Z","times_seen":5,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/static/1768016878896-112.png","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:44.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/static/1768016878896-112.png HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 14105\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\nlast-modified: Tue, 27 Jan 2026 14:07:08 GMT\r\netag: W/\"3719-19bffc79305\"\r\nexpires: Tue, 03 Feb 2026 08:55:44 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":14105,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced","md5":"e590bb0375f5b1ff9aabc0a440304a87","sha1":"7e768dc6080230e3a8a81000dcce6554905fa180","sha256":"c9607d8d528183aff31d76d1545a89e59bbc47cbc5157c4831bc83e93e2980a0","sha512":"9bf7f64cc2363a3dfcdf117c309d119f1163503452bc21991dfb41fbb1505d741108fce710225e80db31742d572b72753be85e9aba133f883daf0337e50373d5","ssdeep":"384:n50w2ZiaZ/B4nP2FDTD8NAqpt7cVhALM0DdmuW:52ieynPAitQILNDBW","tlshash":"aa52c04e8c926713608b2d5277e4c96e0e07d6d0a309bc89e4df86a41f27d6c6e91b39","first_seen":"2025-07-29T01:06:09.840412Z","last_seen":"2026-02-03T08:55:06.838666Z","times_seen":5,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/assets/index-BY8-VjF5.js","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:39.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /assets/index-BY8-VjF5.js HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 13:58:54 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6981ff1e-a46dc\"\r\nexpires: Tue, 03 Feb 2026 20:54:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":673500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61566), with no line terminators","md5":"76af24e3a042e3253bc990928b969690","sha1":"c0118f90b29add65e23c92dbd764f0e9a32a393a","sha256":"bdc14a467284b02e6dd23a5d947984b1d3d2ff6d1d0655e189b75945658b2129","sha512":"89f1ee246cc7471eba0af4a42596d16cc546289084a5b267fc690a553e11a8a8ff5d834ae59115b46f933e8bcbace899c229f458d335f18af6b31030e992d59f","ssdeep":"12288:0okV4ijac4lrx3NfWZ6GCSnQuxqH+E1t+l+pvVOW9kWXdohi5eb1j+VsLS5ogLpP:0okV4ijac4lrx3NfWZ6GCSnQuxqH+E11","tlshash":"9ce4a342e3d4e6ec134b5fa7771ea8f8f85a089da54809dbd1d4fc54b8b9202f2d9630","first_seen":"2026-02-03T08:55:06.839207Z","last_seen":"2026-02-03T08:55:06.839207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/user.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /user.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 949\r\nlast-modified: Tue, 03 Feb 2026 06:07:18 GMT\r\netag: \"69819096-3b5\"\r\nexpires: Thu, 05 Mar 2026 08:54:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 49, 8-bit/color RGBA, non-interlaced","md5":"b08aaa6b69cf360ec7ab29460551aba1","sha1":"230cd06e3299fbadeac285a26313a89304043147","sha256":"92ea4f619982dfecf979f76c7bf675894b6bd7bcee221104f723d66a2227a099","sha512":"ae4160032ca26043e6b2caa6a0d86a0b202a0a271c5aaa874004c78cb286b2e804fc7afc1bae8f80d20ccee021b727db91f5591b12a13d007ff668945918d895","ssdeep":"","tlshash":"361188fbd2f7d41cf11312f54a890cdc2d2260b645e1151895713714ef36f1a0e181ab","first_seen":"2025-08-21T21:12:17.991486Z","last_seen":"2026-02-11T07:08:47.689769Z","times_seen":19,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/static/1768016933188-738.png","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:44.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/static/1768016933188-738.png HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 12649\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\nlast-modified: Tue, 27 Jan 2026 14:07:08 GMT\r\netag: W/\"3169-19bffc79305\"\r\nexpires: Tue, 03 Feb 2026 08:55:44 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"821618c33681fe36185bb20508022fab","sha1":"0d46c2b3ca0e38e7116d13a2c0013be7505ad7e1","sha256":"c0559a4e145628602733743ff287b2ada7c4f53bc471bd5aeaf5a3a6ea744e24","sha512":"903bd34157afed1ce26452a60dce90885b369846fba71257e525850761fa9b0f9a66edb2e10865fbb998b1ef072910a07fffb35d0035055847050da20c84a2d2","ssdeep":"192:bSHIIHUCD4waXQWKXLc6JEUPFe7DOqNBKaXsM5ZrIw2JW6MuYJDGuSpGXUcc0dni:O50wuzaEKc3FXKTMLrI3MuI3BcVmSZ","tlshash":"cb42e108f89d8a5a16af0ada732b4e130edd921cc9c5bd08dd7dd2a0d580b389c3c76c","first_seen":"2025-07-29T01:06:09.842556Z","last_seen":"2026-02-03T08:55:06.840473Z","times_seen":5,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/assets/vendor-modules-ooA4ScDb.js","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /assets/vendor-modules-ooA4ScDb.js HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdt.bictu.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 13:58:54 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6981ff1e-491714\"\r\nexpires: Tue, 03 Feb 2026 20:54:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4790036,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ba1497cedf66eeba1d545dec2bcf75d6","sha1":"cfe93b693fffa1daf38c18eb227e223b0308a8e7","sha256":"795978023c24b042a57043c712277225f5df50741d6468da93a2c3752023b170","sha512":"aef2ec2fafc9d3a24c09e83617dab241c45cd6de2891ef9e88bbaa7601f6fb030f9818e1664b3bb423a19c22cf65c7e1d7088a01269fbc446f7ecdc18535ee15","ssdeep":"12288:2aGzsO3SxgA3I6ba0qEesTOMoEUP3GZbKJUdWc1YV+TXapVMj8s+Z:svugAY6ba0qaOM2fGfQ88B","tlshash":"7a254b997651f06147e391ea50bf0001f3386e1d740d8064b6acedee3bb9989a1b7f39","first_seen":"2025-12-28T06:38:48.717459Z","last_seen":"2026-02-11T07:08:47.69139Z","times_seen":16,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/flags/1f1fa-1f1f8.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /flags/1f1fa-1f1f8.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T00:51:56.928895Z","times_seen":17878665,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/nors-BR_U97rM.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /nors-BR_U97rM.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T00:51:56.928895Z","times_seen":17878665,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/static/1769517087558-510.jpg","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:44.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/static/1769517087558-510.jpg HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49043\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\nlast-modified: Tue, 27 Jan 2026 14:07:08 GMT\r\netag: W/\"bf93-19bffc79326\"\r\nexpires: Tue, 03 Feb 2026 08:55:44 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":49043,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=408, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1122], progressive, precision 8, 750x273, components 3","md5":"4dc97bd9595a02b302690e9148490dd4","sha1":"b62e5404e8a48ba5b979c1f8a0778f95b7910b49","sha256":"d4d8caf51dfdd5147f49955c43d4490bc1dfb009b24cfe34e4e182cac73e1a18","sha512":"68659f967b4094a25116cc35e777bec3863da77a722b9e8a122b2cf2e06f97c7531880b853a6b936cddece2526d4a910806edb8b8c0e5039e1701f2f74616860","ssdeep":"768:8Yy0AJWny5Pe2Yy0AJWnyxzPGfL7PlPSCOIXacuO60xlJjMFkckcaNEe45W1wX/u:8IAJWnyLIAJWnyxzPGfL7PFSJK9x3jRP","tlshash":"8523d0a0fb5cef13f9e29a7544d1e3839262b674c3132b4134af95883ba06d1d84b18a","first_seen":"2025-09-07T05:35:18.507909Z","last_seen":"2026-02-03T08:55:06.842034Z","times_seen":4,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/activities/activities","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:47.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/activities/activities HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.bictu.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/home1.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /home1.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T00:51:56.928895Z","times_seen":17878665,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/customer-auth/profile","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:44.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/customer-auth/profile HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.bictu.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/invite.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /invite.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T00:51:56.928895Z","times_seen":17878665,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/nors-BR_U97rM.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /nors-BR_U97rM.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 9288\r\nlast-modified: Tue, 03 Feb 2026 06:07:18 GMT\r\nvary: Accept-Encoding\r\netag: \"69819096-2448\"\r\nexpires: Thu, 05 Mar 2026 08:54:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 204, 8-bit/color RGBA, non-interlaced","md5":"560b36a165bae4d7c70907ac1ad44ec4","sha1":"f27e2ca7c9a41cde369c50ce42c445629ee0cdee","sha256":"9b7b4a3a9d09160dded5e6b0f7e6d7ca52f7bf97321ebdaff205a0910d3ece61","sha512":"d6db05567b6dd5c69754179f1d6738c640c60a885fdca6522e3d850171da7b6a90d3c547a0d7a6ece7d0abc2bf2b9675d8c18f1f0cbb5a78ce1f896a7329bcc3","ssdeep":"192:Qys+/RKG34zIPCJTiQ4riyj0TUohEao5uN7iO8FthD8+JPMHObT4HMN/FZ:Qys+/RKG3/PQuQ4pjMyuN2O8Ff4+h4OT","tlshash":"5c12c07387396aa4b1d79e196d4f5413353b80bcc078bf419bec1b068a863a3434b433","first_seen":"2025-08-21T21:12:17.990433Z","last_seen":"2026-02-11T07:08:47.693661Z","times_seen":19,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/static/1768016740333-448.png","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:44.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/static/1768016740333-448.png HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 3647\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\nlast-modified: Tue, 27 Jan 2026 14:07:08 GMT\r\netag: W/\"e3f-19bffc79304\"\r\nexpires: Tue, 03 Feb 2026 08:55:44 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3647,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 144, 8-bit colormap, non-interlaced","md5":"2c904bb841f50b7942eb4f9c58bbbef7","sha1":"8c1f4f5faade807c37ae778fdc67556b96ccc649","sha256":"b2bf76df00073e0484d8e861ddef185dfc60dd42702cfba3cec6990f25f47142","sha512":"fd48e35fa07005b7515fd6a68359d1cad4ae26084c8d9ded96317b69fbd2eeda0de8b8e124fffbb8fdf3709f4c1cf2abdc4ea5d756526f0ed306e926729056d3","ssdeep":"","tlshash":"aa713a522472b90ed53c2fb479b244a7c661f3b0250895b73b1a68fd78c2a2a4d7931b","first_seen":"2025-08-06T14:47:40.581868Z","last_seen":"2026-04-23T16:02:40.099645Z","times_seen":13,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"duapi.bictu.vip/socket.io/?EIO=4\u0026transport=websocket","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://usdt.bictu.vip\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Pk+//9KPOP6GcLyTlSkMzg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: openresty\r\nDate: Tue, 03 Feb 2026 08:54:44 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: rsgxf8prdHOOg7JFctBR1E83RYQ=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T00:51:56.928895Z","times_seen":17878665,"resource_available":true,"data":null}},"time_used":1257,"timings":{"blocked":0,"dns":340,"connect":509,"send":0,"wait":232,"receive":0,"ssl":520},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.okx.com/api/v5/market/ticker?instId=ETH-USDT","fqdn":"www.okx.com","domain":"okx.com","tld":"com"},"ip":{"addr":"172.64.144.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 22:11:08 GMT","end":"Tue, 17 Mar 2026 23:11:05 GMT"},"fingerprint":{"sha1":"CC:AB:D8:A7:59:C4:83:2F:DF:88:85:4E:50:6D:A6:91:9D:20:4B:20","sha256":"C3:94:D2:F3:BD:F7:A5:14:7A:9D:97:CA:5A:24:96:2D:A8:0A:FB:42:7B:0A:20:C3:AE:FF:9F:A5:21:91:CA:9F"}}},"request":{"raw":"GET /api/v5/market/ticker?instId=ETH-USDT HTTP/1.1\r\nHost: www.okx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.bictu.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 08:54:44 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin\r\nb-locale: en_US\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: SAMEORIGIN, DENY\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: https://usdt.bictu.vip\r\nx-brokerid: 0\r\ncontent-encoding: gzip\r\nset-cookie: __cf_bm=1emGki.tWer5Gk4fa6gc7s3TKtbK7AFW4GlyXqTXY58-1770108884.0249696-1.0.1.1-4eMrHiDIouNmv.z3.rcz5SyIdkqYGwNRXw9vaS2QVbJ4AAoz17xHT4RF7l0FqJB3hH1p0XlLsdSqIogVCD_bT6o.7kiMpEY5PREEqQ8z61ro9nnwLnBlef6_sdAtL6tT; HttpOnly; Secure; Path=/; Domain=okx.com; Expires=Tue, 03 Feb 2026 09:24:44 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9c80b48d2e650883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":356,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6eb8f5e33d3766364c411bdb3b6c5826","sha1":"052d9efc529d81f220d106a8620a31c3e4887f72","sha256":"ab7940d525cd10e7845033a2fbff550009874a46bbc985ea7dddb2e32d3a190e","sha512":"31ff6e49c485b393a198347bfd0dcd88afbdb0e4a783e2c7a008dfca38054d1c12f91b580402b5b2d85a73a31ad0ad6b0705dbf70721af528e5b742c0a575456","ssdeep":"","tlshash":"66e0d81322dc09a5a4028ec455c5a1903c3e36c05b9ac981edda8ad2900a6ce91a9916","first_seen":"2026-02-03T08:55:06.843869Z","last_seen":"2026-02-03T08:55:06.843869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":28,"dns":1,"connect":1,"send":0,"wait":219,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/static/1768016720858-132.png","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:44.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/static/1768016720858-132.png HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 5980\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\nlast-modified: Tue, 27 Jan 2026 14:07:08 GMT\r\netag: W/\"175c-19bffc79303\"\r\nexpires: Tue, 03 Feb 2026 08:55:44 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5980,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 144, 8-bit colormap, non-interlaced","md5":"add7ffe9e0523a92f9f49e56d53bcb12","sha1":"502ab6725d723e0882c5f354f5f6884df0bd9968","sha256":"b35aa14ed2f40991f7ecf6b6eed942c3dae967ce948f249175687cf8e74aac54","sha512":"bcef80cfcddb4d425f021b24cd9021b6f8433154686210705747e6acb02dab036bf1df8eedd129c1f2e546bda71067e58d07c1b3ecfed2ff167e30c2c76a66b1","ssdeep":"96:w6/dVjwTQufa1eMAcJKoKMjny1Zauzq/FxKX/sL005+9laxzN8Vk7/Yqdi1w/5Tk:w6VifPKKoKh1AUqtxJw05+LyR9swBqZ","tlshash":"67c19dfbc3b94154c0f399b4c3d4423e1406a2d1ae3e3863410f49828de6c2632a44f5","first_seen":"2025-07-29T01:06:09.83188Z","last_seen":"2026-04-23T16:02:40.091135Z","times_seen":12,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/static/1768017040388-17.png","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:44.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/static/1768017040388-17.png HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 13201\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\nlast-modified: Tue, 27 Jan 2026 14:07:08 GMT\r\netag: W/\"3391-19bffc79305\"\r\nexpires: Tue, 03 Feb 2026 08:55:44 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13201,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 88, 8-bit/color RGBA, non-interlaced","md5":"616dce88768c5f0cf905cb81badfc5ff","sha1":"5402fcc22096ba2a00efd078f6a156610f4fba49","sha256":"f9873285b6df6240f110a809ff86422a8af59e58617417c4f3e95e4741cdfc17","sha512":"f5bc4143505e6fb47fc7136c546541e96b15d0015019632accf8074b5ac0c764ed499e4a3e1a5f86ce1867fe3aa78860f1f92c4ba0c971e8301fd5ed1e934227","ssdeep":"384:Q50wCZ25CiwdF1MzBEAUlKG0W+nCnpbDzK5lGt23C:eMziwbW3vdWpbnYlGtuC","tlshash":"4c52dfce46e8041f6d0f0e7623474e4e8dd79fc8eb7ea868c6c9a3994295c513dd3642","first_seen":"2025-07-29T01:06:09.871134Z","last_seen":"2026-02-03T08:55:06.845163Z","times_seen":5,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/assets/vendor-modules-ooA4ScDb.js","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:40.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /assets/vendor-modules-ooA4ScDb.js HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/assets/index-BY8-VjF5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 13:58:54 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6981ff1e-491714\"\r\nexpires: Tue, 03 Feb 2026 20:54:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4790036,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ba1497cedf66eeba1d545dec2bcf75d6","sha1":"cfe93b693fffa1daf38c18eb227e223b0308a8e7","sha256":"795978023c24b042a57043c712277225f5df50741d6468da93a2c3752023b170","sha512":"aef2ec2fafc9d3a24c09e83617dab241c45cd6de2891ef9e88bbaa7601f6fb030f9818e1664b3bb423a19c22cf65c7e1d7088a01269fbc446f7ecdc18535ee15","ssdeep":"12288:2aGzsO3SxgA3I6ba0qEesTOMoEUP3GZbKJUdWc1YV+TXapVMj8s+Z:svugAY6ba0qaOM2fGfQ88B","tlshash":"7a254b997651f06147e391ea50bf0001f3386e1d740d8064b6acedee3bb9989a1b7f39","first_seen":"2025-12-28T06:38:48.717459Z","last_seen":"2026-02-11T07:08:47.69139Z","times_seen":16,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/home1.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /home1.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1068\r\nlast-modified: Tue, 03 Feb 2026 06:07:18 GMT\r\nvary: Accept-Encoding\r\netag: \"69819096-42c\"\r\nexpires: Thu, 05 Mar 2026 08:54:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ab358df5a5fadd4687ddf8e07d4c51a7","sha1":"0f7960010deafda534489f081be86abd41d9a513","sha256":"bf35f0f4415163816c9593bc726be001fda65a63ab7b8a6b97d27c588d5bd9a6","sha512":"6882952208c4fe767e80630329c7edbb5876cec2bae050d9a4102a4878c370a47fe7ee0257952633e8d0ebdd886a3ad232774e13a1766bb76b50ecdca15931f0","ssdeep":"","tlshash":"4411d80dca9c806893c1455c90f11817fc79c4a8a550333d8dca8fe635ee1ee4ec40ab","first_seen":"2025-08-21T21:12:17.996097Z","last_seen":"2026-02-11T07:08:47.681096Z","times_seen":19,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.bictu.vip/pool.png","fqdn":"usdt.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:43.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /pool.png HTTP/1.1\r\nHost: usdt.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.bictu.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1194\r\nlast-modified: Tue, 03 Feb 2026 06:07:18 GMT\r\nvary: Accept-Encoding\r\netag: \"69819096-4aa\"\r\nexpires: Thu, 05 Mar 2026 08:54:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 48, 8-bit/color RGBA, non-interlaced","md5":"86177258b97ce77fef7c3006300c8af8","sha1":"e19da3a443ff9d37e606283f24fda13a258d4078","sha256":"97f2e2bd136eb9ca8aa1e60be272d60a815564f731b535cd5e7ec198e5dca6b6","sha512":"da55c58ef2551243370198a57b948d1ea20496698c81e9c56f317735f7611825c4a8a6fed8ed4a4bd7a75a31c1c92bf5bb6717d80d04ea12d1f3b6873ff83132","ssdeep":"","tlshash":"3621da638cd975346300fdf8192772de967333de4445a8560d0cecf9d9819d15da861f","first_seen":"2025-08-21T21:12:17.980703Z","last_seen":"2026-02-11T07:08:47.684868Z","times_seen":19,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/static/1768016963943-774.png","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"193.218.201.183","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.bictu.vip/","date":"2026-02-03T08:54:44.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 04:54:35 GMT","end":"Mon, 04 May 2026 04:54:34 GMT"},"fingerprint":{"sha1":"C9:F4:C6:23:B7:46:45:BC:05:36:7B:94:B1:33:93:69:4B:DC:A7:D5","sha256":"BA:CE:66:2F:98:82:A1:E9:1C:2F:D6:52:17:B9:E1:F8:D8:D2:6F:A8:ED:A9:45:5C:0D:30:D0:99:A5:7A:8B:68"}}},"request":{"raw":"GET /api/static/1768016963943-774.png HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 08:54:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 10340\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=60\r\nlast-modified: Tue, 27 Jan 2026 14:07:08 GMT\r\netag: W/\"2864-19bffc79305\"\r\nexpires: Tue, 03 Feb 2026 08:55:44 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 86, 8-bit/color RGBA, non-interlaced","md5":"d67c02857b1f3b95ba85b4c121b1500c","sha1":"7713583d8e7b379add2cd73c98364a9ddad05254","sha256":"7815b1c5237ad95b8ce50a9e5260ae992ef842cc4ab2421ef88c1960db2d0ae5","sha512":"189a3479f29c068bc79561cdadf932a73f6eb37c6637a1aa21d3f871f9fe87ed68a79b9e84dc62e77b7f466b1addffd4fb852fe8c329d7d9c0914664be1fe2b7","ssdeep":"192:FSHIIHUCD4walj3leCBLdkL8mFnUCV6yUpj2oS9O9iJ/C:k50wU3oCBOVFV6pYoS4YJ/C","tlshash":"d922a0ce58b3298d00cf8d9935b7bd2b4153d0fe06d86c6817abf1db991485236b2a13","first_seen":"2025-07-29T01:06:09.833793Z","last_seen":"2026-02-03T08:55:06.846717Z","times_seen":5,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}