{"report_id":"455d5daf-b6cb-4513-b637-0eee16bedbdd","version":0,"status":"done","tags":[],"date":"2026-08-18T12:25:19Z","url":{"schema":"https","addr":"bitusd-web.com/","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":0,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"bitusd-web.com/app/","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"title":"BITUSD","dom":{"size":752,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (530)","md5":"b0ca5e4732f0e30e0fc0dd2576adc5f1","sha1":"2f08e01ac60accc2e3284ccccf8b201b18459834","sha256":"8890f93dadff26fb104a12d93810dccc35636aca564f1e147540deff2db168ba","sha512":"72a2a8351df73d015b3706b17bd139d665caf15572785d4041f6f52becc50c78c1cd18838c96dc1b4ddf6c8e02345dabfe299f160b9a5fdc20e151898b548e8f","ssdeep":"","tlshash":"08019c4ade08d2ad1aa05ea9a473f00dc186b85fbd22ec58b4e468694e99bcc0853d10","dom_hash":"domhashf426e7970dae7835da724db343d3a8ee","first_seen":"2026-08-18T12:10:10.779956Z","last_seen":"2026-08-18T12:25:22.142281Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bitusd-web.com/","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":0,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T12:25:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bitusd-web.com","ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"domain_registered":"2025-08-20","domain_rank":0,"first_seen":"2026-06-05T03:28:26.321888Z","last_seen":"2026-08-18T12:10:00.637167Z","alert_count":15,"request_count":15,"received_data":4494349,"sent_data":12942,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Alibaba Cloud CDN","description":"Alibaba Cloud CDN is a global network of servers designed to deliver high-performance, low-latency content to users around the world. It is a cloud-based service provided by Alibaba Cloud, a subsidiary of the Alibaba Group, that enables businesses to accelerate the delivery of their web content, including images, videos, and static files, to end-users.","website":"https://www.alibabacloud.com/product/content-delivery-network","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"at.alicdn.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2026-08-14T13:17:05.638945Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":987,"comment":"","tags":null,"fingerprints":null},{"fqdn":"plugin-code.salesmartly.com","ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":530835,"first_seen":"2024-12-12T08:03:04.74606Z","last_seen":"2026-08-13T17:26:51.411444Z","alert_count":0,"request_count":1,"received_data":1820,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitusd-web.com/app/static/tradeview/charting_library/charting_library.min.js","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8cd63cddf0ab72e873d68a2d68ca336","sha1":"2d0b483c39ea41187d9fcb8200bb2819525dbd3b","sha256":"6571ad1a4bb68aacbd4c3a78fc0c26f9c1f1bb34a92164ea3fac2b4532acf88e","sha512":"f3956ab3268f27911de0789fa0858de98e26bcd2736544a6694a225aa61ab5b8ceff26774af62bad71294531d75e4faa198f44ee85a5731ffb26480940f4144d","ssdeep":"192:S4DF7XcEbRi1H0FEKyhWbviztF89xo/g81Qit+0idiiV8M5MSBj5JCWotPSXmYRB:fhoEbizXAoINoWoxSXmBEU3OHQI","tlshash":"18320054df6c2c3205c720fc8d7f288f513de276e895449e388491dc59ed44bbaaba39","size":11663,"data":"","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-08-18T12:25:22.152146Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a24c8424ecaa94595878ee39970c7b46","sha1":"651ecfd5fa247c45b1138bdb2629399882c50384","sha256":"67396f17c514b90f31cbe905241e290c820130be7f55edc770ce81587d37040e","sha512":"6a09a1c41bb241c93b864eda4c57ac14bf91c2b0d0a5323f03d24c31ba266c53af6b9b15580a914aebfca0c825ec6e19cc73e352398fde352c188c604addfe39","ssdeep":"192:/5C5b4rmkiNL70mrZm3KosuxV6/hk3haw5UPQ0wx9B4EhN0xhOU8c:xGegVrZLO3gyP6EhN0xhD","tlshash":"29128588f7e0b472036360b4917f450fb2b53925648e41b8f260d8ea6cbd44d962bf7c","size":9647,"data":"","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-08-18T12:25:22.146259Z","times_seen":307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/jquery.js","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b01a0f793e8811780858bb6919154ee","sha1":"65b42f5118627b51ea31bf2df017d443315b30f7","sha256":"94fb7ad5f871626cf431588ccda297d2d6cb9aca466de0bd902d4d15a120d100","sha512":"ded23391216b2cb519656e436a4f6b09393a83dde75453a02c6cc221f92363ca1d256482458049b24ac193d971452655d2c8581c61ddf57b18f2e70473272b22","ssdeep":"1536:NP10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:o+414Jiz6fh6lTqya98HrJ","tlshash":"4d83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84338,"data":"","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-08-18T12:25:22.144064Z","times_seen":245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/clipboard.min.js","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e3e33c5ac117cd77c61dd7f3c8e8a69","sha1":"1f8030e484c4630bdd20017c8a646e138aa24980","sha256":"03a7ffe45e4bea53a73bb08b4ffe77f612aef32fdc0bb44d73f0e94195ce20e2","sha512":"79ca0f59bf25ebceecf25d6d2318c8998392405eb83aab615b1a381a6c7c687214ad995fe43b6e1921dce509ad6454d5a9d707a963bb5b4b7ed27bc3eb9cfed6","ssdeep":"192:80i1RWTek1XVTkAkI/qHnHZ4Ly98Dom53C5GU7oKZoQhoslw/3JAQZu5CpVHa4L1:NivWTeBI/vCc3kHiQ7l83JJu54z9f","tlshash":"d532a64cb28071b196db60ae802f424fb270942570ae90d4b63ae8f16d7ceed5567f3c","size":11023,"data":"","first_seen":"2023-04-05T13:46:29Z","last_seen":"2026-08-18T12:25:22.14821Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/layer/layer.js","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0c975e34297f3e44e99c9d83555ffc1","sha1":"7e465bd79e65428cf07e5991196cff512ce44a4b","sha256":"691aad750624d84b17f2fbb73a4982860edd18837f3000c5b660ac82bf408e82","sha512":"1d9dcd7e1afe695e5716ea55f9a5a3e3aa45852722b4e1a2653ebd3f3a85c8b7a34b15264751f5ee26ea56ee49c8683a00d771197d8b32d9ea53d842d6db3b79","ssdeep":"384:41xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:41EiV3i+WtXItqF13k8","tlshash":"56a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":22104,"data":"","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-18T12:25:22.150884Z","times_seen":6121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd3251e228d9edda60ce01ccb3046f77","sha1":"acea866435eea9c7a0564dd82435bab93c22a9db","sha256":"f016a5c57c09504aea2cca849831255353ad7e56e008fd49a45a23b114b1247d","sha512":"07db2933537e3a704befe64479130db26145597802b80cc9f9c3dcc437aff0823e896626240801ac121e06c25ec986b42580c7d240f900b160646d29c99429ad","ssdeep":"384:kpe0jAoNzmAHgWH4NRZsPA4iCA2PHDJMW:oBiWH4jZsDPA2PHyW","tlshash":"9452a6c97611312182936472e87f380ba139b515688a903c71c8e9de6efdb5dea17f3c","size":13539,"data":"","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-08-18T12:25:22.151455Z","times_seen":352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bitusd-web.com/app","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T12:24:40.244Z","timestamp":1787055880244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:40 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://bitusd-web.com/app/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T15:37:30.547234Z","times_seen":17957329,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/jquery.js","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:40.970Z","timestamp":1787055880970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app/jquery.js HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/app/\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-14972\"\r\nexpires: Wed, 19 Aug 2026 00:24:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84338,"size_decoded":33753,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"3b01a0f793e8811780858bb6919154ee","sha1":"65b42f5118627b51ea31bf2df017d443315b30f7","sha256":"94fb7ad5f871626cf431588ccda297d2d6cb9aca466de0bd902d4d15a120d100","sha512":"ded23391216b2cb519656e436a4f6b09393a83dde75453a02c6cc221f92363ca1d256482458049b24ac193d971452655d2c8581c61ddf57b18f2e70473272b22","ssdeep":"1536:NP10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:o+414Jiz6fh6lTqya98HrJ","tlshash":"4d83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-08-18T12:25:22.144064Z","times_seen":245,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2302506_w05z3emunp.js","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:41.157Z","timestamp":1787055881157,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /t/font_2302506_w05z3emunp.js HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T15:37:30.547234Z","times_seen":17957329,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/css/app.221a8ea1.css","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:41.162Z","timestamp":1787055881162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app/css/app.221a8ea1.css HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/app/\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Jan 2022 14:17:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61e185ee-2f111\"\r\nexpires: Wed, 19 Aug 2026 00:24:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":192785,"size_decoded":37020,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (58203), with CRLF line terminators","md5":"66e320b89ffbded60302475ebce092af","sha1":"6f1a9fc7090aea8c7cc3ba4c46aa47c7dd70cada","sha256":"7780b6d7b9d1ffabc388526971ef39c0b7b179cfd058f9b5e95cf70bb68e7ab3","sha512":"b8aa4c229c91001fe757b98b38217e82189ee25c66974a407ed17ffa64a48f8f4d3e3062bee1d0a8feb76cab70e4a73570eaa1fd8fbaf9ba2d24284625cbb58d","ssdeep":"3072:ikZzwg1sA/kiDT36yo5prSeZ0ITxBBY4JLHkAZMSDpL+0Aul38vAPcCGcB3GBGEG:ikZzwg1sA/kiDT36yo5prSeZ0ITxBBYI","tlshash":"af14a720b658102ab13bc26374d4bddd3124e797a16256fefa81392dce836d6377370a","first_seen":"2026-07-27T08:49:19.827823Z","last_seen":"2026-08-18T12:25:22.1446Z","times_seen":5,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/css/chunk-vendors.02c7c039.css","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:41.164Z","timestamp":1787055881164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app/css/chunk-vendors.02c7c039.css HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/app/\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Jan 2022 14:20:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61e186ba-36e29\"\r\nexpires: Wed, 19 Aug 2026 00:24:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":224809,"size_decoded":47429,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b47fe3afc9eb7dfbcb84a95a7a02d4bd","sha1":"058757d4e170924e2edf9f00581b4d65ec2222b6","sha256":"19a99de6d66a6d5a9e2eab3c12b12e307a9faaaf492e4704bfc4a40373025b7f","sha512":"d589a648e5876880af64982e7cb48e720b63986416a72ce88716dcc21d51b83cf25fdc977ebc95f84fbd1ad15318ea1e766d61846ae9bae4b87d53a1e1da6168","ssdeep":"1536:R6vASf65WCXkM28Y7SrW3YeWXA1u9w4HCe/l4mAgW9tME+64A8O6iZkJgYu8e2sr:R6v7f65WCXkVyX6qkwmXtQVTS/","tlshash":"9024b5109b172437622bdbad74c0ba896f24c363d8735b2bfd95780cc6e64991227e1f","first_seen":"2023-11-15T15:08:39Z","last_seen":"2026-08-18T12:25:22.145095Z","times_seen":10,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":849,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T12:24:40.510Z","timestamp":1787055880510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app/ HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:40 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 06 Sep 2025 14:17:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc427f-870\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Alibaba Cloud CDN","description":"Alibaba Cloud CDN is a global network of servers designed to deliver high-performance, low-latency content to users around the world. It is a cloud-based service provided by Alibaba Cloud, a subsidiary of the Alibaba Group, that enables businesses to accelerate the delivery of their web content, including images, videos, and static files, to end-users.","website":"https://www.alibabacloud.com/product/content-delivery-network","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":2160,"size_decoded":1358,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (924)","md5":"fce18f4583d2877faed17ffd5f256d4c","sha1":"81a0f0b85ac6ebc79b2a79effbae1dac5094645b","sha256":"9aa06cc6053a6621ab665c041bee492aa194b08738b8a104006756ace0794a84","sha512":"5d670f246bca3fa17866d5d426d2a696eb13f8ade68c25f12367545c0c427a65134cb96e5ea6808e3c0bf73e94739d61004fedeee5eb8e457ff336d1d3511ed1","ssdeep":"","tlshash":"124102599d18d1ac49307e6add35f22d80da6e5f6c20f8a070fc063c4fa9fcd0696d52","first_seen":"2026-08-18T12:10:10.793987Z","last_seen":"2026-08-18T12:25:22.145587Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:40.980Z","timestamp":1787055880980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app/static/tradeview/datafeeds/udf/dist/polyfills.js HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/app/\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Nov 2021 15:48:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9866-25af\"\r\nexpires: Wed, 19 Aug 2026 00:24:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9647,"size_decoded":4100,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9646)","md5":"a24c8424ecaa94595878ee39970c7b46","sha1":"651ecfd5fa247c45b1138bdb2629399882c50384","sha256":"67396f17c514b90f31cbe905241e290c820130be7f55edc770ce81587d37040e","sha512":"6a09a1c41bb241c93b864eda4c57ac14bf91c2b0d0a5323f03d24c31ba266c53af6b9b15580a914aebfca0c825ec6e19cc73e352398fde352c188c604addfe39","ssdeep":"192:/5C5b4rmkiNL70mrZm3KosuxV6/hk3haw5UPQ0wx9B4EhN0xhOU8c:xGegVrZLO3gyP6EhN0xhD","tlshash":"29128588f7e0b472036360b4917f450fb2b53925648e41b8f260d8ea6cbd44d962bf7c","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-08-18T12:25:22.146259Z","times_seen":307,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2302506_w05z3emunp.css","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:41.160Z","timestamp":1787055881160,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /t/font_2302506_w05z3emunp.css HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T15:37:30.547234Z","times_seen":17957329,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/js/app.ed7b0a03.js?v=1","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:41.165Z","timestamp":1787055881165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app/js/app.ed7b0a03.js?v=1 HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/app/\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 15:15:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e0fd09-1b9058\"\r\nexpires: Wed, 19 Aug 2026 00:24:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1806424,"size_decoded":421537,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3419)","md5":"82d5676996d6306a9820a9198acb3f9a","sha1":"4f6d62d7e77f5d78e6ac7c916d63aeee122400b9","sha256":"7c2ae96927f2d0933a081fc79a357531073b53b95b19bfd4abf0f33d3d81d5a4","sha512":"672764dc1415d4595579c87c5bb1dbb4233aae0ea690cff8bf3ebd1e71d2557f825f80e7ad33b18ef0dd4f47580ff93130940a9c7a8b1dc918cfd4798e41aea2","ssdeep":"6144:mv/6AGju7yKDbabux+w+/+iON+Z+S+LOs1YcBxGoG6GseJeIm9mPmA+eVesmCmK5:mn6AGPqbabudBw+tTsD7","tlshash":"0d25630a85b9603085a3f0788d3f5899b23551af4da97d543f5c86982f2c43e63b9bfc","first_seen":"2026-08-18T12:10:10.784334Z","last_seen":"2026-08-18T12:25:22.146726Z","times_seen":2,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":848,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/js/chunk-vendors.f400527f.js","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:41.167Z","timestamp":1787055881167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app/js/chunk-vendors.f400527f.js HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/app/\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-1fe116\"\r\nexpires: Wed, 19 Aug 2026 00:24:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2089238,"size_decoded":744723,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"bc330ad02f2e8f2b6c3f9449060958bf","sha1":"36376be22ee56993800f4424d1558afdf1ea8d3a","sha256":"fe3a131b37f0d0632344909b979ab212a7825e5660c95a30be119fe58a4716ff","sha512":"c3b3367fd086d93a1586f32c3c656b55dcd726597cdd308b6fb26363c4b619ff33c89ae2c46827c7a2cfe7fc4bdbf933c228c84696732490528cf13d8dccccfa","ssdeep":"12288:B4fznhD5TfC2dAkquIbgeSxzGSNEUr12rzKmE/FOxJ0Ugk24L:B4bhD5Tf55qvbgeoGkEk12XsUH24L","tlshash":"c6252b8d73c4b06547e361b1506f240bb3372958a809849cba35e8da6cbd94e633bf7d","first_seen":"2025-08-03T16:44:49.06658Z","last_seen":"2026-08-18T12:25:22.147352Z","times_seen":11,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":847,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T12:24:39.076Z","timestamp":1787055879076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://bitusd-web.com/app\r\ncache-control: no-cache, private\r\ndate: Tue, 18 Aug 2026 12:24:40 GMT\r\nset-cookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; expires=Tue, 18-Aug-2026 14:24:40 GMT; Max-Age=7200; path=/; httponly\nserver_name_session=e39ed35d03930af302ba80eddc7f0d9f; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"angela_session","value":"eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D","quoted":false,"path":"/","expires":"2026-08-18T14:24:40Z","raw_expires":"Tue, 18-Aug-2026 14:24:40 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; expires=Tue, 18-Aug-2026 14:24:40 GMT; Max-Age=7200; path=/; httponly"},{"name":"server_name_session","value":"e39ed35d03930af302ba80eddc7f0d9f","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_name_session=e39ed35d03930af302ba80eddc7f0d9f; Max-Age=86400; httponly; path=/"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T15:37:30.547234Z","times_seen":17957329,"resource_available":true,"data":null}},"time_used":1159,"timings":{"blocked":-1,"dns":45,"connect":261,"send":0,"wait":328,"receive":0,"ssl":525},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/clipboard.min.js","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:40.971Z","timestamp":1787055880971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app/clipboard.min.js HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/app/\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-2b10\"\r\nexpires: Wed, 19 Aug 2026 00:24:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11024,"size_decoded":4270,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10808)","md5":"1e3e33c5ac117cd77c61dd7f3c8e8a69","sha1":"1f8030e484c4630bdd20017c8a646e138aa24980","sha256":"03a7ffe45e4bea53a73bb08b4ffe77f612aef32fdc0bb44d73f0e94195ce20e2","sha512":"79ca0f59bf25ebceecf25d6d2318c8998392405eb83aab615b1a381a6c7c687214ad995fe43b6e1921dce509ad6454d5a9d707a963bb5b4b7ed27bc3eb9cfed6","ssdeep":"192:80i1RWTek1XVTkAkI/qHnHZ4Ly98Dom53C5GU7oKZoQhoslw/3JAQZu5CpVHa4L1:NivWTeBI/vCc3kHiQ7l83JJu54z9f","tlshash":"d532a64cb28071b196db60ae802f424fb270942570ae90d4b63ae8f16d7ceed5567f3c","first_seen":"2023-04-05T13:46:29Z","last_seen":"2026-08-18T12:25:22.14821Z","times_seen":143,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_431350_443911_1755776497.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:41.168Z","timestamp":1787055881168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/project_431350_443911_1755776497.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 18 Aug 2026 11:26:21 GMT\r\nx-oss-server-time: 26\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A84415DCA1C6335385C121E\r\nlast-modified: Thu, 21 Aug 2025 11:41:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6154156941818811933\r\nx-oss-storage-class: Standard\r\ncontent-md5: iAYCdfkeSFInseBOeLCZCg==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5ffe4a44770755efd4aa2fc68579118.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: ZZ2LYyyJUvUE-GiwrBVl8FoWFQgMlEBULy1H4JX21hUZvnQX_hccvQ==\r\nage: 3500\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1184,"size_decoded":1175,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"88060275f91e485227b1e04e78b0990a","sha1":"2942fb7c90cf47a7ddccf2fe184c251de5b41eee","sha256":"3896aeafd5c4a92f02c7ebacdeb2ef10a94824f85ec2151e13b8ef8d5120680e","sha512":"1e00f932c473c0cf9fc137cf1b9b24db9b62dc435bf419328fab8ebb579b043819a14a52494026f044432ac0db8b06097f29b4ebd4d6996f3e69e4f116280b15","ssdeep":"","tlshash":"3521c9471c63a4797ad5727b8b3f88ad3998a2432004cc10bc8dd4681f909e20a9eee4","first_seen":"2026-07-27T08:49:19.83817Z","last_seen":"2026-08-18T12:25:22.148809Z","times_seen":5,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":63,"connect":8,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/layer/theme/default/layer.css?v=3.1.1","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:41.767Z","timestamp":1787055881767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app/layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/app/\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Nov 2021 15:48:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9866-381f\"\r\nexpires: Wed, 19 Aug 2026 00:24:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14367,"size_decoded":3730,"mime_type":"text/css","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-18T12:25:22.149456Z","times_seen":6820,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/favicon.ico","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:44.859Z","timestamp":1787055884859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app/favicon.ico HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/app/\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:44 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Mon, 01 Sep 2025 15:15:59 GMT\r\netag: \"68b5b8af-10be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4727,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"4dcb24359adffe3746503b523a8d81df","sha1":"64e41f1079c6aa7e6b327a2ae499fd68f7b725c9","sha256":"4caaffa3b16a1c0e42b2602d9986470d8a4778dda99744a517ab3c7ae926b9f5","sha512":"9c0aee235a2d3897f2818b80bd8ea9d071f3865f7e73f27d0e18515208e061ca04aeff455cb799ce6015977d7168226512eb7f5805d07236bccdc7170731011c","ssdeep":"96:wgZXFbO8bj/QNooeLUqdy7DE7HTzg7Ahi:wiXFbnb7QNHVqZ7zBi","tlshash":"18913bc0ef5b654dc429ae7f580ad4e30c7c193261938ad7efa2ed521024e488c76648","first_seen":"2026-07-27T08:49:19.839646Z","last_seen":"2026-08-18T12:25:22.150051Z","times_seen":5,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/layer/layer.js","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:40.973Z","timestamp":1787055880973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app/layer/layer.js HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/app/\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-5664\"\r\nexpires: Wed, 19 Aug 2026 00:24:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22116,"size_decoded":8940,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22020)","md5":"d0c975e34297f3e44e99c9d83555ffc1","sha1":"7e465bd79e65428cf07e5991196cff512ce44a4b","sha256":"691aad750624d84b17f2fbb73a4982860edd18837f3000c5b660ac82bf408e82","sha512":"1d9dcd7e1afe695e5716ea55f9a5a3e3aa45852722b4e1a2653ebd3f3a85c8b7a34b15264751f5ee26ea56ee49c8683a00d771197d8b32d9ea53d842d6db3b79","ssdeep":"384:41xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:41EiV3i+WtXItqF13k8","tlshash":"56a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-18T12:25:22.150884Z","times_seen":6121,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:40.975Z","timestamp":1787055880975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app/static/tradeview/datafeeds/udf/dist/bundle.js HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/app/\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Nov 2021 15:48:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9866-34e3\"\r\nexpires: Wed, 19 Aug 2026 00:24:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13539,"size_decoded":5065,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13538)","md5":"fd3251e228d9edda60ce01ccb3046f77","sha1":"acea866435eea9c7a0564dd82435bab93c22a9db","sha256":"f016a5c57c09504aea2cca849831255353ad7e56e008fd49a45a23b114b1247d","sha512":"07db2933537e3a704befe64479130db26145597802b80cc9f9c3dcc437aff0823e896626240801ac121e06c25ec986b42580c7d240f900b160646d29c99429ad","ssdeep":"384:kpe0jAoNzmAHgWH4NRZsPA4iCA2PHDJMW:oBiWH4jZsDPA2PHyW","tlshash":"9452a6c97611312182936472e87f380ba139b515688a903c71c8e9de6efdb5dea17f3c","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-08-18T12:25:22.151455Z","times_seen":352,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitusd-web.com/app/static/tradeview/charting_library/charting_library.min.js","fqdn":"bitusd-web.com","domain":"bitusd-web.com","tld":"com"},"ip":{"addr":"118.139.167.56","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitusd-web.com/app/","date":"2026-08-18T12:24:40.979Z","timestamp":1787055880979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit-globe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 20:30:58 GMT","end":"Thu, 12 Nov 2026 20:30:57 GMT"},"fingerprint":{"sha1":"9C:88:9B:4A:BD:11:F7:2B:A8:A1:F7:60:7E:CA:49:B5:EB:6C:14:E3","sha256":"BA:4B:40:94:00:50:BF:8D:BC:25:FC:35:93:03:A3:88:D0:E7:D2:00:17:90:F0:B1:3A:16:58:DD:81:E4:72:5B"}}},"request":{"raw":"GET /app/static/tradeview/charting_library/charting_library.min.js HTTP/1.1\r\nHost: bitusd-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitusd-web.com/app/\r\nCookie: angela_session=eyJpdiI6IjAwT0RkRlhWUDJqekFUMjZtUm1URnc9PSIsInZhbHVlIjoib1RHYW1tVXV1eUE2dnA1czZ2ZWcxXC9cL2Y0SXBTVld1S0ZGWnlLVnRZT1FTTXRGVnFXSUl4WFRTZVE4K1BsWkd5bXdlRnYyWWkxbDlaeHNpVFJtU1FVem1QUkdta0VWbGlqWEJPRHhBSElOMU1mOU9KZUtxWVdqd3I2dlFnN3BKWCIsIm1hYyI6ImQxZDNhZWQ3ZGQ2OThlZmNlNDkzYzY1MWFmYWJkMTg4OWU4ZWJhOTkyODEyZDM1MjAxZTBjN2E0NDY2OTI4ODkifQ%3D%3D; server_name_session=e39ed35d03930af302ba80eddc7f0d9f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:24:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Nov 2021 15:48:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9866-2d8f\"\r\nexpires: Wed, 19 Aug 2026 00:24:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11663,"size_decoded":4027,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2132)","md5":"c8cd63cddf0ab72e873d68a2d68ca336","sha1":"2d0b483c39ea41187d9fcb8200bb2819525dbd3b","sha256":"6571ad1a4bb68aacbd4c3a78fc0c26f9c1f1bb34a92164ea3fac2b4532acf88e","sha512":"f3956ab3268f27911de0789fa0858de98e26bcd2736544a6694a225aa61ab5b8ceff26774af62bad71294531d75e4faa198f44ee85a5731ffb26480940f4144d","ssdeep":"192:S4DF7XcEbRi1H0FEKyhWbviztF89xo/g81Qit+0idiiV8M5MSBj5JCWotPSXmYRB:fhoEbizXAoINoWoxSXmBEU3OHQI","tlshash":"18320054df6c2c3205c720fc8d7f288f513de276e895449e388491dc59ed44bbaaba39","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-08-18T12:25:22.152146Z","times_seen":264,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bitusd-web.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}