{"report_id":"4bec0b44-7057-44f2-ac54-dbd3132ecf9c","version":0,"status":"done","tags":[],"date":"2026-08-10T18:48:18Z","url":{"schema":"http","addr":"bitraflll.com/","fqdn":"bitraflll.com","domain":"bitraflll.com","tld":"com"},"ip":{"addr":"91.92.242.79","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"bitraflll.com/","fqdn":"bitraflll.com","domain":"bitraflll.com","tld":"com"},"title":"Buy Betflag gift cards with crypto — Coinsbee","dom":{"size":1324,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"fa9be7e072f7011cdc57c17440b368de","sha1":"b40bbc443e609d7500e36979da4ad41115910207","sha256":"a4c5444b789c652972376eddfec51b142d5dd3ff3fbc9bdc64ab74f7f5f6dede","sha512":"1b2c0fb22ac36f16ddc2b18ebfdad7f7b02ad4540ffc4324b925b5d4595edab7c8a480fa6976d3ec138e2f1abb11f4fcb736b2d18db2e658007cf7d0d1318a1d","ssdeep":"","tlshash":"7821330e4ee785445362c2995bf6fa2cba8b400b8b04cc907ddc946f9f44f03885379c","dom_hash":"domhasha3594fbd845f9ce31c7db2bd290add26","first_seen":"2026-08-10T18:28:17.682963Z","last_seen":"2026-08-10T18:48:38.279843Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bitraflll.com/","fqdn":"bitraflll.com","domain":"bitraflll.com","tld":"com"},"ip":{"addr":"91.92.242.79","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T18:48:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitraflll.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-09T22:33:32.164957Z","alert_count":0,"request_count":2,"received_data":536243,"sent_data":957,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.biterfz.com","ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"domain_registered":"2026-06-26","domain_rank":0,"first_seen":"2026-08-10T18:28:00.772662Z","last_seen":"2026-08-10T18:28:00.772662Z","alert_count":444,"request_count":444,"received_data":6056545,"sent_data":217873,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"biterfz.com","ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"domain_registered":"2026-06-26","domain_rank":0,"first_seen":"2026-07-21T18:55:56.197237Z","last_seen":"2026-08-10T18:28:01.536106Z","alert_count":114,"request_count":114,"received_data":2373121,"sent_data":65490,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bitraflll.com","ip":{"addr":"91.92.242.79","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-06-24","domain_rank":0,"first_seen":"2026-08-10T18:28:00.769893Z","last_seen":"2026-08-10T18:28:00.769893Z","alert_count":2,"request_count":2,"received_data":3910,"sent_data":1193,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"eu-assets.i.posthog.com","ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-23","domain_rank":169009,"first_seen":"2024-02-28T08:06:29Z","last_seen":"2026-08-08T10:20:50.23794Z","alert_count":0,"request_count":6,"received_data":553228,"sent_data":2879,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"eu.i.posthog.com","ip":{"addr":"18.158.90.132","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2020-01-23","domain_rank":102660,"first_seen":"2024-02-20T15:34:02Z","last_seen":"2026-08-07T14:45:09.55835Z","alert_count":0,"request_count":7,"received_data":2944,"sent_data":3265,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CookieConsent-BfxCeDYs.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"1e2f6f38ad03ca668ed15613d248b336","sha1":"0ee6275dacb15cc2a1c3f80cdebab1daa54a8852","sha256":"7784db028b2b38728c3953a36b5994382e87e5a402e2f76bcf225becc6ecf5d9","sha512":"dc2a63ca57f1cc130d47822a3d28dc21a00578f82e6ce621256e88a5a6c9c8fefbc8345dc4eeca9145c8b1898131da714c62da5a98044a2c47bba18f734d230a","ssdeep":"","tlshash":"df51840650f86ab86d5d5ef4e01a901e767b805ca21dc0e4a4aa2d9003167d1bbdffcb","size":2823,"data":"","first_seen":"2026-08-10T18:48:38.309326Z","last_seen":"2026-08-10T18:48:38.309326Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-BxE1RAiz.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa9848adc2bed13cb58a6a8181dd364f","sha1":"cd199441f37c21bc49a8e701da69917fb6ea9f34","sha256":"5294f07fbd4722619e588d1354aec22ce7c5e1ee6b4de46317c7d94dd3308521","sha512":"1158bfd6af9ea1614b160340260f086de0ea6d1db50daeadc1a591cd0dd7589c329d5b8e78cee04ed7b010d2ffd97f6d0fd6579816612c3fe00452eeacd13378","ssdeep":"","tlshash":"45d0954ff5e087f1a7054ce7803651f3b320b0a683499674c00a45d943a7da0b036f36","size":254,"data":"","first_seen":"2026-08-10T18:28:18.158769Z","last_seen":"2026-08-10T18:48:38.665742Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/circle-question-mark-D6Mj6Lg4.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f34011c2abd0d68398eb4c4d2c45aa84","sha1":"ba3aa5291ef46c290e10ca5cf9edb09a0e537db1","sha256":"3193e6789922ace3b8edad349ebd6cb8efb2b01505726ec14511d308c5ba63f0","sha512":"3cd89cbdd1f62018da78a03db5618c558328ef21f8a457a40c0388d1e7d58a30be7552f609fe47cbfe0484a10780fa1ada355c501b4bb953292932b4546c7b61","ssdeep":"","tlshash":"e0e07d3e9def0f7444025864054d5981e92785d472a60d81b184817e07a2943bcebe62","size":306,"data":"","first_seen":"2026-08-10T18:28:18.101002Z","last_seen":"2026-08-10T18:48:38.839739Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/withTranslation-E2xmPg6D.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"023e2747498855b650e2435d4a5a887a","sha1":"8b7fb3bf2dd8e93ba559d5523f677974de84191f","sha256":"5f7310c5e37f0cf2d91a7bbc8e5f9c772bd5ba05b966bdcb4f37641b5be63e1b","sha512":"19b60d8a04f9412902a3156f705e1e4f8f8e014b73de5b919f6bcdb0be4c447c13e307b2cca435b1e26995a5bbb0367851247d0fc41c90ea3a879eeb74ed2cdf","ssdeep":"","tlshash":"dff0e10ae4e3996640cf004785bf928172e38d5a4c36200db40d856d5736a828636b05","size":569,"data":"","first_seen":"2026-08-10T18:28:18.309418Z","last_seen":"2026-08-10T18:48:38.421561Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/customerio-segments--uQgXg2h.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"8059822a4f02cd53f4438d4238b7343d","sha1":"b87382d0be083c15f571e9a602fb0858318869af","sha256":"c119fd8cc48e42b15475aeaead15aafc7859f13d92ad4a041955e5c228b2ef2a","sha512":"51e87756cbe92e8834f84840a91762a44db91600f1ff61e8e455e2e2f9e288d1ee05592a13d9e81d8304d051179037feaeb3a31d37952dc84878d84fa51bb7ea","ssdeep":"","tlshash":"af1154ccb8fa55b2b98c1c73843e4a43b12cc8636b2c824570af74843625b51839ef72","size":996,"data":"","first_seen":"2026-08-10T18:28:17.763971Z","last_seen":"2026-08-10T18:48:38.301824Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dot-prop-C58NUlnW.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"046adf125d64f186842ca1751a8782f9","sha1":"135d15d2249643a0e020917771b8b4364e3a146d","sha256":"e5ca3eb3e57fed89dfce438f3395ef57e52e23c76887b35a75facd9191d1c016","sha512":"a6a6b8fda2c27bc685c9dc6107c114b2c500f0b8bde1825fe9a55aba3102ae25f79c8bafeabefb075182128dbb37899ac7709c715b9581c208f135101c8706f1","ssdeep":"","tlshash":"9a21dde2b3eb783f869d4e560065d405f1396da09d1e6928d292e0631e73f6390e9f18","size":1239,"data":"","first_seen":"2026-08-10T18:28:18.060694Z","last_seen":"2026-08-10T18:48:38.80267Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Text-fkry7N_q.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"06b4b54b5ac9eefba21e01b97c80f14d","sha1":"9adb8a0825a8bc65841b061efa2e37fdf28f50c2","sha256":"8c1231d8962c514663a88d2305a988b479b08c833cb70a407b8df293cf6c32e4","sha512":"9af00da40ae2b9439933fe51c8754a3817323a8d73e5e4e17703d68b9ca0aa3f6a413d7dd066a5a22c05e66c463f50815e004ae557c92b7d2fe0e2c5c5e38177","ssdeep":"1536:fzUwlbNxiTuifemIOinUoEMwOeODIEcmoOd9cIUHqUgsV3dT1HrvNuANh7ph7:TlbOkU7e9hatRHrvNLN7h7","tlshash":"7ef34b89328ab1a9e3bb4b6590b2140db77ad540ec4e180cf1d9f5c519e3842f2f6fb5","size":172087,"data":"","first_seen":"2026-08-10T18:28:18.222884Z","last_seen":"2026-08-10T18:48:38.336616Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/shopping-cart-5eD16TPV.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"fe2b530abf75fdce9293766204b11efb","sha1":"fac5354c15c0c1aa6b205a332c2c63ea0e0be698","sha256":"73c5f441e6aea37ebfede89a1638b5ceb6d51d5fd8e09379abd3403402bad4e6","sha512":"777420be3617b47114f1c14d6dd36b7feb25a1cde03d6c2ee5753dafc1059e547a8b2974a502ee809e9833fd56e085521c1da3b0d89b95c83e0731f369ddcb9a","ssdeep":"","tlshash":"73f0781edab51cbdb40b4c8dbaa9a0aff77ed7a5bf4b1104e69c1a2112001c09332bd0","size":588,"data":"","first_seen":"2026-08-10T18:28:17.998928Z","last_seen":"2026-08-10T18:48:38.657407Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/parse-DAKSBcq5.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"36ab9f743fc1c43861b328e5d24f1c0c","sha1":"e551e5d733ab7d1251bd5e4cead081331b0af2c8","sha256":"bf203a02510b65b44cbb6826b795adcadd27d2f4845519646e3d957a3f24be70","sha512":"77a55d10c320adf289a00a1e0e9a72c3832f1fffa95dce7601da683aaef8371f2f7b2ca7a8b996564e6748657201b30c43c710fbb546669d7fc60403022beed9","ssdeep":"1536:4h0ttE45Z8jbOGTio27Hi8zLb1pLMlABEJO5RkeiALYt3hMENfvwax7OzT:C03E4v8jcJ1xM5LrALYFPwi7e","tlshash":"68b343fbba80a3b7b6f53a188615424c8a4ecc5eec8d180d5ee6f89b5d7051434bc71e","size":115820,"data":"","first_seen":"2026-08-10T18:28:18.015703Z","last_seen":"2026-08-10T18:48:38.390028Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/review-V1JrYtZK.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"b13cc10ead06ac017a2d9f08458af779","sha1":"7a5c55e7c2544471ebb037d9593aea4bc01384cd","sha256":"b25c28dbb13045a39977ab26a2de166cabcbff8975df45994685670da5426a72","sha512":"dcae25c26f158a0b0f1e7568813146f0714dd90f22013a06c70fc91f3d111aa9ae2c29fa469bf3274aed12774f52e944145d51bdfd9dbb2d6fc9495b35b04667","ssdeep":"","tlshash":"16311dd9f075a08c95aac629e63e92dcff347d02f8d34178e88c8e1d12205043716e0e","size":1735,"data":"","first_seen":"2026-08-10T18:28:18.415853Z","last_seen":"2026-08-10T18:48:38.88766Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/differenceInMilliseconds-D9l_cWOL.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"a59e54f4b81838190dec2785b08a0123","sha1":"a89b497353d952557608032c5561221470d01fca","sha256":"ca12f1ffbbcbd45fb1445ce0a7561a6db332cbc07ce58993f5a3ccca7a177f86","sha512":"5c7d1148a2163269fbce385571bed893b75b1084cfb4c25deea6d22ec46de6ce08164b2f2e2d023b3d0b51f72a3e0fa191333e29c38290e2a42736a153f8c76d","ssdeep":"","tlshash":"b3c02b0ff0f96272013d2c5a803a360bf26cf180f2050e489080e2ac3a61891853bd36","size":146,"data":"","first_seen":"2026-08-10T18:28:18.257676Z","last_seen":"2026-08-10T18:48:38.745628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/no/en/","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"572c04e7bdac3741bd005ef0f9fe3da6","sha1":"43c88c106e1106f7595466fbc6716e6d6f66a235","sha256":"49412886a7fdcea95efa3f3799eefcae7d04a1d46f866f4c7ada9ff11ec760c4","sha512":"dd575fa0823d8b6997738f19e2f2747367c18cd3e047d1797e7a8b8897ee8c833162c98cc2b0ea6d20bd7b89930b74611ac7e3264a5e575a4c15d78e6566b73b","ssdeep":"192:Ks1DRGkKgeU8oWWKAbbScp/DdQ8cZso5GGKiGtu0PopkOKalmfPLUPVLW:h1DRpeUXWWKKbSM/Dposo5GtiGtMk1aA","tlshash":"510277eaf68114b757e62f263cdf2f08f07f099a044aa5d1c46385616e3ae0e4d227dc","size":8246,"data":"","first_seen":"2026-08-10T18:28:18.446443Z","last_seen":"2026-08-10T18:48:38.912758Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/no/en/","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4f56117770a906bff7bf112186317c5","sha1":"b013fd35c05d0369856c4bf995ea6f789ca0a73d","sha256":"e24269a77126f4afc20bd93291983b56f70254a1b3c3a5d0953003f49cdff180","sha512":"546e79e92fdc5772e6db6f12d08dc19c2c12a95ac8c763ee1881eea1fb927b09b5d75c642f1accd6167263ecbf6c9e2c68b2b7c689ae4c29dd3c4f401e90f10b","ssdeep":"","tlshash":"01b02b58701630752483113210276a491d530100154d00240360455e9d7e34f0c4b9cc","size":127,"data":"","first_seen":"2026-08-10T18:28:18.450448Z","last_seen":"2026-08-10T18:48:38.913403Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/no/en/","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e88a2b8e8d041c4180b041a5ca9406a","sha1":"3f942279305400d1b84db381166526f6f22b5517","sha256":"829bf7fb5ba2d9144d335e20e6fe97223ca61ab319c6b6d5c54cdd4de2975251","sha512":"1977b9879fa6ee87bad760813e7dd74144e0e985d1bd124c2dcb82b51e7e8a2eed275f355b6d84c0d435597667c9e105117c54864b8a117368be48b12321dbba","ssdeep":"","tlshash":"bce07dd8352525b921b62d3573bb822831531a5824080f72dfface456c24a8b4caa95c","size":338,"data":"","first_seen":"2025-06-09T21:05:36.836585Z","last_seen":"2026-08-10T18:48:38.914288Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/no/en/","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"7aa7e774551056b44435d195fd03df83","sha1":"fe6615022e902103104b7f807626edeed07862fe","sha256":"18cd244863f2d3305d749abeeeaa9b0538ce6904d445a1397896e7a3a8f437e6","sha512":"1c681e292c363bef4b8aeb6c498f92d4495857b1bc7a89a595c8822aa7555548e58740c4801d2254d4e9eeac3c78c7090386e9afde077e8c64df60dccb549034","ssdeep":"","tlshash":"ec80008a8030ba0080e0000c23032aa3320080208ac2800002aaa023f082e233a88888","size":28,"data":"","first_seen":"2026-08-10T18:23:56.737967Z","last_seen":"2026-08-10T19:05:30.144961Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/no/en/","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"48e7101cab1a4ab3e18c70eb0c8f0cad","sha1":"85e775a7f12119ff80b9868e119674dca17c233d","sha256":"d3fa47f1a22bba55e8ccc40301fe4a9117a584d4c3a9d1e92331152442ac065f","sha512":"975e526bbcacbdb8783abbe5f71bd72f82a0dc79b0d4e0307185541d57e28d88a1d3dea389ef26cca9a182b43df66f199ff896084376cacfcb4cf41293f1f6e4","ssdeep":"","tlshash":"454131d8b914143322bb41e776db3e4d270b43243837fac6969d02066dcba87a1e27dd","size":1977,"data":"","first_seen":"2026-08-10T18:23:56.739519Z","last_seen":"2026-08-10T19:05:30.145448Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/no/en/","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa999197f9b0657f6174040bae3555bd","sha1":"0881b87240c1d417f2e3e82755321d1c4a4ff215","sha256":"ce6f278e5ca8296038160ba39fcf45a0b7e1e1723db2b2d1876c75e330a6b11c","sha512":"90a72b6663f435fee7605e42615517daf2561d3a219cddde25807b10526a85687871729d34919d65d5745c25e06e5ffb5cd8be820994f37e8b4a3fa652b72b48","ssdeep":"6144:bKwI0mNxmXV6dcIGbBceguv+NRIwpljoHV6/zetvWI7UISNxKwISKwIe:bKwI0mNxmXVmcIGbBceguWnIwpljoHVe","tlshash":"9a24d94c98992c39eba1029019b77f1a6dbc21b3d285ceabf09c5fe0d0b57072d27957","size":221923,"data":"","first_seen":"2026-08-10T18:48:38.916142Z","last_seen":"2026-08-10T18:48:38.916142Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/no/en/","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"0853bb7135c4645bbe02d2251a9f5472","sha1":"57051143513e3a744765ab2eef4ca5a9cda4a2ad","sha256":"b3c781fa4f4d8659c076a53307e8cfb9993568fb156eac0aea11bea44d333cbc","sha512":"039f75dbb9eb50e2f0740e256ddbc41d0ef11d410457f67b3795738f5b8f92fbc914355aecb38a468a259b202eb2747e8056e8c2312f85cc37c47cd4d3287696","ssdeep":"","tlshash":"f37000f0f300000c00300fc300030c0f0c030fc00003c00c00000f00f00003033000cc","size":18,"data":"","first_seen":"2025-07-05T10:40:04.000888Z","last_seen":"2026-08-10T19:05:30.148051Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/no/en/","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f0a276a8b7294cf078ac98f3c19de71","sha1":"1b16c6968ec57a2cdf82abe52c099af5a11776a6","sha256":"99ab21109647e057417e885e78756383d85cc051bab09df57176b27376a106a7","sha512":"2e7c8a8ce354889cd30dff14d23020c63a2e1a3ce7ee0273d91a25a8a8768b0bd61eabcab9ac7dc79b7da5b2d883d09819c8aa09867c8736aba922fcc0ecb635","ssdeep":"","tlshash":"d241965df90774638be2b2d5b0f28987cf6e13d443388c45d82180ca6640eca472efb8","size":2292,"data":"","first_seen":"2026-08-10T18:28:18.463149Z","last_seen":"2026-08-10T18:48:38.917993Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Link-yLsqG-H5.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c97ad33da87a573a6017100377b2f6f","sha1":"9ade8a66bb07d764fa2ce85f9317ca02427945cd","sha256":"fd5e9bafaa356eb13c052bbdd5c507740e4cec0e4da42b696e176120bd122d77","sha512":"34e65245f0da8b7e76c2fc6da890edfb6398190ade114d88a293268a6df5d09649b6d23ca60d2f960d383074bf327ceedfad7ced161449bb13b19a5d8fbbd896","ssdeep":"","tlshash":"f74163b5fe74707ce93bc00e906a857da683a050bb4f4ad5e360586da3701d4f31af49","size":2208,"data":"","first_seen":"2026-08-10T18:28:17.713795Z","last_seen":"2026-08-10T18:48:38.544344Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/embedded-session-DKkXLnhE.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca76aedec2e318116120711d6be75705","sha1":"3b2280dbef370e2e3778b3646022499077fedfb7","sha256":"3f9adb17393be5c6476395f31b20f017e50f898541712d2ef7138075d8fe77ec","sha512":"1536ca1ad371b5897887a657d3f81a214bdf31888eabd97ceb4b3b542e3b1dd95a3b6b4179d4dbbe13db6567e3234880d5d86bacd931e7abaccc81b0d866410e","ssdeep":"192:rWX49MmTYJv9BWwB6U5ugGgSGYl5lOc2t:rWgMmcJlkjEt","tlshash":"ae02d5d930d8f538d6fc1b5884320728636dd452e04d207cc8aa99aa17bbd33cdabd31","size":8483,"data":"","first_seen":"2026-08-10T18:28:17.924239Z","last_seen":"2026-08-10T18:48:38.287919Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ledger-DxB3xkw3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"22544417b86c7323b3de6ccb41cc58a4","sha1":"5abcb2bf8989384bbbf8b2d73e73c1105a31fd44","sha256":"69b4ff30a3cfd46747e60c23d36d211d36eed7fc4075f0a4f05e960a0b46a8e7","sha512":"386f00f6a82af295a76c2c2a69a56c6d8800f729ed630e23e51c94e4edd67da63ed6fd652f510f79cb8b6b3568294388464f542a06fa78bf459f273a72221e76","ssdeep":"192:LcZPc2Wsqnuns5LM3IHnSbEdUQk0SHPEXcuIUa11lhSfAX8m/pjpy1ctj:gZPc2QUdOuwPwHPEXX01lcfE8mBXtj","tlshash":"ec22c7fe0b247adcfa4b1b8aaf379488730e50a6b973c590564f577468478d0f607a90","size":9993,"data":"","first_seen":"2026-08-10T18:28:17.766776Z","last_seen":"2026-08-10T18:48:38.543518Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/check-CC2_N3nf.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"14706d783f7e1db66f910e7bbecd20eb","sha1":"f90e01e0ac19563b0dd8562d97b7a9e6043a05c6","sha256":"350f2ecf7459b02e313332fc6856de0caa4aea99dbc8d5515539bd348bf5fa93","sha512":"c09eb08906e5ba9a9c987263be5cba2a53aa071651dfd9f3045e5fed79668fdd1876c7468ee2b6b43ba6b685929ce0d422aabc0d951d4edfd68b3ef31812e613","ssdeep":"","tlshash":"00c08c7bddb56d700d49afb1605d0502ca54a09693aa8c90b280933e02a2ca6acffe14","size":167,"data":"","first_seen":"2026-08-10T18:28:18.105317Z","last_seen":"2026-08-10T18:48:38.884639Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.415.1","fqdn":"eu-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d6e66a2ad7acdd378d8b4228d69ec68","sha1":"c369ce68f967351371ffd899bbb5424dad2bf8b0","sha256":"dbc0ce15ae6cb7c86bb66c699cc0445accb7e1ec4060cf7f8a384a5481ef8b2f","sha512":"c5dd0d5446bd1794a6e7ccee33b3b36a81ac8491bfb556faa775f2fe88b891117e5fc29010af438a04675b56822bf6678d29c23623f3193b0cf29011c13ae6d8","ssdeep":"384:7XeKaKyE7kg4iE+6u6J8+HHfEVTqkAFqzvYZYhbzO7FgNUb:OE28+H/EVPjvYZYhnO7Fgib","tlshash":"23821b8cb651f37229db495b807f0703e2257918a18a8c24b016ecdd647cb9122bfe7f","size":17887,"data":"","first_seen":"2026-08-05T15:03:46.443075Z","last_seen":"2026-08-11T00:40:10.56621Z","times_seen":486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/_patched_static/logout-guard.js?v=logout-guard-20260724","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"61ba0987854657265e48c2e314e93cf6","sha1":"d4f57ab9dad3072863a83874a2656967146fc1dd","sha256":"a07b5f6f8c6940cb68fabca606434bd20d5962dc923eba0d72bbce8b0e222e97","sha512":"6a48ded690145fc9613f5428b9ee3937fed1c07dc25ac5e917847bd865c15e9e76e3a4460b39d4d9d752982d9c15de0923a18371f7f5a11eab52af088b55fc84","ssdeep":"96:9rwfXkwkliGig36bgv52wocprfZeGHUM8NWlKInj1V3RZ32d4gc8SeIbhtdR5Ys5:K/aliGig36bgEKprf8GHUZN6JZfQdirL","tlshash":"bbc194abb6db31b54277607c476f7986b13aa897018ac8607d8c4e005f2507e43f3b6c","size":6120,"data":"","first_seen":"2026-08-10T18:28:18.378508Z","last_seen":"2026-08-10T18:48:38.82817Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/agent.esm-D4rbcBU3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"3fb0c42cdbbbcba68f7ed5295f03e0d5","sha1":"8a4d67b435b44767930a86cd3807d15377fda22d","sha256":"43c60a2b5a1b7a57d3272dfa6af8cba670c45fcf5a98e569537b81ab1a111643","sha512":"5fbd6b848f0be895c2beafd466c6ff102ef938f5332abd457e077020eea50acf0b11b0c06454fe6ed4863bfb1f536b670768e41cabde911b1a1e70fb9f6b5a61","ssdeep":"6144:87MJYAOqa80GQZQTpQEvy+aNLgrm8BPFwxP6:87mYAr06iEK+6LgrZPFg6","tlshash":"755429cc769ab07e63436c29421f3127b32d3d23a40ea541d962dde53e39357a173ea8","size":304464,"data":"","first_seen":"2026-08-10T18:28:18.084021Z","last_seen":"2026-08-10T18:48:38.359963Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/classPrivateMethodInitSpec-dEFXBvX6.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"a466c7bedaa3c5fca782618d4c78ac58","sha1":"63356458d633e628ad40c4b69e225c8ed04b1d83","sha256":"8b8f87752910e1f56a948a20a87a059b50ab11adaa7069df87aebf9480422d06","sha512":"57f943f545804b8cb35099520ceda0065125cddf7d218cd12014e21dc0261030b5fb11616010c500c295d1938e8b3689d99f037907be2b5b03e11ce17948c789","ssdeep":"","tlshash":"caf0278d79c4f112973b01368567400fe730a8992d1a9f005184e5d33e3583947abc1c","size":448,"data":"","first_seen":"2026-07-16T00:57:04.798202Z","last_seen":"2026-08-10T19:05:30.017233Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/urlstructure-CaQgsdsi.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffe001d991927a5c3fafa65806d97c98","sha1":"288c7904354f47e6621a8ead0f6d5273c015de07","sha256":"a1ba504123610ae35c20aabf94e627c3c796c966858b93660c3336c1a7a28730","sha512":"3c1b3d3a5396fe5a950e4c4afac5b984540766b413f718a4cb7b74646426d249cf775050192a2c009dba1e8589d49965807dbfbe768f46c477af816a5ee589d7","ssdeep":"96:IeCnQpBAXjDxjcSO6Wm47OGYiPj0QxS136SbdrfDvPFFfO:IfnZcSHM7OGMt6SbdrLvPy","tlshash":"9fa1a5ddf6fdb0a633e55275c0f7086ef12c2591442a5c94b196ee85a820adc03fba36","size":4657,"data":"","first_seen":"2026-08-10T18:28:18.376575Z","last_seen":"2026-08-10T18:48:38.869351Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/logo-DZWN1Rh9.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"caf879273a1bd608e8ab600c1c46af91","sha1":"8b1a8792bcb4ccbb5f9cba272b697e39e8eaa429","sha256":"5236ce1bdf62139fe10719504b4ec8dc001c2c007c67786eadce67efd6ffab47","sha512":"b517a9ac50d603c1300ba4bd6ed5dafae71acbedd6c1757d1a353ee0670f516893c50b009caafa5c9024e9fac5494e0b01f039a36acc7513c3525addab4b9778","ssdeep":"","tlshash":"90d0a72fccf00e76d41c0ddee02f549e7724905983151565e94c217052a55c1e675f96","size":226,"data":"","first_seen":"2026-08-10T18:28:18.036759Z","last_seen":"2026-08-10T18:48:38.441083Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/lightning-logo-C7oEbKjP.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fe29a6df0a633b396634bba0dd5b920","sha1":"3c7079033c54034127b446e283219295ee5b8e06","sha256":"fe61d023f71c06e830f20a0b7163dc3628c5532b126152b397eb0c4210351a48","sha512":"aec2f3bb616b3e9957072b2c075b445a842ed34a6830b66fc9bc56cc08c65c4abac718f64cf7691598267f735a49953240547abcf5c06aaefe2416ad7ad52e7d","ssdeep":"","tlshash":"c4f047bcccf40188d4280777f79c1886e01237975f6d24e045439642239817e353ce3d","size":613,"data":"","first_seen":"2026-08-10T18:28:18.322746Z","last_seen":"2026-08-10T18:48:38.880597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LiveDataSubscription-BNiK7lJp.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b50100a701aac880086fb4438210af31","sha1":"2107f8d618020a0e56474262cd87818a375fcffe","sha256":"30a36cb8b9c05f843fc1baae0c62bf458b0ef93650b49e75f366c11c014136f7","sha512":"ff2e78163421f6932f5521d59ea9d324c5a0ad33fcc9b6e3ade90efadb0aaef38acbceb4ab885307a91033f37253181d61696a692be383e904a88ccdf9a9469f","ssdeep":"96:QUZRikM9RMhhJAPZ+dijMTvTSUgWIHOjUjsmx1VYepQYpUZrqTvfaTi:xzI1+dija7SbWRjUjsm3ieyYpUZrsci","tlshash":"0ba194c9e59424226bc2b9a408b60e0b023c6b960557901cf67ecff67e25384b17bdf2","size":5044,"data":"","first_seen":"2026-08-10T18:28:18.038041Z","last_seen":"2026-08-10T18:48:38.807116Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/isAddress-CgqOLFlT.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb88c1d2176aec44cb7b8b939336a43e","sha1":"964a66d02199ec8905dbcc1706a6c365bf11c804","sha256":"90aa6c5b6b81fe566d5e8f140b5f6bb9349e7b678fe4e9462c1adc3b7a1e6171","sha512":"d563205078dc371ed9eea68d9804200c77ef97ef8aad9e1199575ac147c625ac2ab9b909414f9004f8915d649d67b07926809b3d7d3ef76f710d88ccd2f7c292","ssdeep":"192:ZRNoDv3/rA/QDu4pSCfW6NG7SsEPMsSqSSQjJyQdFkR4R2:HYvvrkQDuVCfWeGOTPMFq/5QdF64R2","tlshash":"8302cad77b40b1b2afbe4553d01a1640f13894f4845da46cb2a8a8b236e54b847faf34","size":8362,"data":"","first_seen":"2026-08-10T18:28:18.148289Z","last_seen":"2026-08-10T18:48:38.793725Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/utils-CXobsKCU.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"f42111ff39551c590ef41d02b6617d29","sha1":"701ae71ffa8e50cc830dd490322c9a2c12836915","sha256":"4a12dcecc245f53a8c0f058808198b9a1945c75000b3bc253faced4dd44682e3","sha512":"bd0ba9787d1736cc6f5a58590ddc4ad36e849a594e382bb3bbabde58a9203c32527caf729d93a969847d1f3ad86703d4fa7ba588515157e30d67aece1750bb82","ssdeep":"","tlshash":"46f0d4cf39f825b41a4032f0905a9a85b22cf5c982cd0b84938aa4c45a20465f2fba7c","size":467,"data":"","first_seen":"2026-08-10T18:28:17.958707Z","last_seen":"2026-08-10T18:48:38.813741Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/faqItems-D4Sz4LF-.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"38ae048351f9721d482ca2c3788f4f15","sha1":"5adc3c6d948e31378b4e1f4ebea0cb130dd65d1f","sha256":"fac058f39f8522f82c7a6100f717520372202a9db2179eead323ec96650673a3","sha512":"e95cf715a683ba4323ea549d0ed2b7935cf66b0db398907619d9a62ee8bf3e0bff93c1224cd2b2ffa98386673e97eb99e382136b745a34b67da7a810a847292e","ssdeep":"96:Uf4weKoSGtEDGO92LATSacGY9KW+NseuCPl+otWbuCPl+62VtWjQw4CYLtlJXCYr:Uq492LkcGYoNsapgk3hRlJ8xZLI7KZdk","tlshash":"5e324157d4bc12bb9d9554702024838bbd3f903ea0d818d69eb13058213dade6aa37ef","size":11220,"data":"","first_seen":"2026-08-10T18:28:18.176813Z","last_seen":"2026-08-10T18:48:38.878799Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/invoice-DVXDdiGL.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"2aebe99c3759aae86c568db2219da339","sha1":"6db0745033e6be2aa48c138e7493bf0f4767f8cf","sha256":"55b7ba668fb283095b7bb09fe63e510f7166111b37619985802c87a6466d5be6","sha512":"6546e308b792dd454e544a65db320044c0150870714510957b3e29f7f07e1865e2665bdd59c5a214a8f122f2157fb0af1c8a7116bad396bbdf748600dc1a5797","ssdeep":"","tlshash":"1ae0ab8bdeb494fee01c9a80c4b247895512f094b390230af98a46e0333401a603bc25","size":420,"data":"","first_seen":"2026-08-10T18:28:17.898595Z","last_seen":"2026-08-10T18:48:38.762176Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/stringify-BbrQf6M6.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a73ba90d22b81d6cdf70cc134192874","sha1":"6bf7edcf3311f3e55b989923eada64a2757d77ce","sha256":"b0c29ca610a64939453a13a5a66a94e14828e7ccbbd186ce04a4ab67e96499e2","sha512":"b86b8a9a361ec367a97aa5eec0088c9947c358ec16d0588747f4244d3368fef0677fdca678bd402105400a28534afc24293615edf2d033b11d6c215c5425aa22","ssdeep":"","tlshash":"9dc080d678f0b5e56b7d9b3c00c6c44de43f90dc93750a54f14540727555c455076f25","size":183,"data":"","first_seen":"2026-08-10T18:28:18.162465Z","last_seen":"2026-08-10T18:48:38.86493Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/heart-mTfQqbiS.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"8f40f4a96778ab9ae93f9ead59b13114","sha1":"6ecb2a03b3348005c84ac3c5e3654601c0a34df0","sha256":"7131a934d2ccbd073dce8e72adce567610e585b05ab535bdd68c89a882bc4c5d","sha512":"e60c393b10a6b28e17d98f26ea23b3ea4d63bb814d915c5fa95f2b73f4cccc7a454073475c357f3effa9e2e97ee001a23d0a342bc9d17b6d64c627b1e758368c","ssdeep":"","tlshash":"0ff09ebf9ed605ac2a1a09996215a8a1d74f40fdb3865460a00cc1ba16834d2d86bd90","size":467,"data":"","first_seen":"2026-08-10T18:28:17.930069Z","last_seen":"2026-08-10T18:48:38.755047Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-DmKY9JrQ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"e3d793726998e6b300722fc4e7f1e037","sha1":"8ac6764c299f1c99d8fad249a2207a7d01e11157","sha256":"da15f4e6127a35831281b48b4075ab653090dd9ab6e2ea02f6b284e0cc24776b","sha512":"791ad70b4fedf7a73774d3d97abf8e8e53e495c285ecba0c6a1d2fe2dc2e865c91955ee2f2c32e0d97f0f86d002ef394654726a5796c8d746bad898af9f8d864","ssdeep":"","tlshash":"ebb09285b4f12be8827209a9445601ba4628f486d5060214d11896ea2e746a0642cc30","size":110,"data":"","first_seen":"2026-08-10T18:28:18.128803Z","last_seen":"2026-08-10T18:48:38.875102Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/esm-4GbFeYsv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca25d1aa46b9eec1272301ba609486f","sha1":"41a7761908c921344113006384b4ee539dc30822","sha256":"302643c2ac6384d9eb41639ac8361545f591d2dbdfd2ba8deb99d70650e47a41","sha512":"c5c1b5507fb16b1fcdd53261ef9c7baeac06a8d56309a4e59403e8560c65452ebd6ba695ca009feb3303058a4e6d214927b6dbc91b67297faab8b390ab32ff91","ssdeep":"","tlshash":"d0314239b7747087234d2e8b48c794c6e17aea73504c681cf1062d072aa17f281def1a","size":1698,"data":"","first_seen":"2026-08-10T18:28:18.054533Z","last_seen":"2026-08-10T18:48:38.894829Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/_patched_static/api-readiness-recover.js?v=api-readiness-20260801-cart-persist","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5f4cfa74828d09e3150a271e4b91b9d","sha1":"5e845fba0a960699f58e5274dc930090b8cba99b","sha256":"e30d2421fafc58b08f95378bbb9a2331d8535117595d7ac52972ee183e5f2f6d","sha512":"e749b689476893881706fc84e4ab0b0c2d240ee09bcaa76bf773ec6be0df3922ae5f4edcc881c72730597cc14be4f7bd9810185ed687f4b3ee3ccc6fedef0c44","ssdeep":"192:w60+WGprGctyE1unbPsMj9lFDzmMnzxLLm3wWCW83ehsyBTluywYIa879RKbt0bU:FVgdDsMj9llzD1kBMAz+zs7aGHib0HJ","tlshash":"5c32228928f370228697707e578fd4493126d423298dde947e4c03147f95a6a8bf2bde","size":11782,"data":"","first_seen":"2026-08-10T18:28:17.987775Z","last_seen":"2026-08-10T18:48:38.504954Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/datetime-Bya9A8jG.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"9c597ff61a3559831ab1337286bb5b33","sha1":"bb31f33df76271fc1044f369f63c35692fd08384","sha256":"c83b4785c69a7ba1ea7287710fc57a4d1fd6264e7cc3f582fe0ad87f8f64b8de","sha512":"096a8e4aefaf74724ac8b34663cdb058cd88ce506320945a1793ca01614f2fac8d3d25d7176e2495ccadf5caaa0b7c98b28570726e7b62a2266034532e76f513","ssdeep":"","tlshash":"2331f0cb32cdf1195b262779c1ef851ae75999e504890768d047b1a13d2483c83bbfee","size":1698,"data":"","first_seen":"2026-08-10T18:28:18.050717Z","last_seen":"2026-08-10T18:48:38.797748Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/newspaper-Cj6UA5qe.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"2ee692ad5d1a6991d57efe2f31275629","sha1":"541e38499fe7c9bc63e57337d595027435efe350","sha256":"a2f0cb49f85685f2e0566acd5eb2933e5837c72b47a23aeb3427f06d8b1b8bcd","sha512":"f73c84c35e27ebab6482a138fae01c53614ca1f9652a6ae81c6331237216c7237d128ca4ebc323d6685d9d350b5cc116148c169983c2b553b69407f08a4d2f75","ssdeep":"","tlshash":"bce02b5e8fbc3afc09291895181ed81a575984ed729a8440b35d11fd1751051dc7ff22","size":391,"data":"","first_seen":"2026-08-10T18:28:17.818239Z","last_seen":"2026-08-10T18:48:38.387752Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/base-BSiJIwdG.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c5405c68f0508f83b2999c4c5f0e99b","sha1":"322eb6595ffcce28fe395bbca525bfe7977db682","sha256":"b0fb2390eb16752dddf2510424e6760ac04f34eed6cccc8273c51b77b9a5713a","sha512":"26851bf2b1d7d77445f03ccefa427e04e7215d2647f0ebd22b8bfda0a6f522fb1fd7dd54f08b54aa04ff246c77a6505744592431164bee0aca0fcde60cee8cc7","ssdeep":"","tlshash":"b4f081ad408fcac97d388b3b5652349cc20076ffbf48684bf2413454abe415a6794eb8","size":615,"data":"","first_seen":"2026-08-10T18:28:17.858891Z","last_seen":"2026-08-10T18:48:38.799558Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/fiat-only-mode-BOujwpke.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"a408d9f31129152ea0a41db8e8c13c19","sha1":"c67bd9bfcb7e52eb3529e8bcc684ec7e7fbfc255","sha256":"8aaec0f952b7f4f565a98b1dd5c79d505e5dfaba17701e4919bfe87f46830168","sha512":"9f5fcd64a5e5eb5587fb67d8a21adbd0a85850d40da04aa88ff0365b96bbfa54b79c836a6beb022eef23ef57913a17dbadacc386e0c7f355a9eb6bf4818a9aab","ssdeep":"","tlshash":"62f0e16df0e23874220a4cf9c0153eff831c945c5744244ad06691d06f65cbbd30bd2d","size":562,"data":"","first_seen":"2026-08-10T18:28:18.01238Z","last_seen":"2026-08-10T18:48:38.569306Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Spinner-5-5qWz11.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"466779b8f500b22350538347ea42bf21","sha1":"4a31be9fea996b8a94566d1b5363f684a5458609","sha256":"8ee1d4649498e168dfee6df13282889bac9b4b565db51beb1553cceaee121d79","sha512":"8176a1191b22cb3f3e7fad7c04c28439e4620d40a39a88e2849b1ab99877d745c549677ee8f2c093a2b2783d19fba7f14fe51db17a816186623236dbbc33d9be","ssdeep":"","tlshash":"99410feaf45079f8e6338a91522d849e362ac169cf0e0db0e970a87c12344f53717fda","size":2075,"data":"","first_seen":"2026-08-10T18:28:17.833177Z","last_seen":"2026-08-10T18:48:38.841413Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/route-helpers-DUf3Vpb-.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"67ba098da2b298f99163179f5e4ffe43","sha1":"6390107247ac6273bff2fa7a71906a0be485ea16","sha256":"e43e711bcd0b6d9c4de2338c88db2317ffe52f331b8c794e557af48e64c5d8b1","sha512":"df9ec487d9a53f5c0299f4e27cac1e65bcfb6545befabb91d4a0cdee573fa239628b46669b7f3aeba5d5c36d2bdfb689548be7fba665a6f29fad2370a0370226","ssdeep":"","tlshash":"a911e1daf4a92d3862f40892902b9316a3747959b64c1442b07b58c6633294e4bebf7d","size":972,"data":"","first_seen":"2026-08-10T18:28:18.032688Z","last_seen":"2026-08-10T18:48:38.863276Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/parseISO-BSKXNGMC.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"21aba8736106215c8a049a0e0e38c5c9","sha1":"377107a56f7ed97b5c0259c73c55ab30aab6be10","sha256":"6b15b2e11a80dcd6c23dd77d8da8bae539bc6043d308ee3670ec78cb3f2b86e9","sha512":"f9e2f6031d56dd79cbad5a2ee78a334def7398bdfaae37f594d5f0d1ad0fe0bc86b06b279276fce4606564118b1bf83d0e28d79a34406169bedc47b765088d3e","ssdeep":"","tlshash":"5a5151da30b2f411a35a25a080af8005f77fcdf98cdd4578e159ea867c25419ea79f33","size":2703,"data":"","first_seen":"2026-08-10T18:28:17.901852Z","last_seen":"2026-08-10T18:48:38.801551Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/htmlParser-DUAwYev7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"9a58a8116893c97fedc7bba633e95f7f","sha1":"35ef9cc27c0d64dc4a024a7715dc5a6229ebcb2b","sha256":"124bdfd87af4255db46f8f1ad17dd42dd486eab54b919370ff4084fb8f4a07f7","sha512":"d1422a16b070136e6d6042403dd9aabfccfb28ac1023db78c8ce54f77a366e4bd00efc3e53fbbfea176867dfa6c13f656ac801e798cace09ebfe0bf7c1eb4af6","ssdeep":"","tlshash":"d6d0c28db8e060b15a020819c0da18aae1a5b0a4866a42508240c1b1bab18688969f24","size":255,"data":"","first_seen":"2026-08-10T18:28:18.115999Z","last_seen":"2026-08-10T18:48:38.424661Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/globe-C5Tb0yP_.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"7518f865aed23a3876394fcaa93322fd","sha1":"a1144358542ba107d197586ca1347a4389bb9e94","sha256":"5f8b0f822e688c5ec6ef4739e317995112ef63606fff07f5fdfc57de46dd5e55","sha512":"c0f6a1e4fb9604a05d452fd1f82c3ed81333b78508020bcf95d44f7aacb71f630e38edfa6098c18327c17de4134ddda89711742017c5467a84d36b11a97b2882","ssdeep":"","tlshash":"aad07d1eddf81a3849002d592608d504830dc155b2424cc475ac02b923c04c9eceffa0","size":285,"data":"","first_seen":"2026-08-10T18:28:17.909179Z","last_seen":"2026-08-10T18:48:38.527029Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-QVT-TaoZ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6336ab0df8bd8441cd9ef04f916a21e","sha1":"8f330be8d4b2e22f8d426cee2ebaf0cd19f2ffb1","sha256":"56de69f3d272b01fcd6aa669e9611cf9832ece66ad0f59c3f4699b756d74949d","sha512":"780e6ae40cac59073fdaeb9e99777157dba8f2011812d53c5fafc0839682137bae9921589d0a9f15ae3fee4120fb56320d6445fe4a1e950cb07cdc4fbcbb433c","ssdeep":"48:W4ttM8CL/g5UuB85NzGfyyDW6sJk6+8L9uMgWDU3kDpwS+uZJcHFGtiEfrqyLUOE:ftU4iu5qAW63AAajZOlhEPIHthCpH8","tlshash":"2f91a4c6b199f460b34e46e1c43f857cb76a3196100c5138f0795c6929b09a6e2b7fbb","size":4251,"data":"","first_seen":"2026-08-10T18:28:18.443818Z","last_seen":"2026-08-10T18:48:38.902512Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-Bi0sWe3u.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"cad7c27aaffebd0f407658dc2f052508","sha1":"f3904f45c2ce47d29c3345d8efce8895f9529a76","sha256":"7f1232ee93475776c12ebb0b54cad274603ec9f52c2f1b8274733425c3e90821","sha512":"0928ebaa288aa89d90ff111c4b69544ed6c4c06dbf49730b22a856a13537ec5e3b29d8044b89ad110cda185849430b99488ba844d4af6a4fde30b9a3224affaa","ssdeep":"","tlshash":"dbe0c256bce89db1e326186cd01e80edfb75b364b00442a4e01875896269d56d0e9e3a","size":293,"data":"","first_seen":"2026-08-10T18:28:18.355185Z","last_seen":"2026-08-10T18:48:38.752314Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/chevron-left-CzQVKDjv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"64a2d2e5fd0b2163097334bf46b07552","sha1":"1e5118558cfa9d789ca0068d52c7f1d2cc66d980","sha256":"cc1bd0d348ee0b46ea4bfa38b629179a45a7ee82b49bb49cf9cc38765b53196a","sha512":"6e373e12b3994a6b7db9905c10e4340b39da0cf81a40b5851929e1bcc8991ecf0910d675fdd72bc1a32a0075687537d1f6644a9d5a0002b6996391c358f7019d","ssdeep":"","tlshash":"2ef05c5edea42c3d941e4d9d9a69a58fa9a5a2a5ef462514f29c007043009c06b29bc1","size":442,"data":"","first_seen":"2026-08-10T18:28:18.260666Z","last_seen":"2026-08-10T18:48:38.594436Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/extends-C0E7N7lZ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cbde063f09d2e878a92765b1755ac79","sha1":"a63ea0527fb23e894ecaaed8fe2a805da865e128","sha256":"9f3a8db508365dd0fe4f905ade8c6f4eb262b16df2a17b43c3a22a3bf12c1976","sha512":"0c65788e1e929eca85a7f0a6ae07c66958ebb31dffeb232d0e12199884a6e7c9d461fc8a10a35133cc828f5189312554d94a2e452e9487e728c0a31822c6534c","ssdeep":"","tlshash":"19d02bcd26e975ff095618aa087ba5c3f2156a41d858d7008004d2e4a8d2957871ea36","size":276,"data":"","first_seen":"2026-08-10T18:28:17.834899Z","last_seen":"2026-08-10T18:48:38.654902Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/formatAbiItem-DW6Uas8h.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"774e02befe93dd1ce33c552b18d31914","sha1":"173fb6fe78e7386a0fa6468d508f5d41e42e6aff","sha256":"e5695ee63d7e6be94d9c31710ecc2a3dd6a1e8792abe61a08e1384147d4395a0","sha512":"71085ffeb5ac4b5ed77c5378a25dd1c03e5152f85e814d1cf6a1020603544184e8edcd48e2cba40daf3b352dd0240e664dc9172a95b38c5536ad519fd600ab40","ssdeep":"","tlshash":"d42136cf3162f0539959a49694b91a53f0b5fc82800c692492788d73279ee04c79df7b","size":1352,"data":"","first_seen":"2026-08-10T18:28:18.039339Z","last_seen":"2026-08-10T18:48:38.895529Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/MobileStoreLinks-DsekRDU7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b64cecd266bb5c0c6b1e01c6623def52","sha1":"af14247845c8129bee2c71f7d064c04cb747f5e1","sha256":"a94c5e4b907f08e5addad52daaa366998f6ed03f31bc3e32da31c79a8f28c62a","sha512":"6b575e946a9564ccceb79d1e35b353f5416e7a10c1e97e6b6ff6e505727096f22227a83ab698842a2be86061a2a2e4814769412c6c02279f5ea582059862ce91","ssdeep":"","tlshash":"7a11658fe810d57f45194cebe006311da31b919cd34016f4e0b912f5a31069bb311f8b","size":1025,"data":"","first_seen":"2026-08-10T18:28:18.254885Z","last_seen":"2026-08-10T18:48:38.539531Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/_patched_static/cart-storage-enrichment.js?v=cart-storage-20260801-no-empty-clobber","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0d7b955544c6d0424f5d3fee19b2e46","sha1":"a500588292a9f4ce4c5fff862abe4525cd02c0cf","sha256":"dff6783f116ac92302b2597ead2009d28699acadeda5f4f568561240425d0ab6","sha512":"a7b8dd814673c24ec0fa542538887bc9d9fae468e2a2851bb5072eac07150ae31b2e0c218a62d08505993d5794c10ccc31b7dd59c0879243fc8f9579972598a3","ssdeep":"192:kV7micyY+qlw3KFZBKvDUTSV2xZe94nIS/iQqWsB:k0rYDUOVSZeKnlpG","tlshash":"8522218864f3b021c963307d6e5f98597834f413b80eda857a0dc710af5ea679372b8e","size":10006,"data":"","first_seen":"2026-08-10T18:28:18.017033Z","last_seen":"2026-08-10T18:48:38.551291Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/mutationOptions-Cwy-JuHf.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d2e0f6c34d542ed9ad409807490393d","sha1":"ab7d4078f2e36e2570cb85e44365a0bf84a40356","sha256":"7f2bfa9aaa442ed1e6390989ea6595538659573427032971d639d87600f22f10","sha512":"26ad33c2c99930d45e21a92a9c135570df7e1110c543ca0b4183fa8cffea1963b48acfd0f14f07b09f1101d349c3a7acc5514774b13ad1f2be78c27f067a6ed4","ssdeep":"","tlshash":"9eb012ce74f1b7f068630c25411b0586513ca0c4f1064238500844752460460e526c27","size":91,"data":"","first_seen":"2026-07-16T00:57:04.802901Z","last_seen":"2026-08-10T19:05:30.061063Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useCardUserInfo-BPLCRMyP.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"a49bfbc3efd2b812cfa39d4ca03b3deb","sha1":"ef483169092b7c215a190817dcf809c2ef06d70d","sha256":"6b780a5bbb1decf9319a8e12b8c178f91ea3331d626d3047dd716fe7e5c76a32","sha512":"df6d7544d73d6463d6ed542850320013fdc80158de5a3ac7b3fa22228c1ceaad17444f550d35e917a793457dcab787208cf4c9a17f4d3281a019a6fe3d074e6b","ssdeep":"","tlshash":"dff00587d49414ee580d8e05c1760a495bd074a2f117ef8cd5e045795339362ad92e13","size":521,"data":"","first_seen":"2026-08-10T18:28:18.092041Z","last_seen":"2026-08-10T18:48:38.57842Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/createLucideIcon-CFh3KSiU.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"14c8b117e3d8105db08e7e3762bbcef1","sha1":"09e28b261110a1b14d5116e153e0f8b9c2c6fc05","sha256":"912c085745589d3db7ed5a32f59c68990e18a752dcd76a8a64e52b97e1c1615c","sha512":"969d9bbd9a192f79d226c5dfae15ced995509d4aaf96fb0033e55bf4c42bc64a933ea067e2786a31a5905058b761e9b0c4af33c8f44a419001f553ed87d7b78a","ssdeep":"","tlshash":"6f216244f7a93d3a632a848d871c1109d497c314be831a18b1bd092db63b58077b7ac4","size":1234,"data":"","first_seen":"2026-08-10T18:28:17.737932Z","last_seen":"2026-08-10T18:48:38.829129Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/emotion-is-prop-valid.esm-Ct7dbkbL.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf8a434ddb21017baa5baeb6c1a86a7b","sha1":"8550ecb3c304638b96889394e16dea35e80cfdd3","sha256":"060f0b77b21d5b81befc4eab63ee730986542c3b3d54e04cff6ef128490b934f","sha512":"b239762db0b87a56dfe01abe6032613bfdf05d9735f30f14cdac40ad688d82af9c6ff4d699e565fba7ef3913275ec1f097118c4f3075f3f22413b102a5e0af8d","ssdeep":"96:jA3GKipEJ8v8kfLxKTX8EhhqcsnOtqUUDfqiXao:MGKipQ8v8kfLxkvhRMoqlDfqTo","tlshash":"9491f8f4fa417d27191ba18bd6e35e47e1304592310344b2f29c3a1cc5c8aa4876fbbe","size":4559,"data":"","first_seen":"2026-08-10T18:28:18.344594Z","last_seen":"2026-08-10T18:48:38.486438Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/sha3-I3SyPsH5.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c6c6ce9c96fbd48506a4bc7a99ab9cd","sha1":"78af8643193a3f2b4cb4070580e943bb800461c4","sha256":"bb5b2edd607a61cf9103b8a6533b4fcfd9f91deaa36df3e7dc7b5a579e313189","sha512":"8048aefe04dace4df95a0ace9225d8ec4b05769697f6669c8520752b716beff4bcd0092f9c694e2a641111ee13a84557855046e8a48ad6fc6f8e4d3f46554f0e","ssdeep":"","tlshash":"3b5132a9132515ba9b8c87f70e284465d1b1f8a434054f1d7aed29eeee620ae00bce31","size":3112,"data":"","first_seen":"2026-08-10T18:28:17.841749Z","last_seen":"2026-08-10T18:48:38.695555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/sui-icon-DVZ5J9Ii.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"088514c88ab3a271f3b1494a9ed1efbf","sha1":"24a32277cb8047c6589ea7ad35605a6ab6867ca5","sha256":"2404c1d1f4a8afae64524a133f3d647eb6cf66af491e5ed43f2b88f048587384","sha512":"4c37ad2efb8d821fe2800146e431d4a6aa4906d8c9c6ef30eb8d911e583f14cf03350557f7f656a321656ed8f9dcfd7a161dbcb6f9a27c990e68fdccb896ba65","ssdeep":"","tlshash":"b23114cd6bb50dc5408c8fde7f92d49e7c14c5735e8a4915d4681fa42280ce86a66b83","size":1626,"data":"","first_seen":"2026-08-10T18:28:17.914376Z","last_seen":"2026-08-10T18:48:38.331744Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/doctitle-CXpYezUK.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"b8b4de6a2fd11af978f6963f556a9813","sha1":"85c52f97fa462f278f559c8d0c149f4679e6e7f6","sha256":"590e2587378ffbaa8718730be520485739ad8a846421a8f6f0a4891ddc26d75d","sha512":"c065575776c21934dded559c57607efd2471a8a8792cf0ad5644c9fe2c5d920779a8f2f54179db37108b8e029b9f4eeb56b34accf9d96b0555fa354272d12e3a","ssdeep":"192:6gmcN8zTUVcDCusVhEoVev/wIVUyOTX93pG:6HcaHEcwh8QV93pG","tlshash":"96e10c4cd2bc71827ee945f0b064680ff13ff580d6968d92e28c5e4421f06877677a6e","size":6871,"data":"","first_seen":"2026-08-10T18:28:18.069039Z","last_seen":"2026-08-10T18:48:38.901817Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/TextLanding--UoQo7b3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"c59306e709349a0711c3420cc5ed4a84","sha1":"a323a0dd80bba0e801468260931c8d06cc34a3bd","sha256":"0f0d6851693d2eb663d19ed5705a98d29623fb4d994cd517456ffe8178df0062","sha512":"0513329e73cf99ac0f0b407cb093d23048a7240087fb9a58772eb14f04d297a64b8ccebdc393a53a97ac0c2e1cccfd7b6fdf9f3e95e1d81b73119c012f625c38","ssdeep":"","tlshash":"fcf09728eca4a0f876480cade13913ba1375d829630194a5e06da00417352a5e87ff6a","size":469,"data":"","first_seen":"2026-08-10T18:28:18.301393Z","last_seen":"2026-08-10T18:48:38.65942Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/url-Caz6rh2n.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"2a8933247112662ade7324f2804ba99a","sha1":"648ff9d23f7e25cae8d03d9d2be4a9a054a91f95","sha256":"0f0f869e31c594fbd5c88cbc8097b21479899925fc4407a37aaf93cae5755a32","sha512":"9fa1171cbf28cb55b3596eb5137cfbc4bf5b1bbf8c6eba247cc825d57aa082432a0fd7487e2833dda5996bbdadf358c266b0e5c34fe593ca2023e5765afe05b0","ssdeep":"1536:xK8nPn6YhOjaluztpOz35miPG+QpVe0UMCn7gD3qzqoINYr4AGsQM:HnPn6YhOjRIE+eVYMwaNKGsQM","tlshash":"67f34cff7252b022179b235990bb4046f3355d97141e9864b3a8e8ae3971c4cb2b7f39","size":165569,"data":"","first_seen":"2026-08-10T18:28:17.931563Z","last_seen":"2026-08-10T18:48:38.477341Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Canonical-DLEBP2tb.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"2d2f9bd620c98da4fd12cd1bbf34994d","sha1":"616e1e6f6a8d6c094def50af6999a003ff31b6b1","sha256":"f58a540f820525ad3010e29f83c7323b4a991546d8aa8351b185791f81eb8d2f","sha512":"b0c0cc5afab3e8b2a7e288a76d8c3545d6c6500da79303c3b30f21a8747a5a685278dc25f5db88ac3b37877662db9fa008e2171b78f236f47cebaf1b1cacafa8","ssdeep":"","tlshash":"efe0689fc46528e06d080f84a066274eab2ee1d0ce480400a21c25e021b00f1530df96","size":346,"data":"","first_seen":"2026-08-10T18:28:17.916042Z","last_seen":"2026-08-10T18:48:38.414542Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/cart-E9QghCKW.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfcb7cb33d8b2ad9f8f47cf07077b5ea","sha1":"0fa1d0415dc00a2dc1e21c517803a9fe9a5c3f4d","sha256":"c610571bab1c67bdaa95ab456cceb9a3c428e1f38b1afde135fdc73ce2c4885d","sha512":"510da253d7b81b5e6fb575d03745b327550ef6071b3d35b8dfd9b34e48c6819acb3d1d589fc5901c63e0e92f000990713cec036d9271c1072f6f576b783c2262","ssdeep":"384:GzaeX6FlZiWyIz7PuFbt7pXOHqd7cShfC:IXiJGF/XOHqFcR","tlshash":"c342e8cdb6ffa03a3aa90670d07b4696a33df847dc0d4464f21959a433805539ab3b3e","size":13063,"data":"","first_seen":"2026-08-10T18:28:17.811723Z","last_seen":"2026-08-10T18:48:38.377972Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useShouldShowFiatPayments-NVGUYSXY.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"1186ff2823b2171193fd389ce52035cf","sha1":"f87c10efd123fb62bb51ca35cd460c6b24a6375d","sha256":"ebe2c00da7ded4fb4eb86563fad80c5b1181b5c4d879cf6f02d1a5cde37253f1","sha512":"74a72aba821630765b63c0e11316f339815fac9da9625fd0bee7f9f7c05aa771488f1f8ae8e7b379aca0c89ee829327ed432e08f2139b24c87225a8564b3b81c","ssdeep":"","tlshash":"8ff08b9b70ebbb7d736c92d7c9182c538b2ce8984a44168547d0d2052e0897ea251d36","size":553,"data":"","first_seen":"2026-08-10T18:28:18.396212Z","last_seen":"2026-08-10T18:48:38.323149Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/validate-Bj26h9uW.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7d0ded40efcd3cba466fb6f41003d7e","sha1":"6d03fe8d2cbb3bee2bdfe88e6408bfb1a05b3b7f","sha256":"a6fa24557ee8d0290f7d1531e1ce8e8eb4a23b7e41fae32ee4d0ae5050cfed44","sha512":"7850bc4ef4da667d43d614d1efa0a312eac8a0087e3644a08443df344fd0e1df594c153c8c6be1ef518e19c864472e9d045bc4266072d9120e86c7f47f42b17c","ssdeep":"","tlshash":"08d0a547d1f4f7d515113dee4cc3414139fde9a4d025b65f521d45717c50065573d909","size":265,"data":"","first_seen":"2026-08-10T18:28:17.891673Z","last_seen":"2026-08-10T18:48:38.585161Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Avatar-BMA0Vlrp.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f84eaf38c66b8b95459f4e1bc4d015a","sha1":"e97647799a4a02b1bee0032cf25770657b20c563","sha256":"8d0af25812f1fb893c091a1c2f0eaf10940d3dd04a5d91d4eb551496652ae63f","sha512":"16d7006ab2ecbf30fa4dc0bc19314c1e6df3fd3f244b4c6b028ae21d421a03822d4c29efc5b55ef10c74189a0c6125905c268be968520ff50e296387bb5e413d","ssdeep":"1536:eQyP59pPoQLQkkwlAUgebP1FFHT8fAlM3HuOhvmrzpba:KqOZba","tlshash":"f783d7d9a3f5a2e4f00ae7f4c62798393a5b2cf93f72c65867d46c90d61108c8999cc7","size":82748,"data":"","first_seen":"2026-08-10T18:28:18.185776Z","last_seen":"2026-08-10T18:48:38.68952Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/MarketingValues-ybT39lQU.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"f3783273bf2a926ff0bb74d42cbcbba6","sha1":"a203bb6869184f0f55fd1e147a90daf3060886ac","sha256":"3f9ed16b2cc3ce1f0462488771b60be4f3b1d276691ad17e0daa048f00673673","sha512":"c0c1aadf824212a1d93c1bb898f5f793f94faf64d379c1d64c40dd864f63b568a62d78abd4f05b1377239f89630a98f995cb7a15d9861da664d1d727b393df30","ssdeep":"","tlshash":"7521114ae03824fd83178cecc099447ef73680684b8865fcf5da78652321498f12bf5e","size":1136,"data":"","first_seen":"2026-08-10T18:28:18.071375Z","last_seen":"2026-08-10T18:48:38.871348Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ValuePropositionItems-Bfjp9s_M.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"2e4d6ca89528676e05294320d6824af5","sha1":"ed06568de5a09455b4ec9494594bde1490ab2638","sha256":"7976b8acbde06537dd2d7443c020026bc22b6c2ae8d66395d7e6323fff56cfd9","sha512":"e528ab35c3b723e7db919eece482df921d8ace9bf429964d7bef125baba4b7063b63c5b9919f447141c114096a21a46dd9e709defe255b1181e352094db2f1cd","ssdeep":"","tlshash":"13019c05c7b035fb481d19e9a9dc648e5711948cd3e1271af08d985027512d278b7f64","size":687,"data":"","first_seen":"2026-08-10T18:28:18.003271Z","last_seen":"2026-08-10T18:48:38.554983Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/account-C1ylXwxv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"52e0a0b09ab5e80989b3e63df39ae03b","sha1":"ca24f7824b71baea22484924e72d15739a9ad740","sha256":"2b34c03a7e87b8a9ab1bd49407c9778b6fed6f2ec944ae8d5589a269919a3402","sha512":"8bc15bff86828a0c14f42dcaac006e249bfd2613a4d4be725fcf7afc002990c64a9068165e6c120050819aaf711ae59965766ad9a184e3a8e80c450d17cbb771","ssdeep":"","tlshash":"94512196e4bd94cb4e4a5b25d6edbb8cadb1801eb2b3852cf6c48f5c1a4c3427601f43","size":2689,"data":"","first_seen":"2026-08-10T18:28:18.026335Z","last_seen":"2026-08-10T18:48:38.862569Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/_patched_static/checkout-redirect-flow.js?v=checkout-wallet-test-pop-20260804","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"0304e3aa9853d2f1a9e18343907e337b","sha1":"04b7a776178ba179ec25abaca2d3b3c287df2df0","sha256":"e4726258c96c56ef7d8cf1cf2325c44dfa63f83f510ee550b6553f34290e4451","sha512":"9fe08223ec3b0f6f59e7110997aa109ed30cbb86ec7705cad50d37e3749b1f5f61f6f6ed5be9a6caeb0e127cee0c349d69d532a967c8103b7ed76c038810a6ea","ssdeep":"192:bgFSQ+c3UNaigN8dXepqRQUWyHbP9cSDZ4:0ACvrpYX4","tlshash":"fcd140ae15f705200aa3609e97afa101703394176687dd493bcc83585fa1d7ecebbe9c","size":6495,"data":"","first_seen":"2026-08-10T18:28:18.219717Z","last_seen":"2026-08-10T18:48:38.770973Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Image-CJw0Bk60.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"30568af0ca4bf5f7552b6760c67b6be6","sha1":"d36b58aa8b8ecfee7f114d6c2f05b4b4e53977e4","sha256":"1e4588220cab6ffc66a988394bcd9b3dc60fc7bdc3ad3d0d11c6b195e032d749","sha512":"11b4ed5bcdf3226c77172073c4d7bac41e2d819d5e5318b3169b67fee8f9d234b4b67ed9fb0f804fe27e30f04f5a30a19bcb277ec989d3a01df88d4a7838408d","ssdeep":"96:Rntku7XHzeWhFhbvbWV2QSCbJ7bE+T2Nb9Strwcr9GbUCVFVuJrKVk0RZuH3:RnWSqw/fS2QB9E+T2F9SVwMuUCZuxKVm","tlshash":"44a1d759737d347df30659ead0db042e6135a3059b1b4d2cb3f5782742a04612bf2f66","size":4814,"data":"","first_seen":"2026-08-10T18:28:17.8898Z","last_seen":"2026-08-10T18:48:38.764324Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/translation-Cdb9DzQD.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a14433f04095cf584ee2409c88202e","sha1":"14e294b6843d781c5498f3b63f89f489670c7830","sha256":"b2004b3d44dd369a04b7044646c4439b50f802b35482985b67c5a1d196f92d2f","sha512":"a8461b71ac3fcfe1c7571a216818e9a3db52beb5ef143cdfb7be3e7ed94714960e9a1a75bd3eee791c5c5ce2b8fe60e88ffb63a452dcd66f0a63512a4c058c76","ssdeep":"","tlshash":"55e022cf3dd6f370a68b462490b3948bf26946c8003e2c5843849061b82086833a7ea4","size":385,"data":"","first_seen":"2026-08-10T18:28:17.735739Z","last_seen":"2026-08-10T18:48:38.815882Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-BYpX_itA.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"8341bc2fae926661e9b5fccad297a7a2","sha1":"be29de14c82975882ed1fcf21817468e03484d25","sha256":"3c3f5756c74b2ead6b3141a5b490c1fba9311838f6462d8cb574896cf8e1cfe0","sha512":"60dba4347828a95d53b504ef41c45faacc17af3d2f970ebc41b4b813ada47822c64a91b66d4f76920f539705efe2a14d88f7502d488510c19f2691bb039296a0","ssdeep":"96:siNP4RHbk1UyPyAgUybyobIyw78yDCRLIygjKEQGZscjuKcBRO5CncVhdH3cHPs:/0bHm6LojNZsXKpDXcE","tlshash":"06b1c8de302573e5dedcdcaa4a23103d5b1a9989558e011db98a8f2003593c4fbe7f69","size":5452,"data":"","first_seen":"2026-08-10T18:28:18.29486Z","last_seen":"2026-08-10T18:48:38.904162Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Counter-DHrtJ36z.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6f57938715855bea997af8e621c3bd7","sha1":"4d17b9eb71084aeb1bca7f85ad30b0daf22054e8","sha256":"23cb600e2ac5482929e4242f8904209f24334b009ce989d5b376695152bd3ad0","sha512":"ae5816c65c491510fb632cc9f8aef7031f214632137ce764b9db52ba0e42d0efbbf610b7596b7df3679733f5c1e2c147bf8bf4c59aad9b28b8a6c65bb8f5c979","ssdeep":"","tlshash":"38014142f4f0b9f2961b8cb8004f57a5735100c9cf0e3d79a0b274a81aad4fd0b29f62","size":813,"data":"","first_seen":"2026-08-10T18:28:17.829883Z","last_seen":"2026-08-10T18:48:38.343191Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/misc-CR5auoDY.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b68e8c663db1e2c636171d63a999f1f","sha1":"2c06198666609cc4a8f96b4753cc3606a597b3e1","sha256":"ce64d50741f84cd0928fa5a56988ab585a23a21367db6190ac8e45477ccf8e62","sha512":"457e128ad3cd9242beef7c70fbf0e8adef1d2f3f1ad26e5d6b5f51d52760347e19d70245b1b3542932f6e8aceeed327ad7f8790abdcaafa488871456bc0df39a","ssdeep":"","tlshash":"e8c08c9e26f83aa853290a35460780a1661572cda1480b5ca090126068704e6122af08","size":155,"data":"","first_seen":"2026-08-10T18:28:18.178588Z","last_seen":"2026-08-10T18:48:38.3459Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ethereum-logo-ZF3L47fk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"945bab1653996d11d6b6967b5809be5f","sha1":"bba37ebbdabdb34b056618d70a138c82f01d41ed","sha256":"10d74de619fa6742083dadea9b2deea4db749228695892291246adb24271253b","sha512":"89eb53f0afde924dc471642f26071b969a4ecc2b915234c4d0a23238d0aed08059b5e7ae2ec2025b203fdc60aad37ec93e146e65a0e05a800e571c8f12a3a5b5","ssdeep":"","tlshash":"bd21fdef78a00ef0f10c4ef96b2b260f773a90f01b6645a8748c2c09c1625c4a71dbca","size":1252,"data":"","first_seen":"2026-08-10T18:28:18.42919Z","last_seen":"2026-08-10T18:48:38.447412Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/errors-DWM3BVj3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"68238f581e25d81dbb01d896061a134e","sha1":"c62d958aea63273cd6e3c2ef7b7fd8a5666ce045","sha256":"602112b7618731afa1a16aed3e5376e6d4cec79a266090fb1cac43f7d58e7c87","sha512":"3360ff8f736043d998fe99174b5dd14857454a3f05df557d0d2219e3fa621c230ed41f4d350a64ac12af2bf3c85e2e3aa2baa58bdc717847f682193c93202bb5","ssdeep":"192:PvDM69Z/d3LUIqpTWZrjL8/sA3k4gyDeSIy:I69voIETWlEB3k4uy","tlshash":"3102534e80b067e1f8c987e89073c58defbb50a4c52c84f4392493a4235ee95b553beb","size":8848,"data":"","first_seen":"2026-08-10T18:28:18.216535Z","last_seen":"2026-08-10T18:48:38.911883Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/_baseClone-BmwNfYGx.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"5230605769e98b2cf6f23f53ec70622c","sha1":"dee3633cff6710f8de1eef993559e40e6739ca18","sha256":"aa28ada8ce961a8d5d92339bc6b38a1cea8820dcc38999cebe9c4f3c30ecdb6b","sha512":"e8d668c7733dcc807d8ac7f693f9a26386555af4b02733dd1c1844f50601d9a1f5182fe185f69302f8a8de70ff69878bfa058b9f9823e5cf86d5b0ae5fa8b067","ssdeep":"384:pfrTkk4drcVm2eo/viccct8VbZHS3YZpIAnEw+Xet:pfaZcV/eoXprtQbQoDxERu","tlshash":"004276c575d1f0a293a76876c06f1c0bf23c2c64a84cac58e4c5e2d9bcb5519c777e2a","size":13090,"data":"","first_seen":"2026-08-10T18:28:18.431218Z","last_seen":"2026-08-10T18:48:38.534855Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CtaLanding-UPW_JphA.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"a4280ae4fde3d123054136c8a14fd4ae","sha1":"1318269b0c8267eb884440f16bd209d8442abb64","sha256":"23860c03f6aadd08c088bffe89486bef114aa54f17df1f98c12d6298cc02ebd9","sha512":"860e7265020cb6d4540589c2674881eb363fff06e080d753c4053d2979961ad059ec78b72725e75fe105796ef270741f06dba6f3be7fced916a03222c58065b4","ssdeep":"96:UU3+5BAe608J68YM0dT+CuooqLD6/TkwJ10UnKGnwLP86lpKjqakOMJ:vR02UdT+CX1GvrG86lpK2akPJ","tlshash":"0ba17486e0e476fa641748acc0bf422d72a990bcc78ca2edf4b955580381599372ffc7","size":5088,"data":"","first_seen":"2026-08-10T18:28:18.245995Z","last_seen":"2026-08-10T18:48:38.579418Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/testimonials-CxDwtznw.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"ea826e0cadc7f23b8e2aaeef1df61d4a","sha1":"07b8579cf7ed0c0a3d3d9e20fde851faf0a3e325","sha256":"7df381d32a14878a7884d33cf5d0266284238383e0623496a4fd4340808e2035","sha512":"775bcb8fdcbaef1f2a894e0509e8cec9b41b09acfbbe1b8e838da70f750a23eedb64a330cb1f5b9f898fedd085d6ce09e1b7d9d3901d9fb452e39ded84080748","ssdeep":"96:tVw2RB74mfD4gI/XOEeV9jWVsrRzQcnQRJZkBTVxSId9VL0vii3jzMTDt8N:xBGCpSGRzIRI4IdqM+","tlshash":"ebd18599f0745cf9b72b8de8c12fe11eb2bae41ece010ea9f856746411c92d0719bf46","size":6416,"data":"","first_seen":"2026-08-10T18:28:17.904729Z","last_seen":"2026-08-10T18:48:38.460426Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/shield-check-B4hzhZo_.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"a3d2d23e704863e4465974d4b0a9cd59","sha1":"fadfe113b358dce4e15681db5f28e01e7c5f3061","sha256":"a89a40e5a397b234e6267dbd24f81cdfaad315401bebee41e16f570cbad303d5","sha512":"45ed977294f388ee528d61a75ef61e1acb351bec421dd4b49f89c957a1d0a5fe186691140af02e456899759414b1c4b69fa4825d16730e4e64d583df7ae8dab8","ssdeep":"","tlshash":"bf31797e5ece2bbc02439794510ba800978f94fc717e4991f15c557b0a92581ec3bf51","size":1620,"data":"","first_seen":"2026-08-10T18:28:17.795877Z","last_seen":"2026-08-10T18:48:38.473419Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-assets.i.posthog.com/static/posthog-recorder.js?v=1.415.1","fqdn":"eu-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"318b328519c508c911bcdcbf07d44a12","sha1":"d9a8fb50fb4690e2780286db72c60214db8697e7","sha256":"88630bd4ee0d43246b023d4eeb40f76f3e7f3fe8150f5ca816210dfd7fb8dd90","sha512":"3c6e3b55627ee550ec224d3101e4099917033727f3293c0921d34138394390e662ead4c0ef78259afc221f61bc3f0914d28222ad64a95632ede283c6cc602cf1","ssdeep":"3072:J71DfQjbAxIcFEwx/DpZClhf1qJqeSSdqgjHofQDh+15:V1DfQjbzsx7pMlhf1CqeSS4gjHVUT","tlshash":"21043bda7765a0335bf65125c06f0203e2227719204a8068f26fe9e536bc9c771b7f7a","size":179305,"data":"","first_seen":"2026-08-10T10:42:54.639814Z","last_seen":"2026-08-11T00:40:10.58942Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Scrollable-BUIl4HGK.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"b878888210dfc5856aa6ed37b249c93c","sha1":"17916d0843b8241ae6134374dd09feeb28f562f2","sha256":"2a91ad607bb7201022c0e24568e55526619ff3d38f6a55a44ed1c30071d36c42","sha512":"4c3bc37cc2734e198dafd18a76402bfa9e1fc0ef63bbc49eeaebd58cfad1f8d3d968d70f68a0f6e2be509b391e0f18b9d0582d4ffa8d10724df2c83b48cf24e3","ssdeep":"192:uY4XNk8eV7ibURsJRX4AQKBqPblGy0A3fPsMXBIqTlGsAUJ:QXuIgC3X4AQKBGcy13B3GjUJ","tlshash":"2642b86ba10168b0a3fe85e7c07bc32cab1a50d6674f01d4b1786f741a55bf0b386bd6","size":13160,"data":"","first_seen":"2026-08-10T18:28:17.894112Z","last_seen":"2026-08-10T18:48:38.591314Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/info-DN6-0mey.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5dbd2bb9ee6d31772c538667ab05f78","sha1":"69cbecce5ce9be42385e82571acd3788735a2cf1","sha256":"c8e8ed15da4a2a6612b0a18fdb9f933ae289dd6724c53f6a0c5ab155ef53dc3f","sha512":"1c783f27f07d562aeba8caa7538d9c4ff30bfc9df19b34afbee7b9ecd96403b974310458941b2d498df1f90cef399e6ec1333297b5bd5cd832c3d2a3ffb07e0d","ssdeep":"","tlshash":"eaf0c90edab80cbeb4190c8cba2aa08ef6aa92a5af421518f78c257002000c01322bc0","size":497,"data":"","first_seen":"2026-08-10T18:28:18.31976Z","last_seen":"2026-08-10T18:48:38.897144Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/json-ld-DgyWTjJP.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"6bc3523265d9ab768acfd94991aae4e9","sha1":"08924a72367ce050471b49cf2d06d14b1c652caf","sha256":"84e647fd5f5327a0ecf4a9880b9eb10a5a0807dc007a4f75acabdceeb9f57a01","sha512":"57341fa507e96513cf6bff7dd5b55a1cd4927bb875f7296b2852d769f673cd22a6ef70b046943ddf4fe869244e3cddb7049457084b354f04c55f308567ba3007","ssdeep":"96:23z/jmcPPNQVLcZuhxiR3gffEKN3CsuUAqi4vBmf:Uz/FPFQVLcZWxO3gffEg3CBJqi4Js","tlshash":"a9a11ad7a054f2ed275755f0f0f2220ea237e214dc3a04d8f707e37a22a32a91626f18","size":4815,"data":"","first_seen":"2026-08-10T18:28:18.170195Z","last_seen":"2026-08-10T18:48:38.809054Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Faq-By_4Sa_k.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"eed87b293b7607e901ae7f929fb882aa","sha1":"7ea10fdfab52ccb216cb33a551563da7ee3d1e4d","sha256":"4360be6b1c111e224fdfe9b6e3be67c42507b9d11a98f88b2cfac2498bb54ddb","sha512":"e1dce39077a42975138abffc1d1f7fad2c627d39682f48a60f0d7ba013a3dea7be9488de4631e2f321950e8b639b6c3f25f5e0b5f290472cd9d237728f35b765","ssdeep":"","tlshash":"6641020780906ea4790b9ca88069821ef93fd11cdb4e14e4658b517c1b41aeb323ffc7","size":2094,"data":"","first_seen":"2026-08-10T18:28:17.806471Z","last_seen":"2026-08-10T18:48:38.794994Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useCMSLayout-5u6YBUAs.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"77b70058b1162b3b1507860311432fc0","sha1":"25f72868b48ee704ccb55f8528ba07a1076562ce","sha256":"1f464e98a95adb3756d2354ee1ce0f28ede2009fd5b940a5a818d8a255a440ab","sha512":"57b2885197519e6c386a5f51f5ff75211b1815047e3bd6d1eb9f7850c48cb02a75d9c72d03d1170b70a99862127b885653ac4139a3f843361487192d728aaf9a","ssdeep":"","tlshash":"1f41c90cf1f7183968a45ccb811a2651126c58b428084fc856cf5ebd1b70edda75ae7f","size":2314,"data":"","first_seen":"2026-08-10T18:28:18.304784Z","last_seen":"2026-08-10T18:48:38.610421Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/debounce-D1znENOK.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"3921958d0e6b0943c195d13f0cffdee0","sha1":"ea8d28a2d8c84977c5a8b9bcfde6ed6fa7c7cfc5","sha256":"0c813675f924d6e1f3b12cdb74d5a6938c6e7ebaf8923b3386decb6245f96317","sha512":"ed0c92f0d025950225d139be31a7c0f49ca516520f94e4b1ae1c3ac3b61526702eadf8c30f114d25bcede9b2edf6c4cae77def1b632671607438159007321cbf","ssdeep":"","tlshash":"351120d8b6c6b8d277a2c839d0bf561bf1397490488c4061e12391927a3067eea53dbf","size":1072,"data":"","first_seen":"2026-08-10T18:28:18.382739Z","last_seen":"2026-08-10T18:48:38.904947Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Spacer-k38gkIPd.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c74cd570a7d31fda43afe10d231559e","sha1":"8a36f5be59745491f7a44d90035499f1c07f3ca5","sha256":"4690dd355e4359f97544247ed14ae598f6250cf77462f7c39cd650224e9a8878","sha512":"a53aa71f578721e3f0a544f0b329ed196058797036334ef533a5e1c04b7c597c988f5e5f654ee7e7d68f2f20446279f33931c1ff601fb30caa007907e8cdc657","ssdeep":"","tlshash":"a7e0f10a5cb02e3784366c48e3441fc626a0e7e98306315cd37444640719ae0e630f40","size":383,"data":"","first_seen":"2026-08-10T18:28:18.337665Z","last_seen":"2026-08-10T18:48:38.857248Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/trash-2-DOrEvYeo.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"5106c928a62ee444d0eb97a02337e099","sha1":"0ba57b4720863b42b48dbd02ece0e9eccf76e721","sha256":"b62749087ac253ef7b477e745aaf06f955c29726c803177357e2c8d84be4f97c","sha512":"14bedfac2cf0669833c470f56d722287fd84b45e344aaf3878117297068f1c0c49a76d334aef7cc8229673499fcd6de4ac3d8491c8c6240dc3e2a050aa457bde","ssdeep":"","tlshash":"73f0994ecb981cbaf01a8e5d6e5ee94fea9b96b6ae5b1515bb4c20b041020c00736fc0","size":637,"data":"","first_seen":"2026-08-10T18:28:18.053464Z","last_seen":"2026-08-10T18:48:38.516753Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/constants-DZxgRpCO.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"1dfddc70ef7aefec70fbc99deef1f433","sha1":"e149af1244e31188c54c9ba929ecb877d4aeec04","sha256":"c3e85713c190d0f45f5452b89231f25a1f27195b247cae30440799f0ad081754","sha512":"3afa43cc8a193e8f031df3dbb136e52a5131abf2a51b6e677d35e00128c945de39216c451ed958db7a3f899ed3c5f12387e57de948c65a7b3a1ae64ffce43352","ssdeep":"96:PZ1///FwrH/co4/muySjY7ljTvnSNl0cV9F59ieQEO80R9mRLoyggo:PZ164AuViTSNl0cVziT8k9mvggo","tlshash":"7fa175cbd06c85b7b686b2d4a1502607e07967c4887cc9e8b4946f0c02ee95fe7cfd59","size":4958,"data":"","first_seen":"2026-08-10T18:28:17.710507Z","last_seen":"2026-08-10T18:48:38.868067Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/wallets-B-XHvOpk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"450a2c722633940d1117410d6259dad0","sha1":"fe95c0a97bcf8e267c1a0498565754f3d25d8f9d","sha256":"3b0276a021c922e18b7cf6df81a9dbe349f46994686a1cf711661e5974dec9ed","sha512":"18c066e513841fdc7388607bf0c35c0efff7da50c8fc28a4e44804897a941bbbe60ae4a4352f083011aec46ca3a94c7f174ca4132a110c3ac062daf1aa4c4811","ssdeep":"","tlshash":"324176dcb7f1f03311f79f6942570e22b132e74b152d58209250a9632274c9bca66b80","size":2142,"data":"","first_seen":"2026-08-10T18:28:17.925587Z","last_seen":"2026-08-10T18:48:38.601439Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useAppAccount-CxZc0zV9.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"8583cad4a9b9118e345b6b5e7939ad39","sha1":"8733bd27f0fc97fb70e137a8489cf30f9e94c087","sha256":"beefc188a2bd683b2e6aa98bc498bf429bf3f6cf3daee031a95acd14d1cb70f4","sha512":"f1135e2fb281f71533cb4813019e46cbf1fc1ba9872424c503077ff1eaa9d7b99dd885da572aef6fa626fdd1cfe5b2f918f58ae14481de60118f407728dacf85","ssdeep":"","tlshash":"758176d890a830597f1799896c2216a603246ce2070193ed76fa91f3d7b43c5d2eaff3","size":4004,"data":"","first_seen":"2026-08-10T18:28:18.152771Z","last_seen":"2026-08-10T18:48:38.303277Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Experiment-ioY28yAQ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"247a56a54fa735e2fdc876f0e9f6033e","sha1":"1ae667f56b3566102dfddf57df4b5ecfb975f6e8","sha256":"dff60babb9e6744fc5b96438bfa6f032088f803992f9bb6f93240b7b19f6da08","sha512":"084a726bbdf5f9140ce17173bd639392f6b468eda960c12cba3630356b38c467c3220b1e0bc028c71bc875fea5bf510e3eab9af25ce3b106a689fe0e1b33575b","ssdeep":"","tlshash":"3501bd0de95057e1990e48f9ca19a5fbb3396048f218c6b0b119141c3766dd46326fe4","size":751,"data":"","first_seen":"2026-08-10T18:28:18.28576Z","last_seen":"2026-08-10T18:48:38.677543Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/PageContainer-B60QppIv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"195e86890491bd5c8738fb77d6404dc3","sha1":"92af9b1b6959fe7e0bb533a8fa0e7dcfb0541216","sha256":"1e5c9f97babb9457dea55542c49c6587e9b5bc63302128484d4ec25c3dcbfe8e","sha512":"ceb0ce088717127bca213845523ce0800ca6cb3894ddcde2376006bfab32e09f5d68b986316d1a0cbd703feb5dbda15c8318a113d52b9541537ee720560f4a41","ssdeep":"","tlshash":"d2f08b5dff131676e45bccdd800d00f76a22b2579b060942e024c07596621a0a621e8a","size":532,"data":"","first_seen":"2026-08-10T18:28:17.951495Z","last_seen":"2026-08-10T18:48:38.8006Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/triangle-alert-BeOnRkwa.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"a066ef9e31a93b98a51c1c9a43919c59","sha1":"98831e8204ff1d8cdd7a385949deafed25819206","sha256":"cb7ccf0fcbf740d8a80fb561d34152d5fd56c75eedc17128489ebbaba9f6e468","sha512":"69ac94646ab55d40e2ae90faec2934ddd262008c2f4784b66a8ec6f2eb919ff782b506cbee5f941bd30c51bb709d7f660f9e18cba789f66c4010719d5f14aab0","ssdeep":"","tlshash":"97f0ac0ede5a0dbca01a0dac6a5de60fabaf80b0fb562519f74c11741310480c727fc0","size":574,"data":"","first_seen":"2026-08-10T18:28:17.850522Z","last_seen":"2026-08-10T18:48:38.577317Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SiteHelmet-DIbDiYs_.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"40b3fa081fed1b82cd522b835eb6d664","sha1":"edbd9b2171b57c8c0079dfe26eb0a3821f4360b4","sha256":"02da87fccf5137973b99d713080988db05d76ad158dc875dac4ed086c9289913","sha512":"9fd38750255486e6b29f83e2f396bb96a59eb0d38727c4a92472adf9b9892a99b3ed6e7aab1f52691ac6691eee1ff178adbe38314e1713b76a70bc890c1954eb","ssdeep":"96:Jff7x03lARzTbCYiXTIAj4rwzfVgfBxwaaI1xGSmGbgHCXDU:Jfl03FVWwzfifBgI1xGSvgHEDU","tlshash":"3a8195f7d42074686fa74f229437245fb63dc08cc8bc480576692d4a06d93d5e361b3e","size":4199,"data":"","first_seen":"2026-08-10T18:28:17.919209Z","last_seen":"2026-08-10T18:48:38.285289Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useModulePreload-D69htP2x.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a7d730f07f52eca341542e1cdf6cdb8","sha1":"37554ee1ca3ba44d0f509b6f7f4957a472f7a9af","sha256":"ee98db9493a17280f6e5b43764bc9be9972b524d26f3eec77453db596fa44019","sha512":"c217637f25f780d964e4b3a1a6f3245039251c3bbf1c2c4455cfd95db5f7c31987254b83ff0178c6dbaa242000fb2e38039cbad7017ecf53562d13982ce0de5c","ssdeep":"","tlshash":"ff61dc455a458bad73ae4acc954560d20ae4870a562ac03eff773dfcb4a8d848161ff3","size":3439,"data":"","first_seen":"2026-08-10T18:28:18.281063Z","last_seen":"2026-08-10T18:48:38.540551Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/AcceptedPaymentMethods-B6xTuugc.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc125b3471d8cef83fa769623cb49e2a","sha1":"e5398928cfd46a769178192fe81a3897657d35eb","sha256":"cbfe2f71c7a876ada6871b7c67b18612e25a729a48691ce3436d7aa8c23bd126","sha512":"393ce7d9f65db5722b60028cb3212e078697df294a047ce523c63511cf1b6657eaa48f756f2d73bde384abe4ee294ee3c189e3415d01a3cf67eb1c652b9b04da","ssdeep":"96:TqtWMJfAbfRXKHJtQf9k+Gh4dSW8QYTCx6AcP1zqAQ16fWBxdRu:WtWIfaKHJtCZK","tlshash":"25d1721e11c4358ca0418caed623242fba1af39e1f5b0d44cad1b858abd46ab7b11f6c","size":6533,"data":"","first_seen":"2026-08-10T18:28:17.837568Z","last_seen":"2026-08-10T18:48:38.787473Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/landing-EzeWBxTg.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"68d8535e0c9091691e8c41a5ce7a5d50","sha1":"690c9e14b73e937f8ca83071173748b5b8286cea","sha256":"3eff8118e9b795fbe082a47075b6afcb7f84397d08eb0723a8dd21e6a6ae556c","sha512":"42e9b8a9e382569f38c6b3c198490c203b5f565e52ddaa8d59d2ff18025b720864d817113727be54b70339c9ac37c831ee4aed165990fdd6a90b6ab5de208ca8","ssdeep":"192:BkOqtGjQnOQCUKRZqptn2JMf9kQ1aj5PYIIakf:NqtGjQOQCLRZqptn2JckTj5Qakf","tlshash":"f842c80be4bc32b179960ef0b077855e7abfa018860950f0b99e154427995c871b7fef","size":12384,"data":"","first_seen":"2026-08-10T18:28:18.409899Z","last_seen":"2026-08-10T18:48:38.908698Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/identity-BLhiA33i.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"03ea1b4d7fd76ebfe4af5b2c94a98eeb","sha1":"3af210c114c43387aa157a6ef4e2284fc72b31d4","sha256":"1e409f85066adbf7b3d7d4246ae0f1138d659bbe2d75b63c35cfb0a69052f405","sha512":"21af8084ecf4845e7d42a424a0b53b3b1278371112d51bea9ee0e5e6f9f629d952fd33918e32a0c576f3eb2e48a11739b9948a05b00ea8f4a3048709f19e110b","ssdeep":"","tlshash":"efa012cb74f126f050120c34801b4096e41890d4d10442547010106425304704830d10","size":84,"data":"","first_seen":"2026-08-10T18:28:18.126744Z","last_seen":"2026-08-10T18:48:38.910711Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/mail-D-6MGew4.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"8c4ad5cad223a75797aa865399234e89","sha1":"9f7e26a19b4a35afa85ddb1c99282137b9ac909e","sha256":"ec7e23e0ce7397e31eef78fc70b6b3bf7f447fb29dddd185cc60a9ab7256d49a","sha512":"f469425f96460cd6fd9e5cb7f8bee9dd2ed608afa4edf7bcca9606e910e1e9c6c465dfc2857ac918078ff973f8dfde850ff9dec000e396c7b35c8d4a0491ec47","ssdeep":"","tlshash":"03f0c01eda782cbcb016498d7ba8664efb66d190ff421604f2a9247003001806725fc0","size":508,"data":"","first_seen":"2026-08-10T18:28:18.342024Z","last_seen":"2026-08-10T18:48:38.463411Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/use-reduced-motion-Dqbo-BtS.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8f4c2b9c56382e20860df7b217dd216","sha1":"8a9d84d5d382c81060e7edfaba50f85e3db2cd1e","sha256":"c718967ef0d5e1c29f5b03e8827845574413f9d118d8158c7ba272f041dbfb67","sha512":"f976268455f6619fd33936e98296014b35813e045d86f5208f8ee4c0d95960da1a7031c505db46b5e0d6b666a4092a1b6279165bf290a25b5448c2d881d1adf8","ssdeep":"","tlshash":"80d0954db8e1dd73d617045d403d7595a53571f5635453c850541030531dc52dc35e24","size":258,"data":"","first_seen":"2026-08-10T18:28:18.025143Z","last_seen":"2026-08-10T18:48:38.877925Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/react-router-navigate-Dyd-ATIK.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"43208d4301dff7d4a49f17269eb519f5","sha1":"b4e6665cd28afc6ec2a32b81ac29f127df97e152","sha256":"ae2a1bd2bef5238418ebe988d5f8dd1df3d3b796ff3565dc6fc4797a5754ba7d","sha512":"e489de098299e809277448b228201a01bf5940cbdcaaf7793f705e6bd44b28579846a5ac18fe2cc28c97f88a0736e4bb521fdcb6f8aac0d6de7f8057ad95cf88","ssdeep":"","tlshash":"90b0125fdcf526f1a4320c3ec1971486963ef08fe32701c420c6d1901563cf89838c65","size":105,"data":"","first_seen":"2026-08-10T18:28:18.303005Z","last_seen":"2026-08-10T18:48:38.444832Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Combobox-B-kdqndR.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"408da09294ded71aa5b0815daa972c1d","sha1":"f0d2aa92484e078577d50ea9ae5eab7f7e21b619","sha256":"904b9e1bfa626adca7ff57c31579e53411d57d1c18827e206a9623e2a0524468","sha512":"9b359b02dd93e4f73f9d5cb74abf3868b38de523eaf888e12707285ec0025bfd0613c2ac5333a4074303652c14d1efc3a4ad8c29f76642f79771490e5e75361c","ssdeep":"","tlshash":"6e81754dd06071f9a71f48a5802b816e72eea2189b0dc1a5e4bb5c543365580b6effd2","size":4048,"data":"","first_seen":"2026-08-10T18:28:17.973689Z","last_seen":"2026-08-10T18:48:38.652568Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/UserMenu-DUceNmTs.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"11bac6d8014c2f0a2df8c70cb3a31463","sha1":"f4a5edcd72244dca8fcf1fb02f110eb673d344e5","sha256":"a95379ff72d850ee56c46b4a92f0912e512f9cc43c6edd9538b11b44b5f2c085","sha512":"dd2ec619f3091feee40d64d4960a030bdefb1a2501e0fec71b3eda17dda7173eb94910530256fb80ca4737e822f1a12faec24b8cfc6f6d67c123cece1b7eb7c2","ssdeep":"","tlshash":"ba61300994a05bfcb35c4cc9901b20aa26e953498604e4befeb72cf4735a8c19196ff7","size":3391,"data":"","first_seen":"2026-08-10T18:28:18.045171Z","last_seen":"2026-08-10T18:48:38.688284Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useQueries-CgYiEvju.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cb94470b173bb0df50195663fbce633","sha1":"e1c655b589d2c60993043a5b7d6a9f1b54b995f6","sha256":"4b78afa388e6541b42761a1754ce7013b1754ee4ac00dcae6a59b2d101a37886","sha512":"3a1772319988798eed1056e515fb52942366ba6bf2d7929b866e885c201be7485ab9185d01ab259121b6d1ac34e165e4606118ab1033b049b12d5966998a789d","ssdeep":"96:4QJHEN1sua+jmd6O2YV18qfUInTOoTj2zZeT8AiLRSK4b73YPonZ4tmiU:H1Y1sua+jmd67YV18DQSzAPiLGQwZH","tlshash":"899156ced753e1ba72fa98cac4bb8065f138e7150c1e0024b1984b4616f5a5ef6b1f31","size":4310,"data":"","first_seen":"2026-08-10T18:28:17.855655Z","last_seen":"2026-08-10T18:48:38.722901Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/bitrefill-card-5OngOoVG.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"83ac14e1e941e23e1eea26b953c6d26a","sha1":"541d7ef3c3ed4a90b62f450b4afbb988f7d6e2ee","sha256":"39ef52d45648dd92a170eacd38a39b1fcd8f07049c72676542349fd807b8ebfa","sha512":"0b335775680ccba93df0e47a2b962d738c5d3dbb421c8897c1c902e6320706f7caf7e204a06d2b7f5c05c26998e5ec3f78bdd58e3185cf3b8d9838053d72e58e","ssdeep":"192:QKhNKO/HCFSowkJyABTXsD+qgUDI7ISDaEFtb9YInfxDtLFjzBc:NhNKgHSSo/J1TXu2aETGEnb9Y0JDthj6","tlshash":"3832729bd569b3b9541bc0f1306b438a7ef78018daece796a919f0513018a0833f36de","size":11536,"data":"","first_seen":"2026-08-10T18:28:18.086906Z","last_seen":"2026-08-10T18:48:38.493419Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Image-DIEZcPp7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"97a04a8980a50b22baa24211b7c9865e","sha1":"0c0cbdde5d2bd1d75ce9c5ac9aa6393fd8a8e6c8","sha256":"90188a76ff56ca0931c07413ae87a232e82d120a57974994e683a8cebcc9e4da","sha512":"4734c67f552706f2659aee2990b2fa9026eff9c25048d3c2fd4b204f7fb11fd3e0ea947fc1ab8981bc6aec8d86166658be3b58efa1b7c659c5e9c630aae6396f","ssdeep":"","tlshash":"2021222bf0f4343e610a99e9607f5569b13a70a4cb440744fbdf64f83730095ae3ab65","size":1398,"data":"","first_seen":"2026-08-10T18:28:18.000302Z","last_seen":"2026-08-10T18:48:38.849617Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/icons-CBF0S1-q.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"da32b7d10a62390b837098d6e5e88345","sha1":"a312dc00bd7f57e017256dbbe1e956d465320272","sha256":"5db8e644a76cd05114bc66385f671b81c1ff5a100bb4b4fda894c450b0ab30a8","sha512":"49ee1416ed9ceaf84ba1aa26ef881cf3e1238c5fc25fda299e3f68a24dd58696445e15a0c3923e1c502f9bc86284af1dc7dd42774ae31ec71e66aa08214936d9","ssdeep":"192:mWZnnZI25h4h9iTGNZE85m5/wsn5O+8ombntT4mqU0jR19VFEZ:nZ15h4OTGLEmm5/J5OFoanhMr1LG","tlshash":"a772ad2f8e8e1bfc450287a4190ff801978f99fc71bb4a5272ad517a1ac2095ec6ff15","size":17014,"data":"","first_seen":"2026-08-10T18:28:18.312244Z","last_seen":"2026-08-10T18:48:38.854295Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/auth-DkVjbugX.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"980ebe9514ce0a0cf4ad8aa516f137ff","sha1":"f03ebb5eae452de96d3385678cb5603755e32c1f","sha256":"3aa061f706a8942dbfae46a0384d65d3a83c38d45f1d524a080669c7c998ecba","sha512":"ffaba2a177d805e6bb00ba4a5847c515bd043d5814a28a7b825270fdecd8eaf2e844737e1a3be2e8f9d919f3633e051208a1957b5a3f604f0643e0ae76aa1d60","ssdeep":"","tlshash":"71f02dafb161b136054818e690045ca39222e4e8c3581c4d80bf03d80baa843eb3bf07","size":631,"data":"","first_seen":"2026-08-10T18:28:17.772784Z","last_seen":"2026-08-10T18:48:38.761221Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/FormControlWrapper-BssbelpS.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f012a301fee24b1400dfa9e4ee99126d","sha1":"450c29c591f3de2deafe288b41cda50014ca2a7c","sha256":"5895ec6537b5c8298f4fd92ee99b59e283a90c5cedd8c0262ca17e62e87e6a06","sha512":"0c4903e93fb02ee97c27c4fb0f80ad828b67f668884bb7ec475e6bc995f23cfee160b577ec61aa6a9c3a6ad40e9b2c143f4a77665ab5c08b7ce84bdef2493a3d","ssdeep":"","tlshash":"5241544ee854b4f0e05e4ef9c05f849fb70a9018870e10147a9a7925539609cfa23ff5","size":1918,"data":"","first_seen":"2026-08-10T18:28:18.059643Z","last_seen":"2026-08-10T18:48:38.844199Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ImageLanding-De9aeWZd.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"c8425f0c07c570b0480da0a9bc9bed76","sha1":"f04d791c0c00c49030b576579fe1194b9bc6fc5f","sha256":"951870a01e305efa9673c4e539abf7d41127193289d0b771b6552ac5c672b537","sha512":"b5660f95d4ff4b9a500d7798074298c8c1177c32a4634c543dcde46a16810e65b4644d6624827979a9d6d7729342d65c076c62d7857e725966df1e6b89465404","ssdeep":"","tlshash":"9e01126fd932319e88324d9ce05e0d1d922cf09cd35a8b1cfbd558ee17141943521fc1","size":787,"data":"","first_seen":"2026-08-10T18:28:18.387722Z","last_seen":"2026-08-10T18:48:38.821827Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/tslib.es6-BzsZg1IX.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"e762c83b142cd26d4fd3d7751665b9a4","sha1":"f1c6f1f94d392ee4802c4717445d4488b3405600","sha256":"ffc601cde99fc415938bd4f5a26c4ea75944e03d390dc2d07900f49b27007f7f","sha512":"5931f0a465a898f542bb76d10d9b155415d52c2fb1aa374b60f42c4986674d0e3409a7f119341e0bfe464074ed0ac9cab1db9c43ed940d274dd03bdb3bd08968","ssdeep":"192:YR7IwAvffyVkzGRHpM4N67sDH/icavJ7b/Cl4ZTF/Pof+cSdxGGrjipDEnSew1x2:YRdAvnylRHpMs6IDaB/CmTtfH3KEnJwy","tlshash":"b732b6ddb2d0f0a253673671c42f584bf3395806a95c64507324f9e179b586ec26bf38","size":11234,"data":"","first_seen":"2026-08-10T18:28:18.372201Z","last_seen":"2026-08-10T18:48:38.650247Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Backdrop-D_AX3qAO.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"060e5d1bdd304d7d016bd0a8765e85d3","sha1":"7c58b9ad9d1f05feed33a1e2f37d8ef2e3313150","sha256":"d1bd96c38b663caff490eed88828c428b44b8c263fdcc1fe64df563b3ae25210","sha512":"ee1b935c85c84bbc217868758c89c37e39b34403247492d5ff97c88d3d35d651ceebba315c76b1b8f158ae69027850755e135753459847ca0f34ec0ae663a7d9","ssdeep":"","tlshash":"bbf0d399dce00876415b98fdd04f1653732990f4d3566edc60ec25581351ac8e85ef10","size":630,"data":"","first_seen":"2026-08-10T18:28:17.949712Z","last_seen":"2026-08-10T18:48:38.574733Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/TrustpilotWidget-fscOIxCD.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"63e6b394ff92a8de200e48aef1be7973","sha1":"a7e7bf1c266353f368ac1bfd003685f2dda01cab","sha256":"b7b7bd2b37860be2dc50ed49eeca3e759a3d2853d8a9c06ea85bb4fc459ea93e","sha512":"460f0dd5d6ee0aeb853632fd424e63b2f3e189d3205612755ed0bced90e63e6b0aa113080c2117af2e95e92000160baeea2ed2d2267aa528e7012783abbc1b0e","ssdeep":"","tlshash":"68514387908db4fe99071b788017811d763bc048cf2f49b5b96724241401fd6b67bfc9","size":2442,"data":"","first_seen":"2026-08-10T18:28:18.325574Z","last_seen":"2026-08-10T18:48:38.7958Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SupportedCountriesModal-CWtZYhz-.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"f8698a7fe17a8b1a2d2b109bea1632fe","sha1":"edcbd985b483dfdb29095990cbe53fb74af30dc9","sha256":"56cfb2e366a3965214bf1b1b91751a7f7e0af8797acf4d0dd1e99427768e8be5","sha512":"31150e43b80f340cdec8edb115fdd8383ba36f8393b7abf0c6ff0156a6c0ab4f7ab24b06987ca4da92c74273dabb09f17bb8a87fd4d5320652853da095a43bc1","ssdeep":"","tlshash":"7c21106dc0f46bb9b83a4cdaf04c103f372e80a8cb441794a48e238423564d5f5b7f96","size":1433,"data":"","first_seen":"2026-08-10T18:28:18.164344Z","last_seen":"2026-08-10T18:48:38.824689Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/hat-glasses-Db8MNtRV.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"02dd3ff24708a7b6c7fd561b2ac06f9a","sha1":"168afabf05a1f92f7c47346e0054a29af3892873","sha256":"2a5e60db8c882735d3e2c33f906663cd7f2717fdf82e9c0c1a2db7c373c433fa","sha512":"6d91e2f531413795ce1635bc3fbdef624b2f8c3b1b4e77b5cf39e1a79f6f75d4dfecca6380dbe7967e72f790ae6ebda8f5d714664bdffd883e0a3586ac9e1f19","ssdeep":"","tlshash":"24f04e1f6f8e46bc490205a0780e9c025d5688fc72bf19c53194657a0bd0486dcb8fa1","size":644,"data":"","first_seen":"2026-08-10T18:28:18.049548Z","last_seen":"2026-08-10T18:48:38.883867Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useQuery-DgsZ6GG3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"0186478f45fa3b104a467681e714bc70","sha1":"8fa556d229eba37ceb5284b95f6d75ac59b2881d","sha256":"ec8e856cd05c629e63bc53cace2e6bc5e6131c08d388721bea34fd59abfad77d","sha512":"c8a99f698aaf9d7490d7efc2eb29e2da9937f884acfdffe511d2c9d24fdac02bec46546da922d82971e4fea979a7c31587b526c44e69d9c27339a1d5423f45cf","ssdeep":"768:c9aWx42UkV9EFtbSlc/QwLNoYJCdmsD8MHzA373Q3:c9F424G9wy+QPzkrQ3","tlshash":"c4c2c6ddb743b17629f6c181406f4027e2246a166c1a402c71aedee676b0d4ef6faf31","size":27269,"data":"","first_seen":"2026-08-10T18:28:18.17225Z","last_seen":"2026-08-10T18:48:38.760448Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-DmJ8RDku.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"97c7ea37b93623e110225c3ba1a21927","sha1":"6ab40c6e14a2d153919f4c85e508fe7a92e2540d","sha256":"94425d5773b515cae386dee7084f3bf4ff55d22c8e298e5245ece72ef0fb8e2a","sha512":"05f3f96d23dd9de668ac3e237b49d1d1bc10091de83f9d74327315ff61beb99997e01f130d5217babcc8dea36e821b44691af8ab542a5bff5606495cf0c86091","ssdeep":"","tlshash":"532174c8b0f43c34d7ce4459d1af407a3731ba89994a464621372c56bbb046490b7f9a","size":1204,"data":"","first_seen":"2026-08-10T18:28:18.368508Z","last_seen":"2026-08-10T18:48:38.805081Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/x-C92ksvIV.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ee737babc013fc81014b35024b677ff","sha1":"b165e9bbedc3bead71da93f4a024b290005c7e9c","sha256":"56b7aedc259a5a58f0f9cef89006f0a8f6b3cd5749959d8f591e51ec123e03c4","sha512":"98165bd9de29116fc662a0a309901378671d6ddefc3c3a41d8c4bac1b2b8b74bf8619d1200183092796918b0ee9f5b3ae2639078575e6d3599cf6bb6ae675c9d","ssdeep":"","tlshash":"d3f0dc0fce785c7cb01a0d9daa69b54fa6a6d2a5af832a14b28c147003001c0572afd1","size":454,"data":"","first_seen":"2026-08-10T18:28:18.360611Z","last_seen":"2026-08-10T18:48:38.686954Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/trustpilot-C_-lMdc3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"aeda2563a81cecdf05335b105ba5bb90","sha1":"5415c59da1a74d8b1d1298578ae4ba3c0b1e757e","sha256":"5b834887e93cfb2f75e275346b90cdc7b47ebe09c53ebd0dd6a8c4a10252f7d2","sha512":"658fd0665a7366bc2090ce2214a4a8fb85a14b2eceeb5f621b500c7fa9d9efe591c5ea150547b741c9ee05c573357e82b28a5ff18a8a0f0d660968229f5da68e","ssdeep":"192:++xvmnELjM7PN/EE+sq9kqPKtKeXFkw3Wv/hfbLlt0FDT:TxvmnEvMLSE2kqPkpkfnqF","tlshash":"3e22c7df8b304cc85dc80bd6bf56486cbe8f61ba8d76491cf0885af41141cacd64aec6","size":10124,"data":"","first_seen":"2026-08-10T18:28:18.329043Z","last_seen":"2026-08-10T18:48:38.792633Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/es2015-BHenECUA.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e1a1f70c48d835d636a6758d7dcd523","sha1":"def94c88f4984f15672320fc0035e9363ea92fbf","sha256":"d20f6493e28beb06501411cb8fcdff78ac3207656b5251db65310623a14acc37","sha512":"ab99e475bf55a9bbc4841c7bbf9407c6f8c88d63962e5f7aa049249c07440fb982d4626997fec3a2bf77eb7eb278ba4e5a3c798c16147f309b15660c920c2f33","ssdeep":"192:bkemzt9y5iMEdUEYeb68fZ+MhLHi4ZW1a+ovtF9Kp6Sq0CZQnNm259E9/NEJ0eod:9mzny5qdUs28ThLCIE6Sq0CaxnyMO5","tlshash":"4092e8d93692b530a697917a617f931af73a2989b40e4004f439dcc83e7dc81d263fad","size":19746,"data":"","first_seen":"2026-08-10T18:28:18.268789Z","last_seen":"2026-08-10T18:48:38.881396Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Divider-Bz4gi1Xs.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"13ea6c37b4a9f6d3a667374e15e8181b","sha1":"8c8e4212a722b25a949f5dd367e3aa8d0f55d21c","sha256":"6b18a3c4d6290fa8cc7a9e32f7cf37d3025bf0843fb939ef3c8e8f9250af739c","sha512":"ee2d24ee50c610a0e3dd5d7561c3c2ea6a7019b02a5b072522a5ef673607db34e0e01f658957189406296ba6ef7e9544322030e275afcab6c56acb1c7d2f6899","ssdeep":"","tlshash":"bbe0f11eb8f864b9401a0cdfc00e9dc3b239e3828b419854c08e4190c309499de38fae","size":396,"data":"","first_seen":"2026-08-10T18:28:17.777883Z","last_seen":"2026-08-10T18:48:38.892049Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/_patched_static/cart-trace.js?v=cart-trace-20260801","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f203fccb21993e17b417caf056a90021","sha1":"8607a6622b1ed2d1996dcffffe8516d9beb68350","sha256":"298afa75c0a58ef50fbf7e9865384dfc5dbb3af24d93f315e1a6cbc59d4d66d9","sha512":"4189eb8fa289e5a6cf80a41ec6f3bdd2cd1faf2a2cec17342094b6cc3f1665ced01be4cbf5df49d818b07f70c789ac036992ed4cdf67983b6f2d6d4d064257a3","ssdeep":"192:I0CtZJmgPO0mNtMKSCCu6KvuaNq8rbfzu4b1WkhMCJwv87JJCOCZvo8EJyKE9nHW:utI0M6Kf/5J7UMsFfZVId","tlshash":"de222fae28f350324517b0be1b8fa0857530e4a76849dd94be4c47606f964788bf2fd9","size":10458,"data":"","first_seen":"2026-08-10T18:28:18.15506Z","last_seen":"2026-08-10T18:48:38.882319Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/NoIndex-DolUzx-O.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"d6131c7d310fea4e89de029c43999e2b","sha1":"1a6eed26d0f734496fbe2f406d3d0bbf7a69eb8f","sha256":"82bb1c8838ed28d7184e54c19c2e8dd632235f076a7a3d396adc02963b391e00","sha512":"e559fc7449f9e1b2ca2c0da455c96e890b345247eca453cfb93772214eb4fcc6f786db304b33b2bb3fa7f61c0514107cd6c10e1cfb8a51ac9cd91187c5c0850f","ssdeep":"","tlshash":"11e0c00fdca491f516185cdcd01b1d8feb78f0c0c7410a44d00832f473b55e4852af21","size":358,"data":"","first_seen":"2026-08-10T18:28:17.93477Z","last_seen":"2026-08-10T18:48:38.832535Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-C9dqGbYS.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"d17184adf0f0749d4f241d1df49db7ca","sha1":"f7678e962487e2ea83c4d0becf4a363a5a50ca72","sha256":"eb6f8580323a764ccd86c9b8b5acd2f6c131972db8de701df6d2a919ba9228cd","sha512":"18cd426ddfd3ce4571125cda537d8ab7b919dacb16d93fbc96664af43dd3547dab1e04979b7f3fa43285502afc5261773afadb3a27b67d2fbd1a2c945c96f800","ssdeep":"768:DeFXZv8knJImy4aBVXRrK5I91zyU43HBXEk0Hw8Lag0YRFNlT/B:6XR8kJIZ4SVXRrK5OaHB0kSwuagb","tlshash":"63c21bda3296b124e35e821bd06f420eb33791b0564e6028b32c969d3871d9197b7f7f","size":26631,"data":"","first_seen":"2026-08-10T18:28:17.774903Z","last_seen":"2026-08-10T18:48:38.420155Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/chevron-down-Ag7Bcgkk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d084ea81fe2e3dcd31a8b298ec7ebb","sha1":"2938414d3ef4287eb787271bb2acc51705e13244","sha256":"1c5b6a17bb44582b03ef74709537ac7d512bd105ab92a395288b74f08e05aaa7","sha512":"2b62eeb36e2d3a37ff6ec16f40787486f768528ecb23abea2c90d622d5fdbc5b61c534efb95591ffdc3ca312e781581c6c36ddc5293c5fe7a7213aff84cefa65","ssdeep":"","tlshash":"69f0dc0edfb42c3c901e4ccda6aab68fa9a6d2a0af452508e34c007413000c06379bc0","size":440,"data":"","first_seen":"2026-08-10T18:28:17.718069Z","last_seen":"2026-08-10T18:48:38.873142Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-DSXffO_x.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"747c1b7dab9d6395c912eefc5b0bd285","sha1":"2892fd8b10a97923faa9537eb84a9f95a1d6fe8c","sha256":"4b9f8b36759a32f29ab9e0047983c97b4d49de1c1a555b0c072c4d0aab9c47fa","sha512":"da06721282964efef73ae1758317f645899d3bd41c29aa2400850fd1748ca5be423f9e9c17f34212bb0f6fdca81bc99f4ac267339d4e2d2c46b8c791492d9b23","ssdeep":"","tlshash":"2b7185d970e5a9b0c9ef9c86e0af885cb73a51a4310d0734a42e4a742755a80f21ff56","size":3723,"data":"","first_seen":"2026-08-10T18:28:18.321191Z","last_seen":"2026-08-10T18:48:38.294614Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/queryClient-CryZq-J2.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9969b2cf8b367fc7ff56deed9dad98ea","sha1":"54d2f693faf0e3c5c5fbe8912d2db966692d5636","sha256":"c844acafc53b4ec98baddc325017f6ae5fb257d90440f8d1153bfef809fd57ba","sha512":"97bfccae99e0e457c0f2f989ed68f001623325af2bd1dbd4195b9eb8891f330df1eab1845f771e41660fe56fa78632d9ef4d58518c968b15a856241a87cc6b7a","ssdeep":"192:83VeHsuCNktp0Naa4nlv9vWha0GoAoFnDoI6hFXSe1:8VhXklv9vWVed91","tlshash":"fdf1badab393f1760bf64443d07a81a1f1356e161c1b3028b1951de179a6a0bf6baf33","size":7592,"data":"","first_seen":"2026-08-10T18:28:17.885127Z","last_seen":"2026-08-10T18:48:38.358427Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/URLStructureRouter-B1PtNMUc.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"a16f6fa8c4edd69dc401f2bd984b4108","sha1":"1a954c442a9f4cfe33ddde05c685cc68a02067f4","sha256":"4a70ba161f40c2df2ac2d02c08dad6813a27c089c01257a287fd0ea085f2503d","sha512":"3487805c9be7116817cc26eaed538a7173763b930c02a348a05f5045fabe3737656b02021876112fa51c9b9670d23f0cafa9c302bdf7e0e085fae3a30de190f7","ssdeep":"6144:goO3ht0eVsjYfHWsaPxdHA3K+q/onCxjmp:VORP5Jnpp","tlshash":"0a845bdc72a9b562679746b2503f110bb33928525c0d4460b220fdee3ab5489a1fbffd","size":406935,"data":"","first_seen":"2026-08-10T18:28:18.076139Z","last_seen":"2026-08-10T18:48:38.758505Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/metrics/Al9I498WNVCaJ3gOyq-VvDT9Hc8ofFf_z0AXDjRZofCjp5fI","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"85719aac9d64752df1a56ca37dd1f595","sha1":"a6f5d7b27979c387f5add7a2ef452ab1fa906634","sha256":"0f4b5c9325432ba2c04b4d40d21615bbe7cab754894b1484469a3262703c0fa2","sha512":"a605f6b59cb2c11daa8c969228b2733174c686044ce6833e9620413dd46e830c41bbb169a2a5f2f46429fc372506dd702c1e246bde15e531596b48c01f374e1f","ssdeep":"6144:g/ghMX6Z7ioQ+o/FWDEsoGz4ZOl0fcPbvTEaI3sIobkd8wS1LQM2eO:g/ghb++o/5uUZ0U8FnO","tlshash":"83a4f8cdb3d6746293a2f478903f018ba57a69e2f44cc899f185cce42e7465a4227f7c","size":487614,"data":"","first_seen":"2026-08-10T18:48:38.466508Z","last_seen":"2026-08-10T18:48:38.466508Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/landmark-D5kQJgru.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"f7104051029f8dec6232ab2461cfba6a","sha1":"7fc06e0bac23132615e53480c9901664c433ba75","sha256":"ba3fcbe2defada50a65e7a6699556332d69bc5d2d48067c1b468508df6525322","sha512":"7dff5afd597ad4ff4ea0ba21397cfd1434def89e43ea9f1f1c8a5d6a89905a1197a3704da2e5cfb7584a0f42551cc61e00df21c22e385506b4148afff7d7ceec","ssdeep":"","tlshash":"220176acce942dbff4220988ba22994fff6783979f076404b99c64a092415c08335fc5","size":661,"data":"","first_seen":"2026-08-10T18:28:17.936179Z","last_seen":"2026-08-10T18:48:38.788168Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/category-order-C7g7-U7d.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"deedf508f1bf442e108ea378741f87fc","sha1":"3ec537305eaf992804523d2b238d38ab2519ddb0","sha256":"8aa49a5567874f9bae794966508df57d6c1fb621e1a632c5294e6bb0488fd707","sha512":"4ede4849c331e37e21b80564c58ae21991511347bca344c8a09faa226c2572df4d28c46643234cc3ba1035c96ab88c64e16c49c65182f1e30cd1c3c2a431a3c8","ssdeep":"","tlshash":"8ef020c874ff68b4a26386bc11e7b72363aca0a1601f8970da68174c3632d57737952d","size":560,"data":"","first_seen":"2026-08-10T18:28:18.184488Z","last_seen":"2026-08-10T18:48:38.720184Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SuggestedCountryPopover-t83-wcfn.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a6c15138e31dcc31744c4be706c3ace","sha1":"054b249b4238244623f57b9700db90328ce2bd5d","sha256":"28698de241048c1c0b91b0d65bcb9edd01a7d256e225816eae4c8a010ed00747","sha512":"9a9c81b188c83de5787394a3b8ff46ad64e2aecfaba233394580ea8a1e00ea19dc92fb0312b513d502afffe86842d232a525ff6f2165eee698573dd8d5b1149e","ssdeep":"","tlshash":"b851780fc8a42bf8b45b99ece025913a676794bc870910d070eb17d423579caf98bf83","size":3151,"data":"","first_seen":"2026-08-10T18:28:18.031475Z","last_seen":"2026-08-10T18:48:38.571942Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Alert-DHJd2UpQ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"fedc4aee2390d90dc7008a6fed101606","sha1":"0b745b4d90b09ffc08623d4b89cb47b004782710","sha256":"72a8a0614c01a0aefe28969cd7602bf95754211f806e7a65c9d10fa9ee7a09fd","sha512":"17af8dcfec1e6a10ff85987e4d7defe9531f4ce8eb677285730bc7d73040cbd20b22711faece6b16feb3153564d5054f9389c203d51d90bdfd6574a2f45b7b94","ssdeep":"96:bnj+Ge4SH42FG6nV442F7s61kH6COc042F7s61k6Q42Fqk61kHgNFwb3XYikle+7:3+Ge4SH4AG6nV44AI61kaCOc04AI61kk","tlshash":"7dc175a655a429f4e83a9b5c926ab06ff31fb8786b4f1c34e2cc5c1837111c8255bfc2","size":5848,"data":"","first_seen":"2026-08-10T18:28:18.078954Z","last_seen":"2026-08-10T18:48:38.573344Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Badge-CqUZj7j3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"8b6f3e06b45347b369d3d3fc2bf25d6e","sha1":"b6b2b6699896eccf894483b82f9ac14449e1f526","sha256":"8de77f55463b7f35c12d6d0bba6a745c8aa90b6579a591f8a82f623f3089cf50","sha512":"8327fdeddbb28491ff191c784770e08ac10dad6f0b9b1443f608bb202b06f7505b206eaaae1eb0d3616d1672da799fabebec1db23dea4bf0ed6f1d4098378895","ssdeep":"","tlshash":"47f0ac0bada068b8f41b4fdd15cd8b99132be05bdf0c0a51fa54a370a9115e47a12f46","size":594,"data":"","first_seen":"2026-08-10T18:28:18.315331Z","last_seen":"2026-08-10T18:48:38.812588Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/circle-help-CGYmH4Pk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf6d87089c17281c627b04a0cc33e0e4","sha1":"3cc0450590d32258ec2a10afa95497b90e5d089f","sha256":"5778ed8b51311f4ecc09a48b0c9ad257d0e1b0630b61336b186c7b2d7e25cff7","sha512":"b4fe1a901a1efb9e803272a384cdd2614007903176ec327298d6037ad940ed9065bd35cd9320821374846c989737a56cd9b641ccdfe356b1f45f24698cfee047","ssdeep":"","tlshash":"0af0811edaad0cbd640a4d9c7a5dd6cfba6be1a1af451514f14c247002115c09332bc1","size":539,"data":"","first_seen":"2026-08-10T18:28:17.731159Z","last_seen":"2026-08-10T18:48:38.885416Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/fetchUserData-DcfDOPZI.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"db1c30616459abbfba79c13d8c7bef46","sha1":"a8591666da32814145449afc28c654688a098936","sha256":"2c280ea99386dee9c3fe2b733675356f3c2432d8a50f5a81eb6ad9f89d44897b","sha512":"9a92af6f0f7abbb5a109dc472e6ec8681a1d02c90db9ecc3958b25afcb8c33fe3e7d2a6526597f6048b9d04fcd42b58201c03cb845864c1326ac527f2c36f0b0","ssdeep":"","tlshash":"c60123acacf472700e6c4d34883c49079132edb6ef1096c97704322c29d6d98af15f34","size":668,"data":"","first_seen":"2026-08-10T18:28:17.93306Z","last_seen":"2026-08-10T18:48:38.817186Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/u_x-2NvrRvJR.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b421203f9fa3c3a8ed42f1d1b3a9b584","sha1":"0710cc1ce178f28c11fc57ef01e75de2dc8f200d","sha256":"8a07fb656cc0629eee728a65f9fe319fd689fa2a51a24fd76f247b5afeb35821","sha512":"54f87139b2dc9a152e87f0fd7f34cda4db4414781c9805b0a9e0d383d7c1a06bd6a376e03f5ff53c69ceb62d04cdd411396d597e47e7830411664dd7ac2c84db","ssdeep":"","tlshash":"2af0dc3ed5b02cb89d0b4ba965770ba9a32b80a8a7810364a1880190b2120c481b9fe9","size":440,"data":"","first_seen":"2026-08-10T18:28:17.789562Z","last_seen":"2026-08-10T18:48:38.782706Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Search-d1OLgKSE.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"4447d57a881ed0d42c4b44cead57b44a","sha1":"2e2536d48c29acc3258ddd5c0e7c56bdf1b099cb","sha256":"55428ffb79d077e7bff1f49f5edfc4dad3999f5aced2e1c426883afff09d4ba2","sha512":"18f0a4a00b56396a4bb5beb3401a19f2605ccd7172d046eb5850923edcbe40d2a14887f022f12c1cf439cdda23f20f63404e758661865f999b29c94d5c4e99b2","ssdeep":"384:vobZAxsiUs6SWFQu4W9aNsXn0IOL9KI8jq:cAs2i3b9aNsXjGO+","tlshash":"3992f90ed0ac7075b83b09c85427a51ff56ec099ca0928e8f9e22d4421d5fd872affd9","size":19536,"data":"","first_seen":"2026-08-10T18:28:18.042239Z","last_seen":"2026-08-10T18:48:38.422707Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/jsx-runtime-DS4W9P0j.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"723c8511f764bddf6310763ceb2c3232","sha1":"6252b079882d956dcb06c29401730bf7acbd017b","sha256":"935ea395d38d5d002edad0e2c0965ef2d1042c211ccc364ed619ae76ef208e1c","sha512":"2b0222b83fce799f3f37255d13111694ac8942f081ae0f05c917d2afe6866355d9008f33f4e33397c55611184fda2729402e653320a724835d322ab78c9d8d83","ssdeep":"","tlshash":"dcf09e8166a454fc653f9c07916f56b2a13c7047e7c52302b207d89217b7ed59012f38","size":472,"data":"","first_seen":"2026-08-10T18:28:18.273538Z","last_seen":"2026-08-10T18:48:38.89645Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/hideForUtm-FWI9JG48.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c30c03bbef5ada3ada31af943927277","sha1":"74983ccf8529f10dc1131f0e67d886aa814b6329","sha256":"7c4fd93b485523bbf41d2e0bbf3275b32cb964548de10e8e383234ae08268fb4","sha512":"6dd7ee9cd557b86b2caab80ed16443b26e1d8ee30618b81e68168b24309a400ec5a949d7a6181ab7208ba0bd5e23947b62af02e86f5108d5df46a1e43351fe54","ssdeep":"","tlshash":"fae02dbbf0be34a039e300b4927b0b00e03b90508a6ac8f1b240901016bbdf3e23ec4d","size":328,"data":"","first_seen":"2026-08-10T18:28:17.823037Z","last_seen":"2026-08-10T18:48:38.443002Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Input-BwaFIFgb.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"73c36ccf8b3ad000121bde9039747799","sha1":"474bb4294eda2fc4fec884b4a84b47c11a23d2cc","sha256":"45b864bd2e805058b529f357c4c86ed2ef7ed7597df694aab3318bde47ef28b9","sha512":"e01d446b813d61030564a40784781859e7e2f910c3acd4fc806ffc2eb72217db2d48c85a1dc8760a7c6c3289be1cf1ce0572bc2da088132b0de414e8964acf51","ssdeep":"","tlshash":"1b5123cde82078b6a43f89dfd1ee441b37176064e6070534bd3463392b015ad6f1aeab","size":2652,"data":"","first_seen":"2026-08-10T18:28:18.058519Z","last_seen":"2026-08-10T18:48:38.909952Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useSolanaWalletStandard-CjbryL0X.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b91e5cf099a2494764bc0cd5dbff87f9","sha1":"4fab534e5dc06683ae234e029abf6928009cc24e","sha256":"bbac4c31732b77d87bbb9577c2e03ab80873ed525f7e9e1640477730c85f0603","sha512":"8cd70787d550f319bee27b65693f5a637c415e16909486a2ebdc617c76696c9c64b00c16caa7b3c7a168bc66584b2e8d5149bcf672812e0f1e69d5cd5a0909fe","ssdeep":"192:UpNq9gufzBkODFGoO+8Bx0WhqNWrpDSILUgph5W0XJHPQb:UBuLusFGosBaUlpDxxJzlQb","tlshash":"dbd10ad52792e3356b6f018e981952d2f32c184a280dc178f2b7ae2e3368442d5f9f77","size":6702,"data":"","first_seen":"2026-08-10T18:28:17.979198Z","last_seen":"2026-08-10T18:48:38.53859Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P5SL845\u0026gtg_health=1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffbb935556b923eee5ff8477b0756493","sha1":"308b9226bf682ba28a92a743b4ddf4e9a96157f1","sha256":"c24c8a68f1ffcf9b37963dfdf26c4874c307feceac1245180f85db1da436416a","sha512":"9a3af3a979c26255bc27b508e7226859f22a732b120360763f70a5fe2c59f422b816c07905ddfa76f151b993f72dd0f50dd4a540e4bf572aba5afe1fdfe7c8d3","ssdeep":"","tlshash":"e4d023cdb1cc31502497f530b19fc1271013d25d4ec0d1843514ecbb0d622cb42137ab","size":216,"data":"","first_seen":"2026-03-17T00:15:22.957568Z","last_seen":"2026-08-11T00:14:59.102364Z","times_seen":35995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingReviews-H5yDzDxc.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"1fef4fffcac0f9711f4dc7db868a8a5f","sha1":"92418f3d8537e8706a75f6da6438562ba08c4b2b","sha256":"6b18ce1b90855845fd0ed462a6ef129a05cc1496239012b8daa66cc7eb63c3ee","sha512":"f6cf87c1f9017aa650fa17cf32278cc2fc0f6b6b19e57e2e3769a61cbc20c9027ff30f42679952e7ab987cdf3c9a9592d03ceee000f871e6583eae503babbaea","ssdeep":"","tlshash":"5551642e91460df5b18e48d5c12e875db13e9889ab015ae8f1bc2c3922047f17e5abe6","size":2948,"data":"","first_seen":"2026-08-10T18:28:17.742877Z","last_seen":"2026-08-10T18:48:38.386693Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/account-B270pzMv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"d351bef8e323555deca74d9a9c4084f1","sha1":"b19cfa055178547e76dfba849dea3db1c89ff007","sha256":"1a1b265a0ef85ab47d72dcb8073b8a7410aaede597b47562e576217e373f179e","sha512":"c1e8342ec1c949b2d061329aa8ed94c0268c9bd9c53ded3edbf2a39fe6a493b6bc510bfebe56b49895793296c001b72ddbe6e39155d87a24d3d97394efe579a7","ssdeep":"192:+yuK+gmfaX9TkdNtES0L00HcBPHiT/NQ7q:+yG1fk9Tk/tC34PUi7q","tlshash":"112213cb765371228f15cb7ab3bb890ea2785cc6cc5b4f18bfd6846d35540f8aa23944","size":10282,"data":"","first_seen":"2026-08-10T18:28:18.043838Z","last_seen":"2026-08-10T18:48:38.373998Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Notifications-Dxxho5tr.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c4443c259c4c84854799fd4d0540cb6","sha1":"dd9b6b5204d918e83a2a944f1794c6a599be2ded","sha256":"6251bbccd4d58b8b944a8e82e9a9bea01793b9c5bd44d4cf80a8bde052f0699c","sha512":"d5143a586345e427e26c870c10252fdc4b9ae9e6c93cda08825c13f66f8457a0db3991df5cabb73db02d0a5386981586f5143fdf53a18f76967b64a7dc656526","ssdeep":"","tlshash":"2621224e81448a70c94edcddd02e11a7933ac0a8af0999d9d14f06911b262d5e55ff62","size":1357,"data":"","first_seen":"2026-08-10T18:28:17.77934Z","last_seen":"2026-08-10T18:48:38.622433Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-tPUgdwW2.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6ef2a2ab571fdd4339c8cbaa3a8e53d","sha1":"3b3540d3b1c7ed9f2549bf1fae9b67e3d4fa8a6f","sha256":"01f2e4922c84e681fef449919369fcc6214ff2d1fbbc0f1e2f83642176e191cf","sha512":"c588c6aaae6ac51e1b5e30e708267f5edc41092e3605bcc7d4b1cd9017ed51861207b5ed4770a1d592b1514ac5d3c781618fe6aea42a4e4e438da3b342bf0ffe","ssdeep":"","tlshash":"dcf00e7688b028b0802acccce45924aa5715e4a9b34b774c590e29b44309af1612ff31","size":503,"data":"","first_seen":"2026-08-10T18:28:18.34697Z","last_seen":"2026-08-10T18:48:38.889108Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/index.module-Bvu9PZtf.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bdaab8a27619efcc9649716f3ffa494","sha1":"23f06d8353831a4bd6b3c9689d5b3e95b889ac6d","sha256":"5ed903a85a990b6ebcc870d7f6d66f47ab54e1af683c70cca45328d5ce41cfb6","sha512":"1b0b4bb095ca6d1ad3bd027a7a6006f17ef4d9ca075908f533053cf7b704ee351da6723d5ad979f3a3700ebe353ace03f8b5b3413c4463259a9fc13d6dafd9bf","ssdeep":"384:oF3BeXNL88/wOCGKiusgw13wAtJW0P/Wcs4U8qpqg7qzuVmDP+DT:uBeXJ8XOjPdqdjVmDP+H","tlshash":"9972d8e8b1d2f0724b827894813fe409f2b72858ed0d64a9f245c0e16d798499677fbd","size":17030,"data":"","first_seen":"2026-08-10T18:28:17.707855Z","last_seen":"2026-08-10T18:48:38.411222Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/redux-toolkit.modern-J_LcuY4w.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"23869cb9cd858951f16c5424d88c9a28","sha1":"49f569410888870756fbd2afe509346af4937f03","sha256":"687236948b6207de6f64449ff5ffbe8b009f5a9c3bdb75c62ab49e98b436df34","sha512":"56cbf172f6c896909a592dd4dc5355be021934df9796875d91aabc934771b2de630f337c0bab2a1bbc60e5bb5e701582408eadac378f0634b09177e4200ff9bd","ssdeep":"96:GGLmIXXAC2VVdsYeKpN6kYgypUBVkmCkqjACK4AxRVAR28OtsLD:DRkVVds5KBYppBAHVARgtG","tlshash":"3eb1b6e9b7d1b0b397ab4863443f5c16f13d25aa009d6400d792a4b66df0d1eca1af2e","size":5435,"data":"","first_seen":"2026-08-10T18:28:17.846133Z","last_seen":"2026-08-10T18:48:38.560829Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Flex-CPqAvGjK.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1838862bd351f4fb9c0da4dcb84f3bb","sha1":"958eceaa7562c2b59e28937e937202a8f7d685f5","sha256":"217eb16fa0df8c6b931f527260579cbfbfad2a41c1830510f663cd19dea38cbb","sha512":"e47fad2a4ea95836bb2e0ddd94ceea6116372ec821617edbee5a2d2840a8ad0368fc29caee4424e2f441bc77330b9e458cc8656175ef31c2d4110f42b70b3db2","ssdeep":"","tlshash":"3f21301bb9247234b137d4e9d2ee2581d3d3959a92862416916e40be83510920b3ceee","size":1120,"data":"","first_seen":"2026-08-10T18:28:17.791616Z","last_seen":"2026-08-10T18:48:38.893241Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useMutation-hJvpf7AT.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"12739d50125df00ff19bf05e643cb19e","sha1":"6a6e0bfc42379b6459781bb7719fdf40007e11c2","sha256":"edbea9fd2c1e277aaaeb0d6cf8df9b06ae9b959c081a808a0d8e9b69992f8e8a","sha512":"bcf644c9b511afef8bf87b1b77ac37d9b8d85e5db8280f627e0faa800805277ea91c6e902025b5ec979679952d57f4fac3f88f0002e7f497de4d5aedf92e8df7","ssdeep":"96:DXP0DpVsA1OXhPfNm7uJrDADCrDVDIuoLGHfxqQVZ67UTMPfEKeYgcmamKsU:D/0FVsWyHRcS5cuWGHfxqQHwArcmamC","tlshash":"9ce174ce961b25267dd68a80d07e022b913ca31a5c16946830bdcbfa7ad054df5bff31","size":6904,"data":"","first_seen":"2026-08-10T18:28:17.787978Z","last_seen":"2026-08-10T18:48:38.525525Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/castle-C3nLZkCt.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"b2551c7e80fb6181ae2bdb464fa30cfe","sha1":"f95d2423ae30bede4a5b3a2dbcc94534ea7ba506","sha256":"9d407f11e8ec3085bb5faebd5948fefcd6a92509885e96aa2cc4cbce1dce3ef0","sha512":"6e373e72db30edee3c2844829cb809fef9cd1b11228e2045f5792a20bb738c41e71033600825e8f38d58af2546ba8c2e8a0add897a2006580754b67d41107649","ssdeep":"6144:I9Irukfiq1srMvohKzVTo7xamUuPxFxaaxaXKxa6xaOxaerox4:IGSrMvq7xam9xaaxa6xa6xaOxaero+","tlshash":"c0e461a83e0922bd7b89657b21af370b70e33af5702d5a54d1f1d8fb7da0c58122c958","size":658226,"data":"","first_seen":"2026-08-10T18:28:18.40587Z","last_seen":"2026-08-10T18:48:38.368812Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ImageColumnsLanding-D3G8A6sy.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"5f0426baf6f0d58ca38717507e26f727","sha1":"8fbc84a9f3add9838a1d2ced131fc560e8c3f5e1","sha256":"0d84f02e806c895584c0de5d639c31a0085cc2452f51ca9644691245e58d6aa1","sha512":"58b94a22928f4813a09f5d11479ba6289362754dad09fe3c7b0295d5df474e52414dd6172714d1a26cefae3c42ae282f2515e3b48df5e8e022808ecb0dff7ff2","ssdeep":"","tlshash":"ff31424ac0587a79ad2a28d8f16f242f732dd058d394a3f0e10d00d4179a5d6681ffdb","size":1486,"data":"","first_seen":"2026-08-10T18:28:18.403335Z","last_seen":"2026-08-10T18:48:38.759582Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ellipsis-DKwxQUh6.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"e236ece2f2147ba8a45eff6c29cf6641","sha1":"b70dae9b6719bfcd0f6052d9a07f4f74056919d3","sha256":"00a13b8b5f0e8ac1dc7de22dfd2d3e396c51ce9ff153daeceb4ef65046e6d5cf","sha512":"a974ce87bf20f2c17d7942f4e97db612b65be4f1b24b92db4b23020fda93b84dc2477f57c44259cffb12f7102c1e9888fdba506c9ac1fcdb6c064e96ea014d0d","ssdeep":"","tlshash":"12d05b2d6ced5cf04f081ee036668512ed19d0b5a3250dc8b1d5033b4f52c67a5d5f55","size":272,"data":"","first_seen":"2026-08-10T18:28:17.939315Z","last_seen":"2026-08-10T18:48:38.74985Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-vI-ePLqY.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"91b215d9a4e1e087ba1e0cc3cce8ce1c","sha1":"84edb61328d77f2f0bfdc8532b0442956c17cbcd","sha256":"00a21a1f5f0b99a158daba6d3a40e035ee99e5551c4b8cd3a701a978301fc0cb","sha512":"9e185a605c5224fc1654acaec8fcbc73927469c4fbaa6cb7acda644319364b4cd20c0ce6da4da0bf9f6260862db5d467d19b25e182f3c77a9b447b4e9a4c4241","ssdeep":"","tlshash":"8cf041777bf170bbc2548083806f28b2a03890a94a42d70ac0584c0f0d060a2e8b7f38","size":589,"data":"","first_seen":"2026-08-10T18:28:18.327003Z","last_seen":"2026-08-10T18:48:38.684576Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/HrefLang-ul-Axlf2.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"1aaae7d40120319a27fa01a534f5126a","sha1":"7055fe09b45dac492236f5037f630654737bfc8e","sha256":"7fd80a8531a249217a5f0a6bfe9684957d086485ffdd9815537c68528313a6a1","sha512":"17f9c87d5e4dba9e2234e3f14437ab8a9277d006d6bec7f02b29131697884df62601831b76c203201b6ea08fe43cdd398e8e24d44ec68d853e38d53ce63aa583","ssdeep":"384:kd/dRu+7yL7HX2g9UbeYdTSlO/vhmFp836XPsOS780si8wc0DR3JFaEji:kd/dRu+7yL7HX2g9UbeYdTSlO/vhmFsa","tlshash":"8e82bbd6e96830f65503a3632ab51c0a4879e74dd447cfd790c863e820bdfb8c789a76","size":19189,"data":"","first_seen":"2026-08-10T18:28:17.928307Z","last_seen":"2026-08-10T18:48:38.355135Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Accordion-CMmPUmp5.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"11a6146268fe41d9819379a3673d661d","sha1":"55ef60b0215be55b0794cef689011213616eeb19","sha256":"b1c474f98bb0c95f6db568b5771a19b7756233e54e05d17fb960732c2684e925","sha512":"386cd6e957fe3bb6ca595e9273ad5d7b1ea1e64435d35d4c99c8eea2d0e711becc12cc6582f6b11d2f8ba1cd5acc78293defd530d5783d077a5a84f2f5fee5f7","ssdeep":"96:urH/PosxTSQx7OdGXLSYBt2Ye5muOLTGsgZ8heeqKGhvTkRB/hIjM1:Yn5xGQgdUZtumuOeBZSwrhvTkRB/hIm","tlshash":"f7e1a998e0513564c66fccc5c12f003cb23e6654e90e2a31b5bb5d58671a3b1b3ebfa5","size":6773,"data":"","first_seen":"2026-08-10T18:28:18.0479Z","last_seen":"2026-08-10T18:48:38.304535Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/house-Dq3t1_yG.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"03bbd1fb154a3ab8a19dd6edfef00b3e","sha1":"e25a77cf0bb46ebe4f1e7f3deb0e2bb4f3ceecbe","sha256":"b0637247eba21f7776b34cc071d9a9e4772e3983f9427b1fd3d2c209ecb69801","sha512":"39284a0eba5427efdac82d4c93d9cf8378bbf26efb63120cc5628423b0b0de72941f7a6852c8f2764ea75769f5f9d74f02d8abe6c5d81986901a33783e0bdad6","ssdeep":"","tlshash":"d7e07d3fcfad8efc0c0b0760256ee004431e68a4b1798164b22c41ba0683e42d83be42","size":324,"data":"","first_seen":"2026-08-10T18:28:17.91298Z","last_seen":"2026-08-10T18:48:38.814881Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CurrencyCombobox-ZSClh5ow.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"0ed43758a8f2ed5a5359e47493b838d4","sha1":"a96076077083aee06b89875bb53beca0aca83bc6","sha256":"c6c2e46a0462ad7f4c418ee525d75f7185e3955c79f516d3a825656a8d561502","sha512":"0d2b22df83edcdc2d6037f52dd4508f61e2bb35281aaeafd81da84e3e2e80c325ca631cbe8e995f7969a45127fd3247dd7c374b6d17b218eb7dc02b77b580fec","ssdeep":"","tlshash":"c9f0024db09039fcd62b34a2807c95412274e2882a890ce5d06f9dac9b38922d437eba","size":624,"data":"","first_seen":"2026-08-10T18:28:18.006275Z","last_seen":"2026-08-10T18:48:38.867191Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useInfiniteQuery-DnVBCYdB.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6aa9d0535f0a9a297c802b043e8765c","sha1":"2d431987ee049b78bf3d2538ea4250d19efa5a2e","sha256":"3156a7f89c73d3cca41fb39975a9e433d24523c9ae1c11ecbf3b2e3e8ea36445","sha512":"26036196f6e2117370858ca0f3ceae98b00037edc860bcc9e8bf46661c33f4cb4f334b605539fffc92a4e1aef72f51dd038d7c10ee93d5230fc4c084ab6d1177","ssdeep":"","tlshash":"dc2121ba7657ba07d0e7c25fe32d0705a10848637a3ed76de8188271e670d019309977","size":1208,"data":"","first_seen":"2026-08-10T18:28:18.135307Z","last_seen":"2026-08-10T18:48:38.367313Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/account-DLq3jeIf.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e284fec294ef920f801f98ad4d1e09b","sha1":"db444b38385fc35348b0120f1a35143a59a267f1","sha256":"1e9a503dd3041ce6734c90cd1e3818efb421e7db56f3a10eb7a89b6683a0ee1c","sha512":"6e92fcdaea460ff09735ec76334131afc2ee13e10d71da6c88aec7c054f58c68bdd8c70d8e7d95df93ff433ea3393eadf311abecf68d27f6871ad5ae40c51af8","ssdeep":"","tlshash":"ca21f1def20038a629f9dcb8a03d071d63a068d96e2c4299d05906fd27a0961922bf37","size":1191,"data":"","first_seen":"2026-08-10T18:28:18.165968Z","last_seen":"2026-08-10T18:48:38.859157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/minus-Dk-xQGF5.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"f364615689fc211b3287be1ee6850671","sha1":"875e8d3731e5f747d293db6afbcaf4b4d39782bf","sha256":"70dbedb683620ddec8fd565935e3f62093bd7ba7e3ab8acc7149d9ed14109e3d","sha512":"f83a95dcb1a350d0a55c1e331f65be127b5b9b2a8a7c04018ec28594bec39e8427d3f71bc1aa1f2f54850a08aa83de9c836679d25e6a08dff72fea0181490b8b","ssdeep":"","tlshash":"a5c0801badf42fb40d040d55555e1206cd55d494e36208847101535d07614d2755de55","size":160,"data":"","first_seen":"2026-08-10T18:28:18.292936Z","last_seen":"2026-08-10T18:48:38.645571Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/orders-CnQjDLm_.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"5149ee288666b5a821b00488079e0e04","sha1":"52d26019b3cc3fc743ef944215d0aefe87827e7d","sha256":"2f1ddd7f61c94be4dda40eb30a6609b82c1972173787e5bc6255f462e127e644","sha512":"e766fa63141db6b3044ca8afa5f033711e9a6fada242d2b4b0b72347e52c2be5ab7761179cbab11766855ae9a298a6484975463bb822a8e301e22dc058fdeca5","ssdeep":"","tlshash":"c0f05c036cf820ec90286744c0b957c5de916418b2d60a2aed4d8b641614406b27bd21","size":441,"data":"","first_seen":"2026-08-10T18:28:18.188397Z","last_seen":"2026-08-10T18:48:38.710994Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/radio-Cv3mNCWu.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"4c6e68efd0cdc971018719399e54b913","sha1":"3d637084d63418d541d4d58d0d9b2208d62eb1b5","sha256":"a5b352402792c52657c93c6b8d2925799ba03b81588e0ad4d18d3991055c6158","sha512":"3e1eb38f38ef5acb01bf75f61f7c86d573a98ba8ec28a8e541e0d4c228830931552afd253a2cc4bbcc810aa3daf68103c6e0cd3b2c51035d8d93d0066460c29e","ssdeep":"","tlshash":"d8e0203eaaed0dbc101a0b61014a6500575d68a8217749a03acc6b390ae6851edaeea1","size":417,"data":"","first_seen":"2026-08-10T18:28:17.941113Z","last_seen":"2026-08-10T18:48:38.298116Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/arrow-left-PCfYj2GM.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"da9ceaa34d9ddf8cad7ce329bd32a6b1","sha1":"0eb7dbb9473abb8f7675ea1724579ec8d9a8f152","sha256":"bd3f562d09333b7831d1731a6871e388e925839866a6f8c2d080802eaab5a19d","sha512":"cede116856599208cb0245fbe562172af8368dcd6902f66c1b7d37e452c322d49eff811395a28959df02c91ef232f6cecf4d69a02784c787ccb5de4d7052cfe5","ssdeep":"","tlshash":"ffd0235bccf60d71091519f1400ed501854465ecd3b6c6917101e2fd02b5c652ddcf32","size":213,"data":"","first_seen":"2026-08-10T18:28:18.369832Z","last_seen":"2026-08-10T18:48:38.772915Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/chevron-left-CXwi7oK9.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a4ee00daf18895e7fa5257c47ebd05f","sha1":"0a03ab511b143b6bf5db747f52f7ee2bd633ba4a","sha256":"65528ce3b3653cc3a03c6a0752aa20975a68b212643fded8880e54c96be79639","sha512":"2b9602372f004df9523a90bba70265ee23f51163deee594ff619a7533eb18a9b2abf8b3d7a56b6d8217b11330b18c6932cc9d731cec0425e4e89844d0d1f261b","ssdeep":"","tlshash":"2dc080af7df52d750e490e7750594255890db09ce3b34844f241275d0291d857dece30","size":180,"data":"","first_seen":"2026-08-10T18:28:18.27878Z","last_seen":"2026-08-10T18:48:38.785224Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/styles-CI18TvcY.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"69551faa3025c562fa352813d370de54","sha1":"f1e2ca2ae75efe758bd60da2bd1e52fcd4b8f8de","sha256":"e865cfbf024e43ebef86457c67e077f717de4ef2297c14197e908c3d5f20bba7","sha512":"33432e694320746fde48acc3b5e9450d86d4f278b3658e9243cb8304cb8fd4b1a5126957931261f833b9bab7e8fa913adb177e3a8f56271df16fd327e9c46565","ssdeep":"","tlshash":"05018946e8e3546c36235429002af2fcbd7d184453191d2453e832b03a91ef642a2d5a","size":763,"data":"","first_seen":"2026-08-10T18:28:18.385276Z","last_seen":"2026-08-10T18:48:38.85195Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingFooter--k-TzgBV.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f54f79d88b3d7c7f104e3f624409bb04","sha1":"610fe0ff2e40502186331e860df0747cb3a1e5e4","sha256":"4efc0bc029c100c6905cfacc933b7c4d1e7fb6ce925cfdcfcee06c38c9d12a67","sha512":"921e08ab095f9823c220bf5b367bdcbbf92ee5e231a15e80641d95cc99b9e22e84a84f2680e3cd41b82546f68ef9dce442b98f80e6c0a139fc12d7b1525f59f6","ssdeep":"192:EdLsmGkCxYnmST+PDpX9wJbW3BDQtp+xSisskNc3B6Zsa42hL5JkO8RziMQqE3yt:EdLs06tt4WBDa+xSNDszpWMjIyt","tlshash":"e9a2da1fb5541bfcf4ca0ee9906b911d772f91589a8d84a8bf19243022c69dcf11bfd2","size":21930,"data":"","first_seen":"2026-08-10T18:28:17.782151Z","last_seen":"2026-08-10T18:48:38.796717Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/shopping-cart-DVGlmWwx.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"515af16d96e9c02fd6b35a7c5678c415","sha1":"420e9b87336cfe14c6b5af8765ae8e8f5ba2ac14","sha256":"4cceef0ac2d18fc6a2e9a183044577f5aa9261dd8a6cd9247c22e982378ff465","sha512":"01eccbd2375fdbe980299cae2537099d357207b45cf3ddf1da6ddb675128f160f9ada23e39e12a5add65b0c1d27c2aadf8f09bc7df70a7713fb86082f1e8b0b4","ssdeep":"","tlshash":"63e02075aefe19bc1e460c52305a9492975ed49cf327464070a943360f948c3e9f9f61","size":343,"data":"","first_seen":"2026-08-10T18:28:18.040731Z","last_seen":"2026-08-10T18:48:38.605079Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/lazyPreload-tCqjB4m6.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"879c0dc4fd2eb297ab62a42b1f79979f","sha1":"15878425c53841a02735d296979ffc59079bdf82","sha256":"2f9f5d42d2b3f30d81c8c6edb833ce4a39864c548d4a9408d42e4e540c651d74","sha512":"c5b50ee40396ef1fc64955c9224dd7959b9bc0fb8aff2b94e7160dc4a1886bdcd51970896acd0c949bbb99bf37ce5ea4cfed86d36e79202c60cda1289715b6dd","ssdeep":"","tlshash":"7ad02b2bf1faeaba76046864813d61d14390b04a9942e53150160540e3557e259b4e2b","size":265,"data":"","first_seen":"2026-08-10T18:28:18.417218Z","last_seen":"2026-08-10T18:48:38.900006Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/link-helpers-BAQdjK7t.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f9e8c3333bc38bf6251cee34a143598","sha1":"9d49797404d04907ed43654ad57945e701b27505","sha256":"8b73242d914c08e3a06f258bd2e9afc539caa098e037ec4b047ecbf3222cc964","sha512":"4ea16caec1943df22e1dc23311658968dc66998a066bc026c52ffb43835e8c52f42664bf4928c75d42124f3397fdd7c6087b9fe9a40c3831ffba389b4209b172","ssdeep":"","tlshash":"f1f002cfb5c8a032a12e4e90c09b868db7349c4a6e4c818090c091b46b00dab51d6e48","size":590,"data":"","first_seen":"2026-08-10T18:28:18.324188Z","last_seen":"2026-08-10T18:48:38.673869Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/HtmlContainer-DsvY5hA2.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"1ab899465d40b8519205c08305f08b52","sha1":"3b4e752f1041f1f01ef1eafe02e949f119464005","sha256":"f3f6b8b16cbfddb7a870c7f40346e6737c0dba6c41bab2e8f14a0c7c8d71691c","sha512":"c9829b9f57992625fdda4c5fcdaad597d116800d8e49f5268879b14ee04e76e0bb3ec49b38d593b5dcc317f8330195c93501e2539c5ee90c221aa09c835a26b8","ssdeep":"384:6mJrqOFmnpLPZN+c1zVhYR29dGAFxM/fK7lg7:6mYzVVU29dGAFxDRQ","tlshash":"17822f17a0e576d7b9895cdb9026880fb95fa84896a90db8f93539c035144c0e36bffc","size":17937,"data":"","first_seen":"2026-08-10T18:28:18.073831Z","last_seen":"2026-08-10T18:48:38.908126Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/smartphone-B6i4bKiU.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"e3823bc071f2105baf2283526cfa8eb4","sha1":"65b50189432cb475b34ee3dff2751065278c1e98","sha256":"e97c4fe25d500b26b1e05632ccc00ae43be90faa8d8bbaa9d3abd3dedf317914","sha512":"87f6a27167e0d3693fbde57a66b004e01860c2bb040b17e97afefd219a247e4d17f81f83c34bd3c4fc3a0ac8b2c01629c2eb9d4672a6d612ae3c752436f852b0","ssdeep":"","tlshash":"25d0951d5f7d2cec5e015df2300ac847dd15e0dc97560c45b310a95706d54c24c78e44","size":245,"data":"","first_seen":"2026-08-10T18:28:18.380195Z","last_seen":"2026-08-10T18:48:38.635585Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/react-dom-4VPqkDg7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"4114967659bcda1731943f0a1e5fea80","sha1":"b04c481632c7341ffeaf0c9177a7ad842dbab852","sha256":"475f86f2876d81fb8f3f920cd28d1937743ddf506ea3b5b3001bb8f1b789b520","sha512":"987e77823ae66911659304fda328e24f108a1da77d2a7b04033936e677e54adef083057bd2260a6cf23cc9d89bbdd72df827f96e5f50207d8a8e55c93534444b","ssdeep":"","tlshash":"e771335dd5c0b4434ec3591051bfaf57b2d437721ceec2a043b2d9b199a3a09057ef68","size":3587,"data":"","first_seen":"2026-08-10T18:28:18.008515Z","last_seen":"2026-08-10T18:48:38.284437Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useExperiment-DniQ8Qdl.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9991450c10146ddd96c5dba3f633fb50","sha1":"6db93fe28c8a028c96b0c88a29e4dc9d24ed58f4","sha256":"6b495eebc672103b2c0b220d740333425627dbf035e1108356aafa24870642f0","sha512":"0614bbabd163cf7c416af694970e18e8a6a1161ebc2528e35de06280bf3055254e416bcd569a182703de6caff4f940191988b02b58e5b99a485cbce2b5ac68aa","ssdeep":"","tlshash":"b561d7edb34079f9e3154532c1af013ae33f25446448c020e179928f2668e4687a7f6b","size":3447,"data":"","first_seen":"2026-08-10T18:28:18.110147Z","last_seen":"2026-08-10T18:48:38.52901Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/uid-B_EEBDq_.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b12285db3666dcbf6306f1633480fc7","sha1":"96f072b9b1923cac034a35e6e0c17014817b52d8","sha256":"79466084b9855b947bcb0f19c3e8dfbcef6f59c93fb930928310ba95175f6c83","sha512":"cb580dcf8ab98ceb2af8228448b73070e7d9755644e9044307a094b418aa409d13125f4b5a72b75714476027ceffe3a73a13ad1f38d1e6d31ca64d2c5189c31a","ssdeep":"","tlshash":"6bd0a7467aba25bb08510c75078b9a4959585bd0d03707a6d09194993920ae4257bd41","size":217,"data":"","first_seen":"2026-07-04T02:32:37.309243Z","last_seen":"2026-08-10T18:48:38.397865Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/card-BDPBJvQ7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"e77b906d95fe39432af762aaeb22f1a1","sha1":"1ed7629d357411e7f77f094ac737b3660e4871f7","sha256":"528789adab8ef709ae82e219871d8a4dbe94fece9030b7a5b43d40abf90bc9bc","sha512":"6b4ccc6dab3626326ef6fdad2728401d8e9130f7bd5b764159e2d9fed1fa91ed346d1dc6491631a308e55aff504636ec225f3776f3c0df73d81986c9eebc1953","ssdeep":"","tlshash":"2d3123d5b9423a7d53c7471e81f59040d26576e96c4f19eed88cf3192a33ba443f0a92","size":1582,"data":"","first_seen":"2026-08-10T18:28:17.761151Z","last_seen":"2026-08-10T18:48:38.580458Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Hero-Bjo2ud7w.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"536623aebe35043e9bde39378b42eae1","sha1":"dfb7fc6dbba9e44db60cd07c672cd891fd8c4e11","sha256":"f90f0aba0c7d0ea8589f592146851b2daccacaed89b317076636092157177f38","sha512":"26258498ea8e93b05d571a955bb51769fea8829fd291ea6d6befc1b171731489b825e5cc0b2b4fb928def7245355ad53b2e50c1dd4e3701c6e2f10eb52e95528","ssdeep":"","tlshash":"958175afd8b476b8a12a4df0a19b419d323f91e4cb0118a8f5e9745417074c1fa16fd7","size":3972,"data":"","first_seen":"2026-08-10T18:28:18.299305Z","last_seen":"2026-08-10T18:48:38.523067Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/landing-hero-footer-kEzyS1sY.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"69822176eef17fdfe689ca8bd763a2a8","sha1":"903aba601a93d51bc917c312afe839d4909fd05e","sha256":"c65c650d190f96deb6fcf905802b3efbbbe97b5bbbcba4f22c0b6eec9ecbf76d","sha512":"01ccc69ba98a3639652f48370fa29854b198d4fdf922e515bdb083c9157c8655b6b917ea08fad1a3e42e2a8b4499abf22a1985a08568a280adbfb8e02f03bceb","ssdeep":"","tlshash":"ed51647aa88154bc68ff8ce4e0165179a33d8028e7096eeab4bd27ab31155d1bc1f7c1","size":2806,"data":"","first_seen":"2026-08-10T18:28:17.945146Z","last_seen":"2026-08-10T18:48:38.291803Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Product-DBz4EriG.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"57c4d711045f7059cd7c796a4fdc4032","sha1":"2919e45d7a904584a141563747ea397376f2a554","sha256":"d4a96ef7547018315e31e6595e5b90b85f9d8f57f3d3c81dbdcf9c6b7e8d1866","sha512":"01953c5c5af0b142fb43cfa0156038ac3d8e2cffce81e465ca6000f627a35245e44e7902bc14219e82e7c61c6a421a4af51e1160c8437e4e5b19258c8f94fa2e","ssdeep":"96:PSAbT7WEQ4SiDOTLCq4EEq4z5ujQvV8+49SVmH8baSaIXrDP9+OvZ:pbmEQpJCqSqOEjAbkSXvd","tlshash":"4db15445c421e62ead270968c26e420eaa78419cd713cbfcf4d4a42c32815dcf71fec5","size":5094,"data":"","first_seen":"2026-08-10T18:28:18.386528Z","last_seen":"2026-08-10T18:48:38.382101Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/cloudinary-B2VcqVl7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"6b7bcadeecb00adeb1a0f8a3ceb0a615","sha1":"b49d2586533296e7e00d8f829a39641b01743561","sha256":"a748b59b3346827bd0e024e711f246d69235e25765ab2d3bfc89352e6b2e76e3","sha512":"25ddeeb6b002bbe3fef82e8233505c897488b7a5e27ba8ba4ba15398b1a1886fb317b26d29d6259bcf6d57d477f2d4944f92dd57b23c64090501c8f149519e46","ssdeep":"","tlshash":"eb1146b171d5f472c36ec55291d51849e25ffa363c4e8908b3c134ba696264088f0f30","size":1076,"data":"","first_seen":"2026-08-10T18:28:18.029388Z","last_seen":"2026-08-10T18:48:38.87979Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-D4ftO2sO.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"06c6483b0519501d311c03bfddd023cc","sha1":"00bdff061f7ebc0baf3c990235256749c6180e85","sha256":"3734d072d2364078d82dec0c3b6f05434c04897e8d1e046191a6c341c76937cd","sha512":"56ec66358a7a1fc98a7ef954817c470fd499f331b2940fdceb8f7ea54ecd2357732046b55a2c208f771a0e979e180416313ce3bb6a8d1d82241433c747d6ab2b","ssdeep":"96:nkRNWMhMOMcaM1M9Rmofm9M06Ex8ez8muRYdCujKII0fmiGWrBhrWGnrHtQrzclf:nk2cZ6exn9zZOXXMfjzHGW1haGnrtQf2","tlshash":"14a184de2021f5f8aebeaca89617543d1b0a99cd440e0954b09f4e2017ee290f293f97","size":4944,"data":"","first_seen":"2026-08-10T18:28:18.276784Z","last_seen":"2026-08-10T18:48:38.394597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/bitcoin-maxi-mode-Duin7zGA.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"48bf7a16f90752ffbb7177e7266f7f40","sha1":"802c5f111f82b298b5b6f0560c86970e339ff7a0","sha256":"33ea3e3f7bf53242d5cfb5ab3362f32775c85378623d67e9efb754d270194c18","sha512":"38fb35cc1aa223fa4ab9638f35b43a77e730349d6a89b893b80faf8f6190afe1331e63ab136a7f4e509f5c532e07c7d57d3f5a3842a0af09d2841942b9d09f12","ssdeep":"","tlshash":"79f02d4ff0f23cf8a1adc0a4c0292c06511ca5f9668c2fc6902d94e4a3385a40d77ebe","size":643,"data":"","first_seen":"2026-08-10T18:28:18.001885Z","last_seen":"2026-08-10T18:48:38.741812Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/credit-card-BkSYA84I.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"639d9b35c21dca9eed9bc05788fa3428","sha1":"cbcdc97190a3a122470539f59a48cf9fd3b71fb0","sha256":"fd20302eaee2dd8fed6410059b03a35d43082ed91deced50f02e92cd75413a0e","sha512":"fc9d7d325e2fb7d2e0f276b9bca69dc406121317dc7a9fc6384a03e8945226263b9e3d20c24ce054b2253d1a97d7738ab03cb7ccc569a5b7ee2dff7f4a009042","ssdeep":"","tlshash":"66413334e0d06cfc58378fedd02aa35ff72d945cdb041624a9992a581b412c87b16f86","size":2311,"data":"","first_seen":"2026-08-10T18:28:18.035475Z","last_seen":"2026-08-10T18:48:38.457404Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Stack-USOOIFVe.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"0771cc98bb874f030adaf81d24587f2e","sha1":"3a413d7bac337a566930d0b30a923d24904114fa","sha256":"64c17eff3be443ac34751f1dc126aeeab3c657406c4401eadf64c21a4154a829","sha512":"d0e0df194500ad670db8f9e8e2998ae241ddca2c1b3797bc8c7aa65e90ae204109cf23cb78cbba505b1d1aa58d2ab226007584fea1155b65332b16242b7fee9f","ssdeep":"192:mmvM/TM8eo+tB7JR86HN7b6fUwTuw8lkIgrLPjWNS38qHqRq2v5keoeqgqbq6WUL:mp/T8xi0+xLUBmtW6ELo5","tlshash":"1a2237181cf7897e0d9e974828ae7661c3f37cc8d81499d02b8fe9a70586eef1792d44","size":10318,"data":"","first_seen":"2026-08-10T18:28:18.06363Z","last_seen":"2026-08-10T18:48:38.593067Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-assets.i.posthog.com/array/phc_xmHABzzV6vPbfs99jW8FFZUNeVgPhWJsNu9yKmyMmVys/config.js","fqdn":"eu-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af5e6319bd6cd6195b94d4af7f034c09","sha1":"fdc4550538e881122db1a61b0f4ee6aa11e6405d","sha256":"655bb9172bfe046c4c0ab71227bfce9917da5a44d6c30e0641e97f754c805e17","sha512":"47991f390055ec744e4a528cc53d5f88306fd438640404bc641f5c3abda7b750f171ca160b1acfa6d12dbfb0271083deb97e9e56c8338ca98ced5e747849c04f","ssdeep":"","tlshash":"7f21003d6968187944ce8325a6877d06affe023732186c58f4dc8b5471fe5db5542b03","size":1171,"data":"","first_seen":"2026-08-10T18:28:17.983569Z","last_seen":"2026-08-10T18:48:38.599507Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/differenceInHours-L4JCVyfs.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"04c64288021e48a5c40f8dae5ac1acec","sha1":"b2c407d7608fb5f98e825b963f33e3dd999c8b12","sha256":"d82a2b37a5b57630ecbb2959b954091e72f92d78041d099bb5a68c9270c617f1","sha512":"867503129f7bf08fd3fef6524a8f5802ce6af2936ac646ecfb6b4f352b17ceb03ff504514db090eb4e35e3baa4796cef6fbddd3a4fa69f01fdc93eb7463ea4ee","ssdeep":"","tlshash":"07e0c64bb0e63028235d0c2cc01b300af11ea9a2920e0fc8e084da5032185e192baf37","size":319,"data":"","first_seen":"2026-08-10T18:28:17.755788Z","last_seen":"2026-08-10T18:48:38.465477Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/bitrefill-card-CJCVqoRW.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b45e6aca012b9d3848509844875b0d07","sha1":"d9fda532610893f9d8c940a23e3dafd8482d3232","sha256":"cc5ad77d44a9fbf24d2482a8fab95da971c207d5d403f9bfb2b4fd6caa5f65b6","sha512":"b19f6ca182101b798f7cc80409264c8e43885b86f6e3094baa67c37c4739d20e3fc3f557a3f547ee21246d1aa160f515497e0a0fd340b30bd536800b3bbdb358","ssdeep":"","tlshash":"b9f07dceb5bd20f87c278c28c037126b9238b9129056b1f0a167962125387b89357a27","size":623,"data":"","first_seen":"2026-08-10T18:28:18.160736Z","last_seen":"2026-08-10T18:48:38.747007Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useWalletEvents-B1EfKZMg.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"072b22cfbbd74aa94743ee6b69a12fdb","sha1":"b48b37e3dd11693ef1a702fe3838093915884a24","sha256":"ab0e0cd1d9426ebaee888370196a62eeb2f3919754d0020760d049e5c46c75ae","sha512":"8ae77c1d099f7401ca3ea43ecac4ca4b78b10677302fa9898d3091f931566923e7dfd2f52fcab13b7288daa2d98cf355c2d55ad0ed85857a5e3877fb631404a5","ssdeep":"","tlshash":"73e0d8a975d0355281133974415f105e02b62598b08fc110bca9dfd8ae3d89b65a7c2e","size":386,"data":"","first_seen":"2026-08-10T18:28:18.373402Z","last_seen":"2026-08-10T18:48:38.846484Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Switch-Ps7novTx.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"f79afd29fed19cf7c52a052f0a884899","sha1":"8a6bbc8ef4478024919c2f87c83cae989578a9a2","sha256":"6387ac7d8c537e10408f38c120f9b74d72ee5f2752f3426be1ac0e9d8a845cb0","sha512":"d9be9783957e68178823e2ef2c604fd41bdcd573fb1edafee987e9fbd4f5f9ec072dfa8008f2d170907838bf11d6e6fc3c43672a3409befc49b0fa2855b2b9a0","ssdeep":"","tlshash":"5951876fa09078b0a936c8ddc08b403eb339d174934c1bd451da68a41b3e1e7b75bfa2","size":2951,"data":"","first_seen":"2026-08-10T18:48:38.602513Z","last_seen":"2026-08-10T18:48:38.602513Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/StatusText-TkeKxQzu.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"39a18bfde44ea8c82bc4364fb85f70a5","sha1":"c816fe8d6ac4734ffbff81aeccefce9acca2dc03","sha256":"029f6453d17f22484316e648a477a524950b6fe2e116b743ff451afc91aa6896","sha512":"b4c2d7dc3c862f81d00461f8391d74f373989bf872b42f4417c1e739432251e11c07c9d148a49b7b9069bfa81f085eec953d4362c4c7d90b089f0692902b6ed6","ssdeep":"","tlshash":"7221350e9850e9f6960b8dbc111d147ffe24d056d90659abfcc4977043628e13653f95","size":1424,"data":"","first_seen":"2026-08-10T18:28:18.203682Z","last_seen":"2026-08-10T18:48:38.818454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/metrics/","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"975d954161138e5e216258adb2a1f893","sha1":"a243635690124c6244340106087a80ed0c51db3f","sha256":"99b09ba39ac05867b77bf5036ed56a489103791ae87a32654e805609b7e289ef","sha512":"d913b9162c289a69145c9012faab543dbfa721a88986e24955b2244d9c1e2158d2a6c7a7bbc6c01476a5ba66dc70caac63b3d27ee4d21a8358a8ccced7fac7fa","ssdeep":"6144:6NVeuWT05OMX6Z7i+Q+o/FWDEsoGz4ZOl0fcPbvTEaI3sI6jkd8TS1LQMwkwr:6NVeuWT0Qb2+o/5uUZmc8ewr","tlshash":"f6c419ceb3c674659392f478903f018ba97e28e2b44cd895f189cce42e7465a5223f7d","size":564298,"data":"","first_seen":"2026-08-10T18:48:38.783474Z","last_seen":"2026-08-10T18:48:38.783474Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Tag-BXSBGgBy.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"8875e4eb511f707afce690b114855205","sha1":"ef17bf3e12c1b8f409b131d7824632fe8c62721b","sha256":"a478f37338d959325697268e3a12daeb71ec845c487205caa9c615439abebe7c","sha512":"1ce38bdb030f1baf68ea94fad50f10055165819aae6aea48f5d8e0f678ce872a3f4b7ac363a97a2f5351cff3b0722a7fb6622938c3bccebf31064a860ce854f3","ssdeep":"","tlshash":"37016b4a909826fab00659fdc06b046f6b3b9199934e1eb5a42564a013314b67627f82","size":819,"data":"","first_seen":"2026-08-10T18:28:17.883251Z","last_seen":"2026-08-10T18:48:38.5759Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/circle-alert-fXQEtylk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e3e61df43e46a33bed718ad7cb5e3d6","sha1":"33e9450835382bc4f122b436fb8b748b6d46adfa","sha256":"0a26fbd823bbb17c8587fcfb66efbc6daa0fccb59d1ff06d148bc2333193f95f","sha512":"d5b194c87d72497cf7eb9a6bae45b3d49d77e716c659224e92fc26969d0be9b4bdf8e9315638b705927e7b6bee814e9c14ba3f3a5a52e135cdef823171f7641e","ssdeep":"","tlshash":"03f08b6efa682cbeb4154d8c6a65d04efa6bd297ef061904fa8c21a093005d0b331fc5","size":535,"data":"","first_seen":"2026-08-10T18:28:17.847675Z","last_seen":"2026-08-10T18:48:38.891362Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Money-vQzkScfG.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef92a357901c1d92d3a2e74c028e356a","sha1":"87428935c3d77e7035a53ac4455c22636caf6479","sha256":"be2dd9f18a21833c8bffd75e83a0d58f018d4cb4ca7130f44e979bfeac34663b","sha512":"e80974bb4d93a44a678d43465b006f11881556766b06fe49cba4267ac939e960d32ef203e720679336708070776c13d8dc46634801489dcc7e0943cce98c55ba","ssdeep":"","tlshash":"3df07d8590a125f5a83b4cc9d06ea187775ee1b89b160aa8999f317823200e4b60afd9","size":611,"data":"","first_seen":"2026-08-10T18:28:18.023894Z","last_seen":"2026-08-10T18:48:38.855606Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/polyfills-CZmxIG97.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"833f5d0b0541d08a9938308d1913dc41","sha1":"838da3a61167f5915c8e525be186f5e1592f1aa8","sha256":"c6a3607b48a3f43d741b4c96f324168c3f0b82b7b603dc77524d5b185d4eaa26","sha512":"93115063d64a05c7fefdc5953f71535c4b5befd4f5545205d031c036d23a8e13196ec57fd4cbc8a453aa6ad14c3d73c04d80e64ff9434aa0a3ed322875c0c6ff","ssdeep":"768:J1nhWxyE5fHDRUkepkNmP8PrdKhAm6mN/ZaVlQP3LaQugPzU:J1wMksP8Jm3+Qq","tlshash":"8f63a686bad5b0e502b7b559402f4407b3261a45bc0ec4a8f27fe9d078bdc499136fbe","size":73240,"data":"","first_seen":"2026-08-10T18:28:18.014295Z","last_seen":"2026-08-10T18:48:38.566433Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/proxy-DR8vbTgA.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d2fd02c898b87105d80490b23cd2a2e","sha1":"eb83c5d1387fd813c1d78ae6dad0f56f4397a018","sha256":"54d0c933a326ab53234b38f31774e216f3344256a7b6a8dc1ecfde66f2c96175","sha512":"e7e210320926a1c93112a120ba6a8bd56f98e5aa04d374d29f8c42caf6917d868ffec6976caad60c21ee4ed809bc544bb838b6957e5e59f4a0937bf83a11f246","ssdeep":"1536:/Zd93JBaqgOLxZOLjHXrxO8V5/FjvmXV5EvEyUcM5JJSk:/Zj3iqZc7w0EjJkk","tlshash":"d3b3e7d573a0b121d3cb9166c0af4b45b33b59d8280d803c7639a9cf396190867fbb7a","size":111264,"data":"","first_seen":"2026-08-10T18:28:17.819991Z","last_seen":"2026-08-10T18:48:38.500024Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SkipNavContent-mNNDP41q.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddcf7e825755b6f55ca08307a5f4949a","sha1":"7f7fe6047fbc21db5428753d2425220e25e31c29","sha256":"ba3c27841790dce2e4b6d5eda739bd4f100a9f2be173c860f35048fc168e0b3e","sha512":"bf586e103f9cb3171a9df80a8ed8009e1aed76491e5297f6e1cd1b1456e777c83c84488106fb84ebf37a24925dda6a238240c7213cccdf3edbc33e6bd719436a","ssdeep":"","tlshash":"0a11dd96dad0b9f5b80b4ae4403bc16e721f6888821e55f4bc53b0665b405f42b23fda","size":1075,"data":"","first_seen":"2026-08-10T18:28:18.349376Z","last_seen":"2026-08-10T18:48:38.530934Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitraflll.com/","fqdn":"bitraflll.com","domain":"bitraflll.com","tld":"com"},"ip":{"addr":"91.92.242.79","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbc10cd5f8ef00281a6f3ccb92240808","sha1":"8822453b3817bab4cfcfab685ee0e832a68bac46","sha256":"35e3d62464f8a4d138705fd2a2a05a16aad9cc13fde7cc97ed64a6d70fd3529e","sha512":"e9dbc09631e3b9e1137ef8888883065f4bbdd212b8786697a73083393a6f9054113c4d40cf9793a16528dd00673fa0b099d03299bde87065016b59376da558ba","ssdeep":"","tlshash":"5ee0720e19cb4a3081fb508d23fbdb7833d900030025dc0438cccc2f2f20e12406a28c","size":328,"data":"","first_seen":"2026-08-10T18:28:18.467807Z","last_seen":"2026-08-10T18:48:38.918909Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useKycStatus-BIe1f0do.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dbbe8c4f34e4caf72fab8472786f0d0","sha1":"06407bc4199643a27514a0314c26f7fa71a8f575","sha256":"1621b8c6158aadcb4314299d78006789221e6a29242d096c6ab9bba36482c570","sha512":"7546ad11007a0f695f1bfcc5746ebeb0dfc9a1bc42b7e4bcf6d7e4287a6e52c21a57bb603a7ca2dea03b18f22891a0caa75fe6c3d434561f1e27bee8f1447357","ssdeep":"","tlshash":"e0f05488d3f800ba6a1d1c1ed03505a09a7c7006d242a734e2ff5634733caf4c18c713","size":482,"data":"","first_seen":"2026-08-10T18:28:17.996113Z","last_seen":"2026-08-10T18:48:38.321006Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ThemeToggle-C4axI8RR.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"265086c6cf38a5f2b245cf5399e29141","sha1":"5d89200fb91b107a0b07ed99e02e768f67d03a98","sha256":"3daf8ae9987b3bbe248ddabd4c9984a080f5a76e44bedfb63da6a89458e08699","sha512":"bd670d46142f6a2abe63c30102d637ec81b3457d9121a4f583b13b51996e0e18e674c3254b1087af27a2b7c5d831531868aa9011ebb1ee00e0f1019592db2243","ssdeep":"","tlshash":"8c210b1eba407978a40fc9d4e8660a230332a97c671555e1f06b9e880b29d49edddf1b","size":1332,"data":"","first_seen":"2026-08-10T18:28:17.765348Z","last_seen":"2026-08-10T18:48:38.772065Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-B6FuTlA7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1251bf4775fcafd96640d1c128caf62","sha1":"f1b9ecace6b8fccf69a0670979aa527bcd3f46d5","sha256":"58f1bdb4e56e8868c17685df76f610d2303cb04e572b851d6a88b556ce7a90b5","sha512":"8f8ff21ebf72b34d9a3caa7a2606b52368395f91163fe926e26010f06dafc21d5a5ef722ba79453979dbc4a81cc9593410e3001f983c45cc2a29b8751042601d","ssdeep":"","tlshash":"7c4144c970d1b290365e4892c0bfc96cb6bf7a5a001c6124d45468f125399a893f3fb8","size":2063,"data":"","first_seen":"2026-08-10T18:28:17.712388Z","last_seen":"2026-08-10T18:48:38.73719Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/utils-VtQLBZfl.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"adb4166e31014dbd168bbf509a3ef0cc","sha1":"7b8ecce8fec2975c08b30f8b8d6f52c9f394b72a","sha256":"3e47b381ca75e7a41350498f5f9167bc1afba0e47b3f8a8dd8492fc6074b21f9","sha512":"256f78855fe53dda4d7f752f6d86a7f792e26b094351915e6fec2ef9a4220007afee4e6ea337aa42d834c23491443f514735fe6e13406dc853e6c61bc53ca882","ssdeep":"","tlshash":"415152df74f5f0b0731a55f1c0b7021bb23cd8641c8d0224f19665553b3966ad2ebe29","size":3128,"data":"","first_seen":"2026-08-10T18:28:18.297337Z","last_seen":"2026-08-10T18:48:38.409624Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/no/en/","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"77642f2f6ff49adfddd5f45334a9b455","sha1":"cce3db46081ce0e994eaba70eb9d82bda42b09a9","sha256":"e6076fa728fc983c591fffb616cb15d82b629ba204da13995f9721ad7db10c3f","sha512":"35e418830803ca8e8559a7e94bf47c26c0dd765522841f63b1adfa785beaf374850ccb7ce938d507df3bdb2c02211e25eab7d2dbe63ddf275de005d59fd6de76","ssdeep":"","tlshash":"96f0dcbb74122876666a55fa23b476267143160da8060822bcafc8142f5c98b4c22288","size":465,"data":"","first_seen":"2024-08-20T03:23:41.344899Z","last_seen":"2026-08-10T19:05:30.146017Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/utils-C4bW6HNT.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"709b81652f7fd388b139e54842a72776","sha1":"72602220e16c0ae4985fe9dfdcf3a878023d1265","sha256":"83b7b297601644b3f952193b71051a9f08bd633881857ba84b2838fde61642a9","sha512":"0c733a88b7fc7c4922e3bf328c1abfd6d4be852f9f7d05da7f3917b277d4c72b53a0f579c84914681a909255fc0f5fd2f0524ceadb9a7b7e123fcf709bfaf0f2","ssdeep":"384:uKsHlVxAUpx/ALxus3N63zeRBEKk495FCbJOOtpaWk:LsHlVxAUHius383yRBEhFtBk","tlshash":"eca2c7a931d2f030d3ab4066516f9909f33a68a0784d1414f1b7ddce39a255a82f3fad","size":21291,"data":"","first_seen":"2026-08-10T18:28:18.062016Z","last_seen":"2026-08-10T18:48:38.482015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Notice-BFBvmUi1.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1c2baba87db5f0a06b3e93583317d1d","sha1":"62e1bd227c25621bdb10a3551247f721bc81f812","sha256":"d32a0c28a917866d3d070d2e4547d098cc8b434f09f2f496af84fbdff12e5b32","sha512":"c18b4e3d67d7de3e1b0c34bbabd276e841968349d0e565e055b65d2a31d5024ab29863ddb0b935fea117ec6b4ffb6bee718fc195ec23140088ae7400ebd4f2bc","ssdeep":"","tlshash":"7a21e21bd011a6f8142fede8e01ce0eb3328e15cc74106b8918d296d7b234a6ab17f43","size":1409,"data":"","first_seen":"2026-08-10T18:28:18.408041Z","last_seen":"2026-08-10T18:48:38.909288Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/prop-types-CqqpnCOS.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9e66e50fe9def937df1f165de5c5c79","sha1":"cf2ba55a59b031ee2466c1f8cf6403bcf38975dc","sha256":"f39710a1e57b8e659057f39646f9b32da884f7ca21a3ce45db5f3d35ab7bc3b3","sha512":"e807149687296d0e891bdf84d4dc3f295e0c8a1eced5c81d5b5c6c7e3b8b2b2dc13158dc9fb976476f1cc53bdb7a096fb7c6fb66d4fe955968d3e37b18d085bf","ssdeep":"","tlshash":"bf01520bb290a9bc1f030662c64d12e7e15298846b8e750cb0d8c1dd3b2cc7c265fb20","size":851,"data":"","first_seen":"2026-08-10T18:28:17.799825Z","last_seen":"2026-08-10T18:48:38.898717Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Connector-DhjvnMXv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ade327f69db148a18270a30aa3dd293","sha1":"2b0859b4dd80f65b8042e11eb7d1a000af3eae4a","sha256":"71c61fd8b97e2b8559aaefe2f24044873cb49c0d5b0aeae22ca935aaf0e37c33","sha512":"6a97d2e1c5c6d5beaabdcd312d070d2d9e99698b0eb682619bc2d2f57e642f9ea2bbaffa19f4c299e94f4db41066397eed0840ff25ddf27db150e8566bbb80e0","ssdeep":"384:6HGok0wCj44SvIoOR/MfC37T0XSuIip0oZP6v5:4XtjdSQt0C37T0XSuIip0oa","tlshash":"ea424ca9d93811bc5e0a5fec853910ab1b2df0eaf712d264f7594f319420746ee00bbc","size":12452,"data":"","first_seen":"2026-08-10T18:28:17.749817Z","last_seen":"2026-08-10T18:48:38.82689Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/search-C_n3yDYH.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"db0fc3747f8cf8fc716cbd06a085f996","sha1":"da9b6447f6b517c50431b80ce2b9d08a4b21949e","sha256":"7bfe09b2125ea364ea2c67f2339eacc0dd4e6cd10e7a297c0af153ebd4f8232b","sha512":"d9f316959e9a2edd68aad6f001394c026cff84aa4db559a87cfa97ddefed0ba27c16344f2ced1822fde975a8800ba2379872519d7b7c606abecf67a1d881ed3b","ssdeep":"","tlshash":"e7d0a72aaca908b41d2118605119ac03ad95d08c93524b4477d0523906d1c725ce8e51","size":218,"data":"","first_seen":"2026-08-10T18:28:18.263592Z","last_seen":"2026-08-10T18:48:38.533679Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/new-to-crypto-MRmXXQjV.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"dc065726e6e3905332f0a290ce089e5d","sha1":"fcab09182f5618dcb51ebcc75c728db65ade218b","sha256":"ab70e6600f64c89b327aae5bef31374f499efedb94782a1a3cafe9be38435b11","sha512":"16f1c045edb157de28fff53f0818d9903797f9258ba48d79d6ad82862b57f5eeff0d3bd4b77eca7022fcaf05b4b21f68530242d13babf74a18fdc2ad869ea55b","ssdeep":"192:xWQxxaSIfBzYOfDufQldfi0gTfS7e8Zn2ifiQ95Ah0IExA6ateQqYuWmgd:EQxQSIHSOlOSN2ifiQL9I2KeX1Wt","tlshash":"8f42e9db6e7cb3c865da05e5ac37640d903bc19c4febcde099a9d4482160ac5b27bf84","size":12372,"data":"","first_seen":"2026-08-10T18:28:18.020284Z","last_seen":"2026-08-10T18:48:38.890637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/user-DT9lFo3b.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"3da71ad9718458b3cb88b1b43844f797","sha1":"bef74264c2b3147f0fe842cc18a2d4ef336a7f75","sha256":"f14be366edb9ac6b898b29b2440f42337a737303ba4f6a1b13c13ee59f6d9c09","sha512":"6c1e4e6b3ad60fb24e40139bb2b5bc57a5a4bb771ffdb383bf12d1c7811f8b383dc5f44cdaee247d6302b7a7901e52f8987cf436adfeb860f4eead544e5a7072","ssdeep":"","tlshash":"d3f09e1edfa90cbdb41a4c5d6a69b58fba76d2a0bf422615a69c217443002c05321fc0","size":479,"data":"","first_seen":"2026-08-10T18:28:17.716474Z","last_seen":"2026-08-10T18:48:38.479828Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/classnames-cAi7vm4R.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b54f383315b4682fed0f7bf7b1f79e67","sha1":"00b5d2ee4ac3e48f691888c9697b9cc9868d8aed","sha256":"c1e8ee7280c498dae66d90a5af7c832c79ff4a7dba26b7b88eb983db622ac89a","sha512":"5177764b6f1ea8aafcdad9b9da6f720e58532b7ad68a0401785fd6a6921ebc8beb006b87b575d4c0f578ee692186be79315cb3bf7bc647b908381bb034c9a505","ssdeep":"","tlshash":"2e1100d535c7706513530421403fce06f2387dd789deb481c295d5e07daacaa9613f3a","size":868,"data":"","first_seen":"2026-08-10T18:28:17.937799Z","last_seen":"2026-08-10T18:48:38.784619Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ui-D9WTwPGB.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd6b9e7b26cb0d20cd6cb3cb48adc660","sha1":"2ec1219b8516485c9a4c5f4133d6ad39ac2e4f99","sha256":"a9133db2c181a8d47e2308d2289c748171f8159abf3cfb424f9ec323c908fda6","sha512":"85c25083211c2e844d5dc8f5bd2933bd3cb43777e9beb6befc71fbdaadd2ab3c6be981c9495e2a80584f4d400b34ed9abd5c35a407aa312bf19c80c4a120e717","ssdeep":"","tlshash":"6de0728d0ce506b0b8060174b920cf608083ec2eff210202b0828f240630592aa2ce26","size":310,"data":"","first_seen":"2026-08-10T18:28:18.03049Z","last_seen":"2026-08-10T18:48:38.906606Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Skeleton-DFqcKaYz.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd2f0dddbca10e41626db6cfe1b4160c","sha1":"95b73f74495195edd3a69f27cf739e8cf72a1106","sha256":"f9e787d197a4281dba6785136478b4dccead863ed469ac83ce8bc0be5807b6a4","sha512":"d94670ff26d42d8761fd0ec0749037152498862f6cb9fcc6db3b682fb4b104cc7481dd8b978d2d64798de4a38011fe8d98066270bff50cb3fe0ea0325d2d1358","ssdeep":"","tlshash":"a7f0dc3eef60acfc68190996e50c4adaa23cd0bb8b89cb08d36079e4160106c4d21e02","size":452,"data":"","first_seen":"2026-08-10T18:28:17.869553Z","last_seen":"2026-08-10T18:48:38.781857Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/format-oG3G5AAQ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"62167dfe98bbdaaa5e95f17a9574e05a","sha1":"89841a74b6f583c34a4498b1a420d7f413ba9eaa","sha256":"fada9f095705925cab41390c0f986a0b85eb304b049451bf7be1a4484ffb1a3b","sha512":"3e30d427f22547eca8d69902f6c01a0d8dc5c6cd47702d9d62be04eeb97db4fbae3ad5f2dbb1b02daa4cdab66c50e5aa086883ba3ec77c83d5b88707e2f6ddf0","ssdeep":"192:+/1gxX2GJGc+h4eMHdBhdy2lqMszc5J+WeNx:2SxXmh4eUdvdy2EMMc5MR","tlshash":"13120ed0b9c3b12ea3e34e1d90351009f3ad5de1ed0e6e21f1a2c24a78e294594bafd1","size":9740,"data":"","first_seen":"2026-08-10T18:28:18.103114Z","last_seen":"2026-08-10T18:48:38.73977Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Link-qwEkNCla.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"d602086c09890e57f4f0a7a096911044","sha1":"f457a1d6a690d90e86d3519db87509e0cd4b8b15","sha256":"c9f413332db8b9ad82ba090a29552fd3acf4ce9d9b676158ddb55857eaddde6d","sha512":"2194cd1def048768abf71b65c63c50f59b587b5b85a155e58efc83122af9dd34f27f4c2cbeccaf2f6fd85b88e22e3e02b1f38636669f057bedde258f7ecd5acd","ssdeep":"","tlshash":"38f0a2c8c86874fdd42a079d904623ccf793d050d74f4a3c817012789655b05f371f56","size":601,"data":"","first_seen":"2026-08-10T18:28:17.715041Z","last_seen":"2026-08-10T18:48:38.77629Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SearchInput-7Xm4RZcI.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"923daeb22c0a6b151c05c47dc8f3eff2","sha1":"372189f617d2da9ab5c26198191eb4d2d7985c7e","sha256":"486658b6ed345f70d031b62a6304f4c78ede787c6caa6885e4839704602ef995","sha512":"65bafca440973810f427177f612b171eeea2d5be86dd61b58d0ad5e4918d3f21f8c7e2b8cbffc64371ab81dde5ab69219ad3b53cf4cfbe016c6d3757365f54ab","ssdeep":"","tlshash":"f621375f7001d4f5513688acc08f592abb5dd0d5cb071f55d0b9147052a1dce6f65f0e","size":1168,"data":"","first_seen":"2026-08-10T18:28:18.270412Z","last_seen":"2026-08-10T18:48:38.452784Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/string-Dvb3Gdz6.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b617126102d60558924baaebad5b91b8","sha1":"619ce630ae9c0aef6ac206fafeeab97c411fb3d3","sha256":"b7fcf954dc338ef4f12e8bc38eb31d1701b1e50cf79bf76358bb3915d063a3e5","sha512":"3545225c695e8899bdf420ab06c2ec2c3f345e338fb099f50edf6451e4ae2d4506773d87c2334a79f853e41c43e53b7914d761c184d2ba6509a76ecf36068756","ssdeep":"","tlshash":"2711cede73e2b677630234b458b780aaf17caad2099d4925f001b0d63474134d37bea8","size":993,"data":"","first_seen":"2026-08-10T18:28:18.174308Z","last_seen":"2026-08-10T18:48:38.911271Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/arrow-right-BsO9DBjk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"13262f8f137ac7e3cd6fd76d0971cdcf","sha1":"cd9a26ed332fbbb3844381c4ad7fdc9a55055433","sha256":"39c19f4e7cee5f642c1896af454e7e62d10de439075cea6809dc0e81af36accc","sha512":"3ab12b22de3901e931332573be6cb5eefa766ba0bdb03a2b823e750e87e4fe47e79dc1aec10208de9c459c93d91bf3be076b6a7ff373a67a5ffc3a8d034d0ada","ssdeep":"","tlshash":"21d0221fade62fb18e002be75c4e22128b1551ece3e384807220f2bd02954e228adf60","size":214,"data":"","first_seen":"2026-08-10T18:28:18.089442Z","last_seen":"2026-08-10T18:48:38.738536Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/star-B74l248E.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"c93a5522105ae4121709c62633cc73d5","sha1":"778fb52f493450893fbc599ff45317036969ff6a","sha256":"574ab1c30324238f10b74ce1083f894fe56e20e292ce116a8d4b079e83cc46c0","sha512":"584f1ca39bb0489493994ba48718bad360d3e13f7c6c9d0bef19578fd3fb7cd2fc4c467a9ffeb8682a50d76f517ea9121ac6c4214006572dee44cb26045a5592","ssdeep":"","tlshash":"ebd0a72fecf04c77d80c4deed07e059e7b24904943452520ea4c516052215c1f665f97","size":226,"data":"","first_seen":"2026-08-10T18:28:18.140206Z","last_seen":"2026-08-10T18:48:38.589413Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/object.omit-6Pujqf_j.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"6042a7ad148e7342c8f335c71638109d","sha1":"f929ef097e7310764c8341784ca5e34cca263be4","sha256":"193b5140d0fc9be5d437289e0c2deef1a7bbae981131edc76712966bf7e6042c","sha512":"3d9a136032265272f826d3472b1c44d1fb3addf897b16a49cc7a086be9e59735e69f1f50b71acd0cb953081f4899a57e905950bedb213e57f7929693993bbc09","ssdeep":"","tlshash":"0101abc779e2a4a1222a9995401f8c2ef12691e1788ef144a381d5f0a9fb80ed107f2e","size":852,"data":"","first_seen":"2026-08-10T18:28:18.112081Z","last_seen":"2026-08-10T18:48:38.840602Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useCard-Nxi6NDI4.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"90cf81a22814947bfefceee081f0c0de","sha1":"d050fd02cb235326628beeea2702e6a2a52971db","sha256":"45823d921ce63612b7fffce1c229ab88642e835194fca8c7a779284524d11cdf","sha512":"1e164739e817ab4de3ca229e8eee2d17c9bcb4170b059a45ab51ebe1f163c00ccf6d34a329d174157362cc651797ccfea1628bbd53fe4c239fc03a050f317ab8","ssdeep":"","tlshash":"f1318a9f38e33669594bcd3610b9017a6c7cac62f61ccfa0f708826a071005ad6773a7","size":1575,"data":"","first_seen":"2026-08-10T18:28:18.181775Z","last_seen":"2026-08-10T18:48:38.84836Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/RewardsBanner-CMQZAMzD.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7547d8b763b471713c5dd4987679f26","sha1":"4694d17e991ab887391b6b1813ba24e0d4f17dc2","sha256":"e14d4fcf3ee36e4985242c297c8822b619c59a77ca5dab79833a6e4b2f5aaa85","sha512":"a7d60ae1ec8cc6728a9ddcdea33087078d30d65e0f47e357aa00be08113e8724e16c3520c017ce5ca22f236d4601a483325f19ea9284bf5b932f6ea0ace79952","ssdeep":"","tlshash":"5e61420580b537e8fcb5589d413743be3eaf64a4931e49b0e288625f17282f17427fc6","size":3267,"data":"","first_seen":"2026-08-10T18:28:17.897172Z","last_seen":"2026-08-10T18:48:38.385394Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Popover-BCKbS1wl.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7e35e3d2f2a69fa39b6e6fe6f611d10","sha1":"9278ac9e8a1f9c770b82cd5f17427c79d56f8f08","sha256":"542f99f4d60e71e8bed6ebc066527c1a0391637d2a966590f175d74688db6ff0","sha512":"351955fc9777b4042dc0d4fe44f261230b5eae49a14c84ac2efa861c33aab08a89d89f7176ef9d1227a1093801251eb321bf225be1430c86adbb599bcbc4c2de","ssdeep":"","tlshash":"7011279dacc052f8181f8df9c06e007f7319e2b9c71e0590d4b650741a67274d527f48","size":892,"data":"","first_seen":"2026-08-10T18:28:18.021574Z","last_seen":"2026-08-10T18:48:38.850772Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingSection-B8VvHNsq.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f22b3b00d5eaf3208a78368d0133d97e","sha1":"d78f9efe4795917633f64d281d2ee471182e2b8e","sha256":"2b2a40f0bc21ede60060113319765bfbd48e6314d24a2fca0371948f5dc85e8b","sha512":"c9bff2b733276e8a0fee7c93e3c23a2154375793ab2bf074cbb9123eb55eaa5b631e33350650dc494740e7f53b8ba186d182a43fa9d3fd165a776e9f19757f7f","ssdeep":"","tlshash":"44111155a0e2bafc6467a5f6d01924a7633af1ace3050c19913822b81761bc46409f8f","size":1104,"data":"","first_seen":"2026-08-10T18:28:17.903138Z","last_seen":"2026-08-10T18:48:38.581458Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/solana-dark-AOe3PJWe.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"80e5d67f7e540bb3c6f47e7962bc1882","sha1":"66c6491c5760c39d3bd1e7e678cc8f15856e9f3b","sha256":"1f5bb61f20dd046b706eab71158d417291bbdd06accccdd2e6b843618fa4eb52","sha512":"f6886e9029cb8e1e54e7bf6b8bb6db1c2abfde3433bcd6a5bfd4cbd5716b88e7b0747640e6e6ad71877b4981326483b2c4bd23ac88fc4f111090b52771467fe4","ssdeep":"","tlshash":"e631ef1b81a96eddf2058ca93f95541db2af1089dfe290a0be4d355451214c0f74ffe1","size":1875,"data":"","first_seen":"2026-08-10T18:28:17.79362Z","last_seen":"2026-08-10T18:48:38.886958Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/api-client-BCvJLI2Y.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"5645b25da0517ce3d2904bd2cc9d82e8","sha1":"961af067b8583277dad36489c279cdc1447a4f67","sha256":"52cdbce7e9fc77208e007e4dddcd9c5cdf3729ed05135a0b35b4c59412257be5","sha512":"8247935153f5af6221540cfa8b7c987741116fc43239043abe767de9831f058445071bcdf5b550c1cb61c28e194fd49cd30ea55aba03f026fb26e7fe8be88c3e","ssdeep":"1536:ZRJfXEgtZjh+h8sRJ/OiHzmOj30Ci7ZFp9XULnMEWGuJw/hVpi1im/ZaMH3k6iud:Xhk+k9HzmiZ8pdyi/gMH3kEEb6","tlshash":"ee044b89b3d8b076179b2534506f190ffa7e6848ec5e84a0f372d1883d77a44a273e79","size":176425,"data":"","first_seen":"2026-08-10T18:28:18.197167Z","last_seen":"2026-08-10T18:48:38.603595Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/EsimGridSection-D9XAxDtp.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"8773dacfc50616a4153adea62eb5f1ad","sha1":"84c1965030f568c5bb0c2e82ae668ae9500f2d50","sha256":"2388da4c57ae880e06d8c1be20113a09c1296fcd4c8e32b5c6b06fe43ff7e1fe","sha512":"d4dd4fbdb3072611a75d98d4fc082ecc4b6b54ec8bea89e1d4b119ea66414462d30d44d70244331829a921df2642c3a6a32f76dd8a1ba2f2d512f6cc36530e71","ssdeep":"192:dNoXfPABBZwokSbauOohsbBIYGLRFVdlPyGfw:wUddJF7LZKOw","tlshash":"0de1744de1a06db4f22f8d8cc16f813a373e74aacb4099d4f47a29621704a945786f7b","size":6935,"data":"","first_seen":"2026-08-10T18:28:18.265289Z","last_seen":"2026-08-10T18:48:38.834536Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/DrawerSearchableList-WnhewGCy.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"37bcdde66e37b3e774b97002974e078b","sha1":"baff2c65b116e2b6ebe7e178896376493e6e4155","sha256":"1f46e294bcc3614b8037ad6b7f860c98f3da3624306c54d7de18545c6bfe5c69","sha512":"d5f4214123536f45406f6dc7e93643b4bee129abf8efbf55f90a884cde14cdefd50a7cfc9c027ffba52cd0b8c5c40fbf7ca3d6633a940a3ae5d00ee7d7c26209","ssdeep":"768:irkvGWZ31nwD2HqCqwsqqWk5i9q/5TFL+9Kf94X:1CD2HqCqLq9k5iq51+9vX","tlshash":"7c330a9532587830d28f4156a2f7ca2c3b3a3795344a2404f0bd6c6f3a69591f3e6f97","size":50264,"data":"","first_seen":"2026-08-10T18:28:17.728609Z","last_seen":"2026-08-10T18:48:38.874061Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/notifications-DViy2ImJ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e274de22b53f51eb5bce34d7ce0c982","sha1":"a814a49a235406a8ca27c6b5a3c45994445e7bf9","sha256":"6bb074d7ec07fc37cbfcd2075e6255aadbc2ac331ea07e3db891d817998f3ef7","sha512":"62a118d19529d73f68fcb6ed39249de9ae48242f1c964382a01c9fb674b1e278f52d57fbee979653cc967ed6ea34b17eba4fa77759c5cd70906b5571a4f5e4aa","ssdeep":"","tlshash":"b501e38e26d3f7b559cbc0a0e0b4881079255ba6260dea04f2c902699184348e56af3b","size":822,"data":"","first_seen":"2026-08-10T18:28:18.336236Z","last_seen":"2026-08-10T18:48:38.899355Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/abis-fDvBU7Ib.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"d54d87c6ca6f8b30570588a3f1b1ecba","sha1":"5f5d1ada33f3a111320d5236d407c3a62f61ac6c","sha256":"9dbf9faf0370c7b43eacf0b4a9b89aad6bff983ba2074098dfaea3967ed70f44","sha512":"ae3fcfab837c20c2f97a63d9eb903345000bb003bf8400cfdf195eab8a6e6486d41e8e7737ceef15bbfb52462be9db7b70fe6c0fb7eeee74e137f7e4b4389bc1","ssdeep":"96:GBnoHDPe8nMFMjN6pU0EdV2SqKluAR9y9RbmbY:Gue8MFMjfY","tlshash":"b3a12a89c81470c71d3124e5d4d32e19d05ee3a3dce5d903f399a8b62be961e9a2cf4b","size":4983,"data":"","first_seen":"2026-08-10T18:28:17.726213Z","last_seen":"2026-08-10T18:48:38.786529Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/utils-BquWt6fk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"6459c358c8377bc5192dd0945b5e9b46","sha1":"c8fa2336e36db96e937aa675a894a56b09b837e7","sha256":"d719a96613c9ba3f98aa7fde4511cea6340731ca711b7ff66336601fdb41bdf8","sha512":"bdde61755bc9de26fe201c846485fb114cff6805b1aec34019b5d622614557b23523a5dae3e86c032e63693d04fc55c36ce294b08c24f870c9d695673006c841","ssdeep":"96:zE9NXTq+mse/huLo7Do458CUh8hz4NKyz+x5kCV:QnWxhuLo78458G4N8l","tlshash":"7f91529d3796f073c35b19b2846fc40be13a8876046d0d28e155585371babbc85ebe3e","size":4486,"data":"","first_seen":"2026-08-10T18:28:18.310756Z","last_seen":"2026-08-10T18:48:38.763117Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/loader-module-core-B6zgqOLb.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"5bfebf06ee6190a758cb0b3f58e8b062","sha1":"36663cbd508ed8b252abfc4b2c4a5b93f8650169","sha256":"fefea1ce6c98c454eb19133e85d7b56adcaaf40a94930af138bba55cbe399088","sha512":"0fdd292cc30951b55dc476bbbe218c3748f6463ff115239485b96201fa5c500e462e169ab29e337fc65ccff78318bfdeae49b9a947ced8d35944dcec19f76a70","ssdeep":"1536:qVjQHvM+K0XKkocRPy2lNytjjhOqyoJhWTI:qGLSWvNyd0qyoJkTI","tlshash":"c463c797f5ada07242d3b8b4612f210aa33f515da40d807cb152e5e97cbd94a8b33f78","size":68321,"data":"","first_seen":"2026-08-10T18:28:18.211546Z","last_seen":"2026-08-10T18:48:38.766406Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/x-BHNuOW6G.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"a4ecb7ade0f48bed3844809f49202f19","sha1":"2690d11c5c54bf681660bc0c773ee87983aac0e3","sha256":"395f55e2434d368407edb75328e46ee2329ca748b7b3586ef70741135356a51a","sha512":"082a0fa434e714356358fc5a463fdd74c4c420059c2da21015d7a681e19bce4b7450712079c68b9bd67532269ca5ce7d8362c864eaf1407679ffc35f48816b96","ssdeep":"","tlshash":"7ec022bfadf11ef009000e62201e6440879298cce3a30d52321002391b51c917c9cf20","size":193,"data":"","first_seen":"2026-08-10T18:28:17.946998Z","last_seen":"2026-08-10T18:48:38.462008Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/PreferencesModal-Bl8q8E4o.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"6bb886e47369f4b495c7141ad70c0a5d","sha1":"6e3b34bb62d07194c40eca46f7f7c6ee561e2e2a","sha256":"857f7c785fd7e38bb6fc749b3e103c01eb06756322486cda293c0e0d95d3f4e2","sha512":"af546dd0530f351253ee1fa9fa356146ffbb35a8f7f408bd3ff3417da33b9de038d6c50a673c0c7d23100d6866bd1078732452e9d12a9bee6fe637e67b7a748a","ssdeep":"96:hB7+P4K55hu3qbUQFMyooC1XRmXhGNc9ic9lc9Mgt6lxOjZD+2c7qH+/:43SruftE04a9irNjpuH/","tlshash":"a202c71ee05066f8f23b4888a017a01d2b3bc4c5cb1a64f2f6a92c5817e56e1f55efd3","size":8649,"data":"","first_seen":"2026-08-10T18:28:17.826587Z","last_seen":"2026-08-10T18:48:38.86148Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/getSelectedPaymentMethodUnit-Dl_CIGwv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"919b2fb13df62aab09a4903c39002351","sha1":"20651f76aa08b33708017b7f7a20ce3e7461b7db","sha256":"23a386c7d3ff5ff5818890ebc7a5a5750e8aeb96ae88e37c12f4e7c983c4c9a7","sha512":"cec6978a8c7a6e43b53aa02b8469735146ddc4eeb89ef8c47bc4b46b9601f4823763b498b13d1d75aa1050dfe0d64d043caa29f0e45b0e0efee14aeaedfbe6f5","ssdeep":"","tlshash":"f4f04c8cb8ee00a1b08ded9c80331e9ae715f5765413a89018cb1d180322b63cb84bb5","size":581,"data":"","first_seen":"2026-08-10T18:28:18.131983Z","last_seen":"2026-08-10T18:48:38.546033Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Header-DbSriKAi.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b3bb7c308ae3a15e31df21bc3c74859","sha1":"f1890a8859dd1dfb2b019b0ed3c030f71e064532","sha256":"a9b689aa582492181ec752bfd1acf8ff495061b760b6a0f0842dcc9b7d6bacee","sha512":"1e168ca99dc336961f7f57bccb67091355a5ec41eca51239372f646d721dbfa856c641b5d324d40926b743085b953120a374ed9666f4e2333d987c30a41db311","ssdeep":"1536:xinkdCbddxmjLJ4Spz7gdgrKmFGpekCO/Ps3ow:YkdCbdzmjFrrKmFGpxCO/P9w","tlshash":"9b632c8ed0603af4f91d4cdcd17f931db72fa058da0689a4f5662d282389ac47293fd6","size":68762,"data":"","first_seen":"2026-08-10T18:28:18.367211Z","last_seen":"2026-08-10T18:48:38.860277Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/gift-DMgF5Ar-.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"e905f3894fa81e4a65edbea4c1cd06f8","sha1":"8140b879f3ad12968e25853417938284388b3c5c","sha256":"690b6a68adb29be167a4ea636ba01c9aca0168c68f768ea9c04358273c6e2c20","sha512":"278609e594fc71daa12714459f288e47d9f74fabce9d001674f4af4e13941cfaca47591cd01f6883b30e2339d7fd8540bfa0bb63bc80cbb6cc1f8479ad9991df","ssdeep":"","tlshash":"9ff0762f8ea81cbcb41a899c6a1da64ea76f82e5bb5b1518f65c203012020c0cb37bc0","size":642,"data":"","first_seen":"2026-08-10T18:28:18.290412Z","last_seen":"2026-08-10T18:48:38.608405Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/EmptyState-CQF2SBgT.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"63c336897922133ce7937ede99d90ee6","sha1":"78c363f002332f615500d8fb742106e8e3a3d5e2","sha256":"33f0eac348e1ad736facf37462904c50a8e3bd752673d3d4e15dae24820c9dcb","sha512":"360f010002d63411e5461dca87214e5539e4f2054c438afc0581d914a6b16dafe2d55a8c804900c8cbca10eac159eee85ecd92082c5b766a8d6e8624c6a6ebb4","ssdeep":"","tlshash":"c911a942f92a69f8b4261c8cc04e825bbf19c0dcd30e8dbaa09a113002c14a4fa16fc7","size":1107,"data":"","first_seen":"2026-08-10T18:28:17.91152Z","last_seen":"2026-08-10T18:48:38.667681Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ProductTag-Bo2tEgbH.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"7e2246a705ed2b09f8c0412521533465","sha1":"d26041bb13ed1c8bbbb9c363973467fbd2691337","sha256":"0f5b510f5a232917f874d150d5569571cb100a7f8b443f0de68a759a8e6800c4","sha512":"0a1068d779021ba73b5ea35bee9d8913b35d61ad1a91539a586558155184217d7515e5b7b41cd49e1c83d9e0030cf7df1122c7a83fe4097761421d89f08985b8","ssdeep":"","tlshash":"b77155cef9907974a94f4cb8906c023a733ed1c953190bf0d6b52978222c6f5e436a98","size":3623,"data":"","first_seen":"2026-08-10T18:28:18.306296Z","last_seen":"2026-08-10T18:48:38.418597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-assets.i.posthog.com/static/array.js","fqdn":"eu-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2438aa6f241441ba7e6082ee34f7aff5","sha1":"ebb36d62f02bc9fc3d6aebf480aec6b1a7b52ee0","sha256":"ec90b4bb4d8153fcd12441acaa4b638b1b941af193fd7fce073eb32db932364a","sha512":"d5d42d10f8cad13333dbb3fb80aa7c9ab40312ded34bcd77413bbb9ea91ee89d154a153bd87cf75636ce44d707f914b686b44e79883478a07e9d1933677cf4ed","ssdeep":"3072:tuXTzZYJXZSQH4DAaM/Da1IO4b7th5zaAMFFmFSvkxypgOTIc:tuDzafP1aYzMFFmFeWIIc","tlshash":"85340b97b77ae03246e690a5d03a0113e32a3b0e6149c06cf26eddcd359d589b277f36","size":243544,"data":"","first_seen":"2026-08-10T11:02:13.60462Z","last_seen":"2026-08-11T00:40:10.595874Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/lib-BPJfHZJe.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"106219c032d7ea717efc251fdc38bb0a","sha1":"66dd94cb8c4a4d41c49b1c9cbc5cc83ef03eb4d8","sha256":"236ad7c8e3960076531cdac7f07e081e529048ddebaad0d43c8109a9777d2140","sha512":"b7f44064a6a77bab8c33b31f0c7e70bcc8719b46ecf91ed48b97de65b5f900682406c047de270603ec44442a6be961ec3084f4ee0d950c19bb1398e7c4690582","ssdeep":"1536:3F2lD+YGOUC+dpW9ANzMKbta+y71i4UAuHWXGUueejtbvVU2:3FPNgKbta+y0Au2Xaeej5vVU2","tlshash":"1243f9ca779560100bae908614b90543e3aabd9c451e54adf8ee94ef7b8dc41f3b3f24","size":59838,"data":"","first_seen":"2026-08-10T18:28:18.37105Z","last_seen":"2026-08-10T18:48:38.537163Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/account-CUMP8LVS.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"edc3ed7ac814a90fee32e224c2f40fa9","sha1":"e09dd44918e2367c1eab92cecc55937d8f858729","sha256":"fe2b7211fa8324907652501f631d18c27b9d557e25b051753c9feefaf93380ed","sha512":"0375aa18d8f4ec42ddfde5842893f8eae346f3a23940ae3657e729dcea9e3d81459c0352f74c9e34eae583aa66dc7f2f86b5d5f85d200a81632adf82c09d9687","ssdeep":"","tlshash":"1b41bd8f74e6b7649fc38c72f17c46ab34b6ec20f51d1e94a194d0aa26500cae136f71","size":1933,"data":"","first_seen":"2026-08-10T18:28:17.981762Z","last_seen":"2026-08-10T18:48:38.647495Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/striga-w5O4DWzE.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a98f8c8a7e6be98eca86c44b7a66b12","sha1":"a73c727c0153b8fdbcde172e8a2f335f72f89081","sha256":"7d71629c74e7b68a8ded08b501515771c8c42447c22dda8abcbdd0f951b05a74","sha512":"4086d61cce89da11fbb56c8f370574b6763be6a89824266d91a0ab0d5789a05f4f8277b279a2259ef76d51de7009092ea41279a4ef498281b00369ee536eda3e","ssdeep":"","tlshash":"9ad0234dd1f47574e74c0cbcb1150455c374e4d09f451151d34102d05b784e5d22ff2e","size":208,"data":"","first_seen":"2026-08-10T18:28:17.769137Z","last_seen":"2026-08-10T18:48:38.893934Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/clock-C-fp6A8y.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"966c40f297f37aa23608faea204d257b","sha1":"b959fb065ca4ed41bbca74c5e7abf03820034702","sha256":"0adc70e4eec1cadd22b64a45dcc78289db5b64b5e70863b7e66835ae97188a39","sha512":"2f7194b5728f49df0a2ac972e14807525e88fafd4bb7a362b532dd6cf64db2f02e70b86e34674e6126799befe7e13a2fa2fb2e5e6d5d085b599f971010d34a2e","ssdeep":"","tlshash":"86f09e4ede781cbcb41a8c8cbe75a18eba26d272af411818d69c15f053041d05732bc1","size":481,"data":"","first_seen":"2026-08-10T18:28:17.917773Z","last_seen":"2026-08-10T18:48:38.870516Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-DN3HBoQv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c59f51893d07b47115cdd19c93d0c41","sha1":"8da9ecdb9af5fe54680a5549864915f5759ef84c","sha256":"40f65d704a7773c565a1ca12368dabb14bcd16bb45b7ea10ea208d9de70e5559","sha512":"436b02863d4e40528de979c835941e621e2fff673d504282b776a13f7cad76ad8d06d72288607c3a7ac26caecf943fbfb344845a14ffcf4643f31da5172db443","ssdeep":"","tlshash":"8bd02bcff4e16c31e60d1d49802fc5e16a7c734a61056161d0376a99336d9b0d4b4e26","size":271,"data":"","first_seen":"2026-08-10T18:28:18.146024Z","last_seen":"2026-08-10T18:48:38.767375Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/subDays-d5cI155y.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f37f826bb7a8da913db6fa0739ab5975","sha1":"21c0dd22218f7d40ceddb78cfd2f8e512d195f36","sha256":"5dbc182a3d25b094d55b8cf4e5064acfae7613d6692ae7c5d562b1187cf3c307","sha512":"4a777312c7b82a6029f400fbe0a83ec2b1b192cfa9eacd501d242f114aea25ac54b50ec3d640565ac8e5a71d98c1e28859215989c72fac3a025ba777ad48a850","ssdeep":"","tlshash":"2db02b09a0f563730214bc7440320443a26cf0c0e7400c40c001902001304b1a437d6d","size":126,"data":"","first_seen":"2026-08-10T18:28:17.740126Z","last_seen":"2026-08-10T18:48:38.375266Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/PreferencesButton-Dc4iKX03.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c4476e0abbbecca55ea13da1f7d94b9","sha1":"4a9ccddbfb28a24539abf7b86bd3189d6fb1d10c","sha256":"be0803719370262cc82c82a739c9c5e2d7c08f5abb345747457914795a1d69d1","sha512":"b57254566f4eaa315c677de5938f2c35d878ec3a7e8cac3951d2f7dfa93711a86802ea79be40b8a67daed349211925624d560cf031ba0c4703661fd518562a23","ssdeep":"","tlshash":"e111548be03011fc603d4cddd24f12276b1ee1b6d342ee90c49db39417508a98d11e4b","size":963,"data":"","first_seen":"2026-08-10T18:28:18.065339Z","last_seen":"2026-08-10T18:48:38.757287Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Shelf-Blllwayj.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"a9354f26dd8a43cb965026479c4f2e36","sha1":"c74f8233d2dfbe20f1b7345f5bd552ed1cbcacea","sha256":"46c4809b8f26895f51ef47ed6ed975836a68a4d0dce7d62fc98f33d3b3f17f52","sha512":"93f508a67bf0c4f8385f52a081f637270df5d9cd464c11a72e494f04b560b2f09ab2c7a0f9ce3d995830e3d7d42cae7e9ead81ce635febeaefcee7f5e564fe0c","ssdeep":"","tlshash":"8c81734694b076e1ec1f8db8c01e802ef237e585970b5468b45e585029a3cb57b4ffca","size":4040,"data":"","first_seen":"2026-08-10T18:28:17.840449Z","last_seen":"2026-08-10T18:48:38.305985Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/wallet-D7-79KR7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"7bb420b1e9da983c49f9058c99ba6a27","sha1":"8241b73b23ac26b4ce33f4bf83e3fa3af58cfd12","sha256":"3041dfc815c5dac30e2cce658a634ab94a593fafb8a9a9ea67903bcae2dce412","sha512":"931c58636a864f945d10c847cac6734f7c6d33f42636d5d31d2862b6d9dec1dd31948d2a1cb3090ffc2db2daf1b311434b648904c60319c60885ae58a53dff8b","ssdeep":"","tlshash":"91510157944069beac2b5c60c66a511ff369c25ceb5949a4b9df113022119e1f63ff40","size":2682,"data":"","first_seen":"2026-08-10T18:28:17.844716Z","last_seen":"2026-08-10T18:48:38.833608Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/html-react-parser-DVW-WKYg.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"77f394c52764398d2ac8933742eb1c42","sha1":"697bad69a35a6d02f760fd5d1905d99e30981e0d","sha256":"88d1c0b9e772f6d361671f53cc76e623f1a80abc91482f7440bc69e0e58e2fd8","sha512":"0d42130c9de1d91dc686612b79c93159cc9c3dbe8d38a4863bd79be2aa9d5a737080039b34c311c156adbe3e211d9913857343f3e0bca3e8c19ecf52c237cd6b","ssdeep":"384:2kNa3WsOYGbfTVpHwa0O5M25labammOxIW9BEJC7GSJpvCytYPmsT5diKA9prvQ0:2s/56baZOxOSJpvCyB3P7/1hc5wfFl","tlshash":"10d24c89b594b86203a3a5a980ef2a0ff335144d9c1c90b8f354d8e57db8d1a135bfbd","size":30719,"data":"","first_seen":"2026-08-10T18:28:18.287986Z","last_seen":"2026-08-10T18:48:38.365396Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useLanguageOptions-CpMra2Zq.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"74cd4b1192754a37784d82fdd213e668","sha1":"e9ef6a79b905282f76a964025eacc4c953d971bf","sha256":"29fa720c770220f2ffa66f519c15925105a88cbf2ee743d1a263d7991de39caa","sha512":"e36b632122d7ed3786a3e94fd276e0cb77ff4659bf532ad712aa7be518a943233aca1e895268cba3c7c1bc9eb8e53474645950f48eded7d20d58802b80847d61","ssdeep":"","tlshash":"ebf0dc0fc0c494f5624e29c490a03a02a334e5a952416ed4419b01b11b76c09f09ff03","size":457,"data":"","first_seen":"2026-08-10T18:28:17.878321Z","last_seen":"2026-08-10T18:48:38.59038Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/rest-helpers-B5wijuET.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"19fb28905aafdb29082d95feb1c4d7c1","sha1":"93bc74481f932d34de4d9e0aa3cd67807c8937de","sha256":"d528c70f33817693875aba4c5108774e01d3d968472d83fd13ad8fbaba918443","sha512":"f96b8c1ff8a27e86c0c051b447769bf01a87f5b6c83c402949298e936553a8b40f1ea0a86d52ec197a85732f71217aec0ed36b14f5b2a6eadf40ab5f00338f57","ssdeep":"","tlshash":"295185eda4e2b029e74ce432f82e0b6df4187927b819e95df9c8142b2114055bb77b35","size":2796,"data":"","first_seen":"2026-08-10T18:28:18.365623Z","last_seen":"2026-08-10T18:48:38.617002Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/index.module-DiHkEyQY.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"71d031e15a81f8a3335b3f35478a05cb","sha1":"221fecdece8c8a27a218271af318a3a67aa27864","sha256":"b27c95553dae0ef030c75b619afcaad9d867cadd0b3a970253ea39a5aba5b965","sha512":"578b239918edbd2133cb1376f07626c060a6de4635cc2581e339283b6f157bc4b05eca02d472cb61cdedf2c92a826be3a92cda6d588227eca598d971e3bef053","ssdeep":"","tlshash":"ae012879917d12a3120d17bfa98c557fd0b762b5c132a48eb18c913703c209f22dc735","size":738,"data":"","first_seen":"2026-08-10T18:28:17.836208Z","last_seen":"2026-08-10T18:48:38.897752Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/authentication-B8XzAnuX.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"53e88a76af2dc4a5242ad65df2e6ab21","sha1":"dd093a926bb05e2293fde82a708e328083e866c6","sha256":"18b375edea74df3708cf0cdbab5a96beb585b32e288d6db3de9d65c17f1c6343","sha512":"1f787ab81933e6f7142e6aa68da712555b7980283d05e85cc8239871c3eb63f477716d8ddfb81a46b10a177e2176fd9410ab6a731a94e915e704bbbc8a06d205","ssdeep":"384:+44uub46V136sXEI7J14wBBWJn4NRzvHPwZNhgG:bJub/13tXrQwBoi4ZYG","tlshash":"54822c967256102f1e0c8a29e0bb5255b3f584c9ee1dc6fcb2a64d6c22504c4ff6bfb1","size":18144,"data":"","first_seen":"2026-08-10T18:28:17.994046Z","last_seen":"2026-08-10T18:48:38.858386Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/constants-C3ra39WU.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f013327a76ba4b08fdfde3916b572e15","sha1":"ef276c9551ff7537e11da3fa93cc3b75fc877ab8","sha256":"db449cfb451c8792ce29021a94c37674abac0074086d005c25115da874150078","sha512":"7dc364f47a200d90625bb7fb9951c6b2f572765c6ef53e590ca5e6ffee6afecb58b3a56508e75697f6f1be4b11c22519ae4d54945a3963bd40a663b73fcb9bde","ssdeep":"","tlshash":"50019cb75cb00a7a8d5400ed34c13306c95b77ad9e78daddd33080b83c549e5b312b26","size":743,"data":"","first_seen":"2026-08-10T18:28:18.034281Z","last_seen":"2026-08-10T18:48:38.734472Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/contracts-Bpr7NBAI.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"20a1488198b082296f262febbd167948","sha1":"59896e84d73d8b74391d275232b0cc7a0fcf06b2","sha256":"c46ba12a8bf5bcae2ed2453dce02def946ba14c2c82119efb0817173fb9c1242","sha512":"db1568964d2841a68cb6aa8896de0392f7a1f7a2e49f33ccbf091002803266c75d10130dcfda53723a5bad1f446570b1f6da302a938dcbf41dcd6087df5d71ca","ssdeep":"96:cSrVUudROyORKOYR+C+Y829eiiHhWFPqMtxYQPtmrvFcvn/3dn2bU:YMtxYVbFcndn2bU","tlshash":"36f122e2d009b5c88d21454695c31a08d19edbd3ecdcc85be29cd93a1bfe465c62ef4d","size":7517,"data":"","first_seen":"2026-08-10T18:28:17.857002Z","last_seen":"2026-08-10T18:48:38.520951Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/_baseSlice-C29wH1Xv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"795c15bc34e5a8ceb7b07142f605a1bd","sha1":"61274187f9884446ecbb3c84ef92b9fdba498a90","sha256":"c2c163f1844807c411495604563a94c55285e42098bf3a948868425f241b3bd5","sha512":"af44f244a2e59fff79d0751cd3e603b5cba1a4708fe5557b45c4d2ee94b82dd0dd603c9bb8a958c3cd45f86f5f0900fec4c6e490d6c08a3673f5e818af3d8c47","ssdeep":"","tlshash":"0cf00cc834ea7565e7ab2a60c01f4a8cf13c6c79ae6c8048c062d886b7635b8c56ed1c","size":622,"data":"","first_seen":"2026-08-10T18:28:18.019041Z","last_seen":"2026-08-10T18:48:38.820962Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-assets.i.posthog.com/static/web-vitals.js?v=1.415.1","fqdn":"eu-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9532712f07bc7879e4860c770106d41f","sha1":"1d4f335927a6034a391e8b7dbdce3ed3347dcff4","sha256":"afab4cd2ddb19e4311fa5e36d4780eacd5e93c8c099675137cb843068f534d9a","sha512":"be189d6f8404bd9b85ca482d5359519e406945c053aee17f141b7414d4e7318c07f7d37aa050fdfbd9758745588866cf8ca9b642ae17c5f2ae8d5f4ce33cad79","ssdeep":"96:EaAn2sCG4Fzq4TDAlXTaWTQBdRkwPUgvRhyljTpSmVeD/DDDqRwokzjr05MDUACA:uCGlxNTtTuhvCljFl4DDGx8X0Fz0p","tlshash":"68e1e8f9ae42943512bfe6aad07a114373397792a04d419ce23eff9024ac4c5234bf76","size":6914,"data":"","first_seen":"2026-08-04T16:49:28.287672Z","last_seen":"2026-08-11T00:40:10.599169Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/cloudinary2-uZHkAarz.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9019cd19d7ce56932e2f8e497330ac85","sha1":"675b047350ebc702d7167d752b91ea73031d951c","sha256":"9f04591d33b742e031e0fae926e3a27c34782b4170fb57a2d101f1ce909e9cac","sha512":"48df0659139d30cc9c877ca4eb9c858c7a6411d47d8520952ca177e50f43410b1a528c7a7d3e209818d387f70d482e6aff44e27ca2e65208ec2abc8795c3ac83","ssdeep":"","tlshash":"9a1165bb31cc7533230ac660d33f046af26faf40ac69404c705420ae1520a2862f2fbc","size":953,"data":"","first_seen":"2026-08-10T18:28:18.121371Z","last_seen":"2026-08-10T18:48:38.835931Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/getAbiItem-BWBs3s05.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"1196a1c4d1e2ee64c4cc130ec7471bb9","sha1":"20fbda7bd958e5970bb577ae6f4f9691fc49d098","sha256":"05cddeec6459d168c2cd71490af53d1d0ce5c115ab8ef34b43bf308140ac8763","sha512":"15374cb4c120e4567168998bdcad9f852304e56ba38df571c2447722bac06a1d2826f442058b417070e6442d9e361e625a7e481211e4c7a200d9e0700c6dfcb9","ssdeep":"384:On+e43DsNEpweaZkgvNvy9mku5ArbExGC88EuR:O+e43DsNEpwe/2pbibEoC+Y","tlshash":"4652d6efb3e571f195e581a041eb0445f264b4b1f20c4054b59c2c963fa6de883faf95","size":14008,"data":"","first_seen":"2026-08-10T18:28:17.816162Z","last_seen":"2026-08-10T18:48:38.662632Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-D-6ASWtk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"bae295bac1067470535d01e42cad30c8","sha1":"c903de981dad25df0ba10d5fc616467400c44df1","sha256":"e5e34190cb0c60dbb052c1a78250e469c6800d45c3fd76d87617a991f9dbe566","sha512":"ddeb181625819cb4d979d61024119e05ce4b0c36816410d9824f1902a010268a05b318f8c6412dcfb37f9ad0bc7a745842a51b18de838157e2f94e94113d8fbe","ssdeep":"","tlshash":"592141917041b77091ef9ed0c45f44b9a63fb551600903a4f4bd8a084939390b237faf","size":1371,"data":"","first_seen":"2026-08-10T18:28:17.757603Z","last_seen":"2026-08-10T18:48:38.90329Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/search-C8-nSFB_.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e075e114e142cdc675f0cb7af6ccb79","sha1":"39f84a673e757a7d35c77ac77cf2d977331e9d42","sha256":"804bb269c4a5075bed5bac056183a1592094d2ff7ccff7110eee2fb44f0426d7","sha512":"d77936270257ad23d7b6aa464d8ef1a194e6c740df08e7ffc9bc0ad1d1db9e7c63955455ff34661b8c291bbae0a8bb27c166fc3f4228aa19ef2a748243977538","ssdeep":"","tlshash":"1af09e1fcab90cbdb42a8c4cba68b54fe9b6d1659f421518a39c117013005c01325bc5","size":471,"data":"","first_seen":"2026-08-10T18:28:18.381554Z","last_seen":"2026-08-10T18:48:38.88842Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/circle-check-big-D5_P4KF2.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"809f09b46e6a48ca1ea3e965b7a6a19d","sha1":"962da14c5e03c277cb65d132fcaf8582819a0bb7","sha256":"6397c50e9816c5da96fa9e4a4277bfa3e91e5bbf68b4acb8c248165ce39fac1a","sha512":"c07899284cc17269f088a95c2b88ed121d19461d47cbf36ff59403f9b81dc1b30c1addbc199717826ee521367011f6ad3bf6fea3366e03ab8a969b8665c1fd51","ssdeep":"","tlshash":"d2f0c01fdaa92db8a01a4d9d9a69a54af69a8590af451614b3ac107042004c05627bc1","size":512,"data":"","first_seen":"2026-08-10T18:28:18.022711Z","last_seen":"2026-08-10T18:48:38.319156Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/website-D58EQLmP.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fc13d1d742352269a8a4ddb62fdcdc3","sha1":"0486a06a327568d48e077a813a91c3176b3e5439","sha256":"7291212b24ec1d1245420bea8eadd3d188f841bcc6b5e15c8a05a202ff56771f","sha512":"3704a384f618bdba4deb41327d1904b984dde6afbe98e024d2454a6faefb78505f4f17a1ddf3af91f5ff174b85ddea0c3ffca0f0981ca6557beb45b25152a0a9","ssdeep":"768:EdDUAWga+kND9lRD0JAsbNvQN02jLTDPJAJZ+RacOhhzBLywz:pAWr+kND9lRD0JAoNvQN02jvbJAJZ+RK","tlshash":"7623dc030f8407ac63e90fd9a766241d02f1da4d621ac03ffb9279e9653dbe551b1bb2","size":48408,"data":"","first_seen":"2026-08-10T18:28:17.809576Z","last_seen":"2026-08-10T18:48:38.789376Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-CCm45mcO.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"31a3bf34ea029d8e738d93f698197e60","sha1":"957a6b9c5bd8e65def7b4d0b49f405c40dde482e","sha256":"7f912f12be747acc649ad553933028e8c1997916000ce99b9e6345c75004dfce","sha512":"4154983b2c0bb0a1809f5e6097c1b447987afd757763eccfcbae3b966bb79913a6232c6bc5291c6d7c5d8f77046d2aed6e37c2295e192c12e50506e6214a7a30","ssdeep":"384:0qu9zKJpTKMAFtKvRlK6ahpd/6YjPVPW8rBMjqne6CBovWtXFW5NMaKPypJ/nrwR:0DcxL6bjnFlnd6laHJ/ECZ/sVJ/ECl","tlshash":"8882b8ee609675f0e79cc455833bd43d6f2a5994300e4620f97a8d2c239e290f2dbfa5","size":18058,"data":"","first_seen":"2026-08-10T18:28:18.04662Z","last_seen":"2026-08-10T18:48:38.864222Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/NavLanding-CpSFom99.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"e0506acfcee066974ee2e1daf34e13c8","sha1":"8db76088a051ae059eb2ea1470429f7d5288347e","sha256":"7e97d4383da2e19eb7c347afb0dcac67cbf0c4e3bd00c64110c3d38cd950c18f","sha512":"fcf6e5508fc51bb7f59aaed2d9d1b4dc6ac482748d329b1ccb55fdb8d487554c049b074f79f582fc7d1827d7d3d45806ebb59d749166205da15c4026bba12ebf","ssdeep":"","tlshash":"40715009905057bcb66e5ce9d05610ea0be943a98704d8adbdbb1df822e1d50e017ffb","size":3658,"data":"","first_seen":"2026-08-10T18:28:17.922896Z","last_seen":"2026-08-10T18:48:38.748622Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/package-DRnaezSQ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"7383f4434d7ca0a98737fd952385dadf","sha1":"e8ccf74894d22146f48dd999686768d7e3f0c116","sha256":"1866bad7da4e7a13641293453e747f3f5bfd55e653a38012a65b66cd10528b10","sha512":"15a938efaafe6d0822f4b05e0182a499cc68cb2880d705442e2ddaa89ef4423fe86db4d859610e69f50584847a30edc84dfb0b504ecfcf9c895af86c4541634c","ssdeep":"","tlshash":"cfe0f12e8f091b7c4d0206a0610ff2044f8e26b5f16ac4b0354c22fd0951881cc7ff20","size":417,"data":"","first_seen":"2026-08-10T18:28:17.92147Z","last_seen":"2026-08-10T18:48:38.72941Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/rpc-CnAyU3HB.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"d962285a8fbebf9d544a7201c6a2f493","sha1":"9f0b2a85f0e7e41d1480bba2df5190f534948750","sha256":"0722fb7163c1038a9f73e556db3286453fd7a186738b917e794132e4df0395df","sha512":"623285f9ad08f7a455b1946321b5279a3ed64573ec784984f9ce66ffd9810131b3ba119462a93c5f997550c11b6f1265bd8edf58c974c6a489205579f9b0eac6","ssdeep":"192:HcoekXOepvy6BMBa1o+ja81XO9bnUP2R2u:HcoekXxpakxjaJUPoZ","tlshash":"27223226b26c7db640a5c5cdb4070044e550f892d339d0f82ef96e26afdb6c991fcda2","size":10811,"data":"","first_seen":"2026-08-10T18:28:18.097137Z","last_seen":"2026-08-10T18:48:38.90099Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P5SL845","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acb6349b7c04ebc2c836fe9d1222bc6a","sha1":"a7ced6d5ce1edd981bda0942c93729342c2fe91d","sha256":"c58921a82cda68c09c616bbd11f5710894c5199164d31302513abcf8b79af392","sha512":"e7aa196aabfef0bc60aa9bc0f44d2b5324a5207615d8dbf171366d7f513495efc3319160f714cd9d856e4fa4be050ec6ce87ab812f027ac5638ff8f74e81477f","ssdeep":"6144:6NVeuW2X5iZ7iTQ+o/FWDEsoGQ4xOx0fcPbvTEaI3sI6jkd8TS1LQMwkwr:6NVeuW2XY9+o/5urxac8ewr","tlshash":"60b408ceb3ca74659396f478903f018ba97e24e2b44cd895f089cce42e7465a5223f7d","size":534979,"data":"","first_seen":"2026-08-10T18:48:38.83019Z","last_seen":"2026-08-10T18:48:38.83019Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/HeroLanding-B42PMYkD.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"7aa125980f64844e069af0268403d4e1","sha1":"305722900b6134ad17f60fe46dca154ac13a1050","sha256":"5fa03569763cfe7835216b235375ed75188441b51c38196f30b5fe5765b38ba6","sha512":"aee9c5df5db0ce9069611cf18233255cb0ff5253266107c776ef80e8789c26142a3dae9da7be7389fef8fa722a1dbcd0515985bc3489b6181420f01d7f286b65","ssdeep":"","tlshash":"9851474ee43031b8641bccecd5ae092db52ba0accb0965e8e475906443d2649392bfc3","size":3102,"data":"","first_seen":"2026-08-10T18:28:18.362302Z","last_seen":"2026-08-10T18:48:38.542441Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/shield-check-CqajTMC5.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"29a420ec0105dc237c5e636de6c59470","sha1":"3ba5710935de599076f480c2d9952d56b2b3b677","sha256":"942f9aac97074727addfd3fb57d1e5a3a3b9180837eed6d6edbe887814d39b2a","sha512":"0a0fb7acafef648c5b75a704357f592c3307e99bb86caca8c557497cf88ff2fa95a8bf605764c48674aaf2632d2b884037ae4e7fbb36b57c5c9be6f4f5e84ccc","ssdeep":"","tlshash":"63f0dd5fdf6c1dfcb00bc9ddea5b654aef9ae294ab6a1520f28c187842010849217bd0","size":631,"data":"","first_seen":"2026-08-10T18:28:18.334563Z","last_seen":"2026-08-10T18:48:38.33385Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/checkout-com-visa-DTXr0IvV.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"66ed70abc9cdf87e8c738d861f0d0aad","sha1":"9dbebccae2eed137a350132ff8acff4df6b0aaff","sha256":"4b3c99ac2aa0622a6d2db6e1d0d9188a88c4a878e978af08f9f296d361b22fcd","sha512":"dbd10057c5d939c3232be59d136eb771900eeca268072e465616a32258ec513694c56b2b3412df711032c40ddaf83fabb3c4c8dddbd7f3d30f78200d5d2d4a90","ssdeep":"96:qgl+WpI8ycJMOavvPUZDm0fUNPCj3+6qhdA5Mq4Vjb:qG+WpJ5dfUNU+6qhdA/4d","tlshash":"3cd1897c8192668dbd798a231b5b7606e00127d2ef7a500eef527120d7d84eed6ec0ac","size":6255,"data":"","first_seen":"2026-08-10T18:28:17.871981Z","last_seen":"2026-08-10T18:48:38.825952Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/BaseBlock-l9ZFzsyr.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"ce1e3e370d8c407c44ac3439431709b8","sha1":"8f943d471c6e87846a4a4f95248d173a6324d868","sha256":"c61e9b3d1a50dbd150b606f0ce8e91bb85be969d3d9a64ce44e98c7ffd95ec23","sha512":"96fdee9bc759503b38423f1ff19271cd1ac905d0dde64993116d38a823e5db37260ae57fe1b158c8253b7cc7ba3f5e51dcef2b6f58bc8ef33612864efd698e97","ssdeep":"","tlshash":"7f512467e4f438f8741f8cedc0ba523e752da06c870a29e8e466915803a219d7a17fd3","size":2831,"data":"","first_seen":"2026-08-10T18:28:17.780817Z","last_seen":"2026-08-10T18:48:38.853332Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SearchSorting-DqP3owRi.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f701e6213bd6b2091956f3896e91376","sha1":"64c9809efafe2e73b9af076ec92a93b95f9bed8a","sha256":"5b8343754bd35c6f20a065cdf3d6f4f5c903c1f06d833517dd4803ce663dd8d5","sha512":"a2cb83ef1d2e1a13296d346a80743bd5e018224816d9c3c88c0993344a01491a4320d457dda94d6f4a85beebaa701c46ab2acb3447310ff4ed0ce7b8c48111a1","ssdeep":"","tlshash":"7cd0c21e95edbcd824974522422725912d5e64cac20e11a0e7c2068c2c9cae79c24d67","size":285,"data":"","first_seen":"2026-08-10T18:28:18.13783Z","last_seen":"2026-08-10T18:48:38.35715Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/constants-DNQe4TEO.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"2efe06487c5a1915be3d57263c2b49e4","sha1":"537430abb1b25e50ad9151091b25077ee9a8e5bf","sha256":"40cad51c7bfa7ab957e75ccc4aaa341db2dd221143851a073ac57d6bcaa580cd","sha512":"422c4aaccda885c321511735743c101e40541d269521ad0f17ccc79c93eb9dfe337153023f1e88aa49255df4b3368d5394aabd1c54c5ec755b798a72d7fdf7cd","ssdeep":"","tlshash":"46e0df2ee85416791882ade912e3c1ede22ca040feb48984864f0c204db8e2aeb24842","size":351,"data":"","first_seen":"2026-08-10T18:28:17.96843Z","last_seen":"2026-08-10T18:48:38.491629Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CookieConsentOptions-Czi7qhij.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"f4d31ab9de3f870633ef0090841da236","sha1":"a9fdb65e6ac3ed60a7e84abcc702c3b709382c3c","sha256":"184ee77b9033cbe76816f59060fe433eff82a461463f6a643febc73966bba6b7","sha512":"b34c9db2b1cf26fa8c158f1be16b2f99a79551de01127cb1ee0346811d33d6fa5c1164b34d7a8a45bb2c9fa1c3b49f881473c7c331034411fc8243459b7bc828","ssdeep":"","tlshash":"0c310f2b944422f2acdb0abed8e7908e9335d3cb614d01e29556188c2e423685fe3fe1","size":1678,"data":"","first_seen":"2026-08-10T18:48:38.40205Z","last_seen":"2026-08-10T18:48:38.40205Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/_patched_static/login-country-popover-guard.js?v=country-popover-20260620","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad4b160573412b71d327ebbbcea31d96","sha1":"2992e0fad7eafc2ffc61abf4e73727e1fd183c24","sha256":"7f420ebe8fc1020cc07ad65fedaf39df69c26367e52a1686d7e6a7f3fde515e3","sha512":"6aeb823ba3c23507b0afb47d0336eab8d1aaf9f3767d841c2fe9f9c14518d920cce43ef216789a0545d6adb9aab2555a21c5ecc3832ff8bff68a6e763492f931","ssdeep":"192:vobpar7agyCMKtJHt7E2yO9gZuK6cIjU8rzOeW:voNar7OCMK1E+9gEK6c5PeW","tlshash":"9fd182ee60b731351573303d578b5249b92290173a06dc483d9f87891fa2d29e2b7bc9","size":6371,"data":"","first_seen":"2026-08-10T18:28:17.880435Z","last_seen":"2026-08-10T18:48:38.563056Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SvgImg-Cvbt67L4.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"c312903dbcde154e4f14dc4d415d28d2","sha1":"ee7b05a190fbc8d2f2e5b07448be419470a1e590","sha256":"9ed24125c08fff0088abe7922ff0b2a59b5c8993492be5c2abeaee62c9822cdf","sha512":"e6b2b56e013d12624b6623429953caf252a6e63b5ea76a16ac765318e2a495da8a6d5f4ffc67ff784e57cbaf8c1b183bf8a18b71c69caa4af97f570b0c4ba48b","ssdeep":"","tlshash":"39d02b5aadb8783cc0253c0a902b59af7625e246775255588651aa7d02108c17a71564","size":265,"data":"","first_seen":"2026-08-10T18:28:18.11402Z","last_seen":"2026-08-10T18:48:38.865555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/chevron-right-B5y89ei9.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7bc168d7f98baace47d71349ff3db5e","sha1":"9c27ba9e7e43ab4f72692eb3891c0c2b98a9335f","sha256":"9a107b906a3ff986cb81c99867dbea63ff0301f8ecd4309583da31bd80d25273","sha512":"a6e8191a20757ef50414e404281474fbf89f6d1b1ed57c54f5224d0a22e6b95440e27b084a4bd07ea27bfc0eaaf12e0a39cc55e9a67bdbdcc17c8a266dc2d1ab","ssdeep":"","tlshash":"51f05c5eeeb41c3ca01e4c9eaa79b54ff9a592a1af462518b29c107443005c05339fc1","size":443,"data":"","first_seen":"2026-08-10T18:28:17.813662Z","last_seen":"2026-08-10T18:48:38.806077Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"4ce5aff4a9d070856aa58563375a23e7","sha1":"df7f672367e4e1a3221a5857882b75435b05e39f","sha256":"9ac6200b11e08a5ddd7aae4c92f487f505f407e7cacab3791880f8068cdd6af5","sha512":"82c97f80fc50331ac1fa16669aae95b43937ef75b627b30d6d0076d022590be2510f9eff11056f6cb5752f710b5e8c7b3f102abac0a51865985f85daa3d57627","ssdeep":"1536:TpBY7SOLSdEbCRnRJ0AKs9joJ4F7oxSSlUogpoRCsDKJLDKKY23Ol00H0qikdSC9:T6HWX9KstRFkES2ogp0ULGKY2E00H0qX","tlshash":"ac93198df0a139e8ba1b49e4807f454cb23e6404db8d09a8f47564e82dde1d477a7fca","size":95752,"data":"","first_seen":"2026-08-10T18:28:17.9924Z","last_seen":"2026-08-10T18:48:38.777647Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/plus-CdMVBc3h.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"abacb4ea9cd3bd0f54fc19bdca12a8e5","sha1":"c0993af012a444fec85fe0f620308e0935793d23","sha256":"2a952651d18d58d793e593404aefeafc6c942b954aba8292c1870dfb325b7232","sha512":"94994275aed986f7a039e82fcc35a179e9f911e1fca02cbbd3442fdbeed99478779c94c27ced0fc3bbf11b6e527923260da2c960e0b637818bfea451867e0b67","ssdeep":"","tlshash":"d2f0d40fde685cbcb41a0d9eaa6ce58fe569d1a0df431618b35c147403000c01736fc1","size":456,"data":"","first_seen":"2026-08-10T18:28:17.899945Z","last_seen":"2026-08-10T18:48:38.633337Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/metrics/Al8Q_t8UHWOKWWAMy9Tj3DX5apVlZ1ehlVdcVHRRqvzwoU-8i5fI","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5aea7125fb017392af16a8f93ceed4b","sha1":"0261d69226e05ebcd9a506600f65f879dfc92566","sha256":"18f7627725ed357004f1abae764b714cee223e7ce8a8daf9cbbe185e36c0904e","sha512":"52fb4c6e7bf6501a9f1aa8add55b0d6e024a2b20458ef6f5713e8e843c99eb1c9e543a01ffc347525a4a483561c464e7f41b99cf7b5f986afb783c1a39a6e098","ssdeep":"6144:hyaCaMX6Z7i4CQ+o/FWDEsoGz4ZOl0fcPbvTEaI3sIoqkd8TB1LQMm4r6lO:h7CabLJ+o/5uUZ0J8tkHO","tlshash":"77b4f8cdb3d674625396f478503f01cba57b69e2b49cc8aaf089cce02e7455a4227f78","size":542722,"data":"","first_seen":"2026-08-10T18:48:38.920235Z","last_seen":"2026-08-10T18:48:38.920235Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/billCountries-B9rF-oTw.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"46314858fef599da26ddba3992411a53","sha1":"0fb627c9ade34c8a22e9dc1307d50d17bbccad2f","sha256":"1e8ddf07325bc328bb8bd6b0a953cddc91d9d8fc868a0364d5b9c5c3b493181d","sha512":"32e175d51008a40cc367f0630827ba7c710249584a6e96f5c0c4d6e6613422336113a4f0019c50f0e60313e873615c34668b49cea434c52fe7e8c87df0987ce2","ssdeep":"","tlshash":"e0b0220aecb00cbaa02a0e8b002e0a82232828cbaaa22800b08000a00a308828030e28","size":123,"data":"","first_seen":"2026-08-10T18:28:17.76255Z","last_seen":"2026-08-10T18:48:38.88628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/toNumber-CDMG4uG9.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9613bc3fec45bd77d760e5588302ddbc","sha1":"0b908d5aa78dd18c5848563f3df289aef150f993","sha256":"bb1dc2ae489fc17d72ff514521abc30994766c3f106946b66048ceb1e1b39319","sha512":"57759a7245359b8f1ac2c9782d1a59299c8668baf625c6dbc2cf54324cfbcc8b4d3b5fd0769ab4a77df633446bc414ad99dddd8fb5b49ef45b2573861b3308f6","ssdeep":"","tlshash":"26210eccb8c6f2a403628d72805f5d15f1ba68f541acbfa0e291d1f1ac7285dc932e57","size":1360,"data":"","first_seen":"2026-08-10T18:28:17.966712Z","last_seen":"2026-08-10T18:48:38.339742Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/canonicals-CUbrJ7Wp.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c64b25b6d58548c29590264c51a8a58","sha1":"b6c5e50f1ceca72388e2b256a0729c43de0b7632","sha256":"7929543e26b262e601cec5b8412b3409e4d7ab9eb77399645191f5303c8035e8","sha512":"8ddd5590293714d8147fa4f6ba8ba939fa31be190422fdce28de4befffc38db4e8a085586e184ad9fb4a54dd77a0fb7f513166cbccb19a28cc6d985156d1e8af","ssdeep":"","tlshash":"f621e19f04be21e52b2109bc92958e4e75ef85cc0156ecb8ec91d4a0f16dd9230e6bd5","size":1213,"data":"","first_seen":"2026-08-10T18:28:17.786555Z","last_seen":"2026-08-10T18:48:38.775395Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Button-lnXTJ2JM.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ccb8faab8830e8ddf132a50a5c12828","sha1":"21158163da75218a7604e8bb759ed83662b49b98","sha256":"0f18f3b96111699ecdc290055801afa52e36d30a2545eb6b15dc896ffac7cc91","sha512":"3a9a918c80d12db8542d8072d716f9b61f88bc9ce4613a2a11e12fb0d38f2029f7459fe8f7494b1c21fe90c111a9966956ed5395dc21dae66d42714034243e74","ssdeep":"","tlshash":"874185d4f370a8b8b73fdaeed50651e7f366e16d8e062995e0100470439175c7134f5a","size":2059,"data":"","first_seen":"2026-08-10T18:28:18.251792Z","last_seen":"2026-08-10T18:48:38.605881Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/theme-DVMIzpDp.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"a784acd91272b09d7a6c236b17a76d6b","sha1":"ae2f7c7555a6cef4e98f917698d5a9c0428eddea","sha256":"119078737fc7e8d515e4d80759b5a2382cd4f41e4e5d93c5355d58c1db12bc09","sha512":"9f152c153cd063651d3a18bd68e4911c5167ee6eae3a9c5539783456bfeff2f936172eb6ec21db518106ea64edf9a59bba665fc41e2dc0d5e71a26227dd93613","ssdeep":"","tlshash":"7dd02b9a35a06274d1cd094ca025d984763af406ea263908f36c52d40e30cb22926f7c","size":274,"data":"","first_seen":"2026-08-10T18:28:18.150601Z","last_seen":"2026-08-10T18:48:38.907345Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/prepayment-steps-lqEmizJh.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"21dbda746992ceb2e226162d74999148","sha1":"3b843cd4268140ea11520b44f367f94a4cb87f1b","sha256":"89bdda1e2b463ac820e5c2f3df8bca790fe1bfed567ddab322f85558d7495567","sha512":"757f91fed5ced83d23884a2e64d3bd133d6a0b2f08b88e7b86af6db4d959e40a332ba7121f240daf7e79f3ba940cc63446848a135fd941471b655342987f32d4","ssdeep":"","tlshash":"38f095de74d3746523021752d07b44ddd734dc89c9591268b70ca0d47e58472f361e5e","size":536,"data":"","first_seen":"2026-08-10T18:28:18.313941Z","last_seen":"2026-08-10T18:48:38.289927Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/invoice-D2GxQfAn.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"cede050425f19a32784f840f8f0d3dda","sha1":"ed2694ffa12a31a4df1b73c3630e9728d938c06d","sha256":"44843351de8d944f12b92e636ebe76aea6e8fe251f401d10a336d72cbaf84114","sha512":"5b76e0c9f9082172a834ac59ea1b1bd8ed53a666705a34a92f9b01da2aac963b9af01ff9535261d5e7189445528a62cc231dd2e24f3559f0e34a8a59d4e63676","ssdeep":"192:eAdcURomorCX/toTo6CT2TzdUDGntLWNlxyJGyipZPUQTX:eIkCQvCsUDjl97ZUS","tlshash":"8df13dcd77f1b37245d6d752e0bf9343f23c9404e839a050b51558e87b90c6795abe28","size":7473,"data":"","first_seen":"2026-08-10T18:28:18.066978Z","last_seen":"2026-08-10T18:48:38.753783Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/orders-Duf3M7Fx.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"2b84251c1ff1cb80fa2c4828ba50bf8d","sha1":"502e9bb6096b9f2ab865ff8250202973a96a7982","sha256":"6a5a7a08fdf1460fd0d54c7fef1baaa894b8bb232d0f136d5a8b98ed100391a6","sha512":"86280c022c4720fe7a54a5397817ff7b58cc8dbaec403ebbdd803093eca4b7f98d3a43381655de999bf55fc3d58802b2772835ac033b0d40aafd0d3250c7394c","ssdeep":"","tlshash":"64f097c7bfe620a3c81bcf11390e8f89c6050c17de3bad887e8040cc43cc1913a19022","size":510,"data":"","first_seen":"2026-08-10T18:28:18.275023Z","last_seen":"2026-08-10T18:48:38.679846Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/credit-card-BegbjwMf2.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"a498a908cd9cbcc5c4d3de8ea583bf59","sha1":"f4461b7a4cd214bedc0537d147beedbfb7c3b446","sha256":"3969155d7d4409a09971ebffc55aa58d1092e1ec3d43810b3e0f8ea602ff7467","sha512":"22f863bb3acc6ea4a90400fc6b0fb8dd1476db7b44993c40b3e4c882a480cf952c7971f644abb2c94dee7538f9bc2819e34ce0fcc0ca4c9ce004f95eae2d906c","ssdeep":"","tlshash":"21d02b2ebeab18fcbf4028a3311e4d46af01c08dc39d0840f250561a4281c97ac9cfc7","size":257,"data":"","first_seen":"2026-08-10T18:28:18.267312Z","last_seen":"2026-08-10T18:48:38.726218Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/defineProperty-DFXm_1Md.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"489a6e8420626ba7812b1b715b5ed17e","sha1":"bd93a298e8ac04a7f152ee151dbf4c783a58ff01","sha256":"c2ae68c1ad7462e777ccd4e1e3f84b3bc07ab81458f0dd0ea042a9e1b4d23afb","sha512":"3b75e2b29df199b8bedd375fccd9afc047f685551d16b647c6c75291f25d66c55181180e1ab1401d1f81709472a9ecf1b4ecaba09e9b75d7735c7ef273e04647","ssdeep":"","tlshash":"ac0110c97081f2328347d635004ff40bf63866a1509f7410f2a8e871bbbb85c8275f0a","size":707,"data":"","first_seen":"2026-03-10T05:23:16.222734Z","last_seen":"2026-08-10T19:05:30.001586Z","times_seen":2702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Card-zuDPC8aD.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f99f699f30d9e01711cf61a01af6c17","sha1":"b83d418ec7b4492fb61d6c3d7e1a85beb4146570","sha256":"5295d156c4461562c8c5a77c1b5b6462dcc310d31340c8917655b0dfc6ab088d","sha512":"6b807e0429b7c521fed2f9fe4990f1c9b1db2c87343d586c2d56dfea82a635038200fecc1555a94b4363b5cc863bc3c9a072070589a4398a6aae3f6f4c0b7971","ssdeep":"","tlshash":"f81146e67ce10079a02fc8ea319e0eaa62007895ef815b1af097f560e6164b4aba0d15","size":1072,"data":"","first_seen":"2026-08-10T18:28:17.943199Z","last_seen":"2026-08-10T18:48:38.567864Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SupportedCountriesModal.module-CCA4OPx-.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"faad1d539150435139838d20a9869404","sha1":"d07e5a740d346f1f78a994c3e587b88edf68cd0d","sha256":"c23e71f7d417b7ec3aa4b6a99be8fee32db7e6884ca5d827fc00290773f46f92","sha512":"1a8e563eecdb65d3db50eb749c1297ee6e21232b636286d543d41d66f28e407ed85e88624dbb2109566226e671bb1b3ab2a44f002f6ccb9a7a596fbb8ac1fc76","ssdeep":"","tlshash":"00c08075d47e45b830e3491f344b44b75b38e0f5c701065447411584919d949c879970","size":170,"data":"","first_seen":"2026-08-10T18:28:18.330751Z","last_seen":"2026-08-10T18:48:38.875841Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/AnimatePresence-B6RBB-Qx.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"f743b920886a33e57de242d3656b0203","sha1":"dc631edf67d154251c082f4208f0de01c4736e80","sha256":"7d53ee691861527d042235c8313598d4cc02db871d5b9da515a476071663c1e3","sha512":"52e9d313f42a161c3c61a3dbd7d596724db7db7ea7c77839cb1141f4558dfe0616e3cab98f4cf46c79468ce587232da01ebd0ec696b57a117ca127a3399ef032","ssdeep":"","tlshash":"4761646961e03573a79e80ea813b46bdba3b244c110e8818b27d3c8d2b508d1b0f3fd7","size":3309,"data":"","first_seen":"2026-08-10T18:28:18.107573Z","last_seen":"2026-08-10T18:48:38.671772Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Command-BuuQ0Bau.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bdc1a4ffd9fe487af917a3043f9bd36","sha1":"78ad28dac81c41fd2a241113c26a7bdc908c964f","sha256":"39708952cba741a3432c53901681665040872633aa4d3ea56173314fdf0be14f","sha512":"e843257a67bb32b0b925ea6fc9cbea37afade6709b620b321d19c6c7fe7bb6e837cf930df98662a04a478f500128dfe9b1ab2f2832f7f3f5fd6d4998f54c427e","ssdeep":"384:yYzhDjuLP8gZ8RR8X2DVhtP/Kx2nAC69g0vdsAtUyRsNSP:yu9gpmD9P/pAC6m0FsAN","tlshash":"02f2e8e53155b470e3de815e906f462eb73a2aa5a40e0418f039dc4c3939e85e7f3fa6","size":34628,"data":"","first_seen":"2026-08-10T18:28:17.719543Z","last_seen":"2026-08-10T18:48:38.586664Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/circle-play-CQPTTQJg.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"d7f08f12afe07b2d8f17cfd63c41a5bf","sha1":"7da35a8491930720cd8f516e41be95117dfa3aa8","sha256":"202387a3a52cb6a769eed59bd182c23e8f9ef141dc42292328a7bde1371632de","sha512":"f995f2eeb756564ba5c57773fee0541a768758b6a129756f4a0718c31b62789f626a53a01632e39db19df5fadbc74b0e3b46412565c640365522b9e8432573a5","ssdeep":"","tlshash":"b6f0955ee97c0cb9b41e4c8d6975918eb67bd2b1ef411504e1dc16b043115d05731bc0","size":497,"data":"","first_seen":"2026-08-10T18:28:17.906974Z","last_seen":"2026-08-10T18:48:38.362696Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/TrustLanding-LVRL5-gA.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"importedModule","is_inline":false,"md5":"2538101b455120920d2a3aa41925148a","sha1":"76ebf72298d3cf7fe7d4b27645ec5d3f5047c0c7","sha256":"bc702093826c43e17712e56979fb5c2e15ac7b75c63df136910b90a261166e5d","sha512":"43b599a4fb3d89e92ba61394437d3834c9d72029b34b996fdb8cf0b0021a3329e9ff2a96b24f46476512f64250ec2db4636b74659c4ccf2daaacde962b7d23cd","ssdeep":"96:JKfXPUgkjgxwSyqZo4kbNgZ6On120MgKQnB1RnIpqAw4vYAN+ghS+zINvNcnRv32:qi0xwq/bns0MgKMBLnIpWEKN0mt","tlshash":"aa02877cd76093fca429d6bcc6260d29300e80985e7bc765d29abe6811d34cce70fad5","size":8811,"data":"","first_seen":"2026-08-10T18:28:18.011038Z","last_seen":"2026-08-10T18:48:38.838722Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-assets.i.posthog.com/static/surveys.js?v=1.415.1","fqdn":"eu-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5833945f25dbc297c1a2722be62e068e","sha1":"2e3433abf068eed7f57b11ec469ff02d937cbd50","sha256":"105ad7b5dc7ff8de1804c9b0950a513fd745d00b0c3f6be55e0e181126298500","sha512":"08c52ff95f12903101a0deb3a84c30d6f6757cac67f7916d7583422420e42b06f3656b33a9327b261b8b112f71505a49bc9726ec8dc68475e836b9f096fce815","ssdeep":"1536:e97wz8HB0wGQM7CF4Bqdb8ZSsDT9E/GSZ19f6BQ:e1w4Bm7CazYVZcQ","tlshash":"22a35dd5fa00e16d51eb847810be5842f33d6b1aea0d4c54b1179cd83cd6988a39ffa6","size":99827,"data":"","first_seen":"2026-08-10T08:32:08.470987Z","last_seen":"2026-08-11T00:40:10.583217Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/cart-xOdlHfEt.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"688b2ad61549c04a9f758af5a2ae7f20","sha1":"4e07c96e5751c3ff28a68e43c471ba8628fd4c6e","sha256":"485008c1cf6933688ecbd37c52dbe45f65ed585ce1e6bd15a2976ec9ce076221","sha512":"971c47453bb9d0f043f38dad1cd2c8872cb2dba471c35846027c40a89c93aa87a85b3957c3fb29b73d5d23e18c14116a003adf8a23f53b30a4f3d78eb2fccb12","ssdeep":"384:+886tlDasjRBrvoBFlrCcsKr+A8GPkuqsL4WQb230KANpkgWScL1p2wRq:ZbbpKHxqsL47230KANXcL6wRq","tlshash":"6b52d98de0a760123e8c87e5d0f31657638ce051c6255cf0b06d816b77a7aa782f7a77","size":14072,"data":"","first_seen":"2026-08-10T18:28:18.384019Z","last_seen":"2026-08-10T18:48:38.785869Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj94 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[FirstJS:map[configurable:true enumerable:true value:1544 writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://biterfz.com/no/en/","line_number":89,"column_number":9},{"level":"log","text":"Preloaded URL structure route/no/en/","filename":"https://cdn.biterfz.com/assets/URLStructureRouter-B1PtNMUc.js","line_number":2,"column_number":11122},{"level":"log","text":"Preloaded1lazy routes in10ms","filename":"https://cdn.biterfz.com/assets/URLStructureRouter-B1PtNMUc.js","line_number":2,"column_number":11122},{"level":"log","text":"JOINED EXPERIMENTpreheader_agentic_ctaclaude_connector","filename":"https://cdn.biterfz.com/assets/URLStructureRouter-B1PtNMUc.js","line_number":2,"column_number":11122},{"level":"log","text":"Stop!","filename":"https://cdn.biterfz.com/assets/URLStructureRouter-B1PtNMUc.js","line_number":2,"column_number":11122},{"level":"log","text":"This is a browser feature intended for developers. If someone told you to copy-paste something here, it is a scam and will give them access to your money.","filename":"https://cdn.biterfz.com/assets/URLStructureRouter-B1PtNMUc.js","line_number":2,"column_number":11122}]},"http":[{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/react-dom-4VPqkDg7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.792Z","timestamp":1786387664792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/react-dom-4VPqkDg7.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1301\r\ncf-ray: a265b1b48b8392b7-FRA\r\ncf-cache-status: HIT\r\nage: 364\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 05 Aug 2026 11:57:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: nvyhJLlnfg:10839,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3587,"size_decoded":2146,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3540)","md5":"4114967659bcda1731943f0a1e5fea80","sha1":"b04c481632c7341ffeaf0c9177a7ad842dbab852","sha256":"475f86f2876d81fb8f3f920cd28d1937743ddf506ea3b5b3001bb8f1b789b520","sha512":"987e77823ae66911659304fda328e24f108a1da77d2a7b04033936e677e54adef083057bd2260a6cf23cc9d89bbdd72df827f96e5f50207d8a8e55c93534444b","ssdeep":"","tlshash":"e771335dd5c0b4434ec3591051bfaf57b2d437721ceec2a043b2d9b199a3a09057ef68","first_seen":"2026-08-10T18:28:18.008515Z","last_seen":"2026-08-10T18:48:38.284437Z","times_seen":2,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SiteHelmet-DIbDiYs_.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.960Z","timestamp":1786387664960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SiteHelmet-DIbDiYs_.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1688\r\ncf-ray: a28e948b8b1e14c6-CDG\r\ncf-cache-status: HIT\r\nage: 152\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tNeegAMkVR:88,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4199,"size_decoded":2529,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4151)","md5":"40b3fa081fed1b82cd522b835eb6d664","sha1":"edbd9b2171b57c8c0079dfe26eb0a3821f4360b4","sha256":"02da87fccf5137973b99d713080988db05d76ad158dc875dac4ed086c9289913","sha512":"9fd38750255486e6b29f83e2f396bb96a59eb0d38727c4a92472adf9b9892a99b3ed6e7aab1f52691ac6691eee1ff178adbe38314e1713b76a70bc890c1954eb","ssdeep":"96:Jff7x03lARzTbCYiXTIAj4rwzfVgfBxwaaI1xGSmGbgHCXDU:Jfl03FVWwzfifBgI1xGSvgHEDU","tlshash":"3a8195f7d42074686fa74f229437245fb63dc08cc8bc480576692d4a06d93d5e361b3e","first_seen":"2026-08-10T18:28:17.919209Z","last_seen":"2026-08-10T18:48:38.285289Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/MarketingValues-D2Kml6bQ.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.187Z","timestamp":1786387668187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/MarketingValues-D2Kml6bQ.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/MarketingValues-D2Kml6bQ.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Tag-CzFiEk0D.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.650Z","timestamp":1786387664650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Tag-CzFiEk0D.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 327\r\ncf-ray: a28f34055d3d5db9-VIE\r\ncf-cache-status: HIT\r\nage: 2955744\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 06:58:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1340,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":570,"size_decoded":1168,"mime_type":"text/css","magic":"ASCII text, with very long lines (569)","md5":"1aca56ab081b657b9ec1829fe84f6853","sha1":"3ae5ac31c753badcec0a50c71e69fc24d785ed7a","sha256":"0d7a15f9d5b5ce0b488de1d3feaf015b3241176bbdbe0f3d8c83cea7e1cafba6","sha512":"afbc918582976031669aa33cc74eb77cd8b8063cfadb1ac2128c74e92bb9051a312f47f0fe431065b7138a10acf068a1b16072e3ed02f114706b5718c001df30","ssdeep":"","tlshash":"73f04c5137147174e066892af43528dda03a831bcdb759a4f5a0760ac2caf572616a84","first_seen":"2026-04-30T03:12:06.008364Z","last_seen":"2026-08-10T18:48:38.286665Z","times_seen":14,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/embedded-session-DKkXLnhE.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.908Z","timestamp":1786387664908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/embedded-session-DKkXLnhE.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3067\r\ncf-ray: a28f86356b73a93b-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:10077,t14\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8483,"size_decoded":3912,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8429)","md5":"ca76aedec2e318116120711d6be75705","sha1":"3b2280dbef370e2e3778b3646022499077fedfb7","sha256":"3f9adb17393be5c6476395f31b20f017e50f898541712d2ef7138075d8fe77ec","sha512":"1536ca1ad371b5897887a657d3f81a214bdf31888eabd97ceb4b3b542e3b1dd95a3b6b4179d4dbbe13db6567e3234880d5d86bacd931e7abaccc81b0d866410e","ssdeep":"192:rWX49MmTYJv9BWwB6U5ugGgSGYl5lOc2t:rWgMmcJlkjEt","tlshash":"ae02d5d930d8f538d6fc1b5884320728636dd452e04d207cc8aa99aa17bbd33cdabd31","first_seen":"2026-08-10T18:28:17.924239Z","last_seen":"2026-08-10T18:48:38.287919Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/prepayment-steps-lqEmizJh.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.921Z","timestamp":1786387664921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/prepayment-steps-lqEmizJh.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 321\r\ncf-ray: a28e9454d841b240-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:14:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lrHSCqsVfP:19202,t29\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":536,"size_decoded":1181,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (482)","md5":"21dbda746992ceb2e226162d74999148","sha1":"3b843cd4268140ea11520b44f367f94a4cb87f1b","sha256":"89bdda1e2b463ac820e5c2f3df8bca790fe1bfed567ddab322f85558d7495567","sha512":"757f91fed5ced83d23884a2e64d3bd133d6a0b2f08b88e7b86af6db4d959e40a332ba7121f240daf7e79f3ba940cc63446848a135fd941471b655342987f32d4","ssdeep":"","tlshash":"38f095de74d3746523021752d07b44ddd734dc89c9591268b70ca0d47e58472f361e5e","first_seen":"2026-08-10T18:28:18.313941Z","last_seen":"2026-08-10T18:48:38.289927Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/landing-hero-footer-kEzyS1sY.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.534Z","timestamp":1786387668534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/landing-hero-footer-kEzyS1sY.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/landing-EzeWBxTg.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1215\r\ncf-ray: a28f8f1c49886eeb-CDG\r\ncf-cache-status: HIT\r\nage: 507\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 14:01:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tWZjNIthpZ:45986,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2806,"size_decoded":2083,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2749)","md5":"69822176eef17fdfe689ca8bd763a2a8","sha1":"903aba601a93d51bc917c312afe839d4909fd05e","sha256":"c65c650d190f96deb6fcf905802b3efbbbe97b5bbbcba4f22c0b6eec9ecbf76d","sha512":"01ccc69ba98a3639652f48370fa29854b198d4fdf922e515bdb083c9157c8655b6b917ea08fad1a3e42e2a8b4499abf22a1985a08568a280adbfb8e02f03bceb","ssdeep":"","tlshash":"ed51647aa88154bc68ff8ce4e0165179a33d8028e7096eeab4bd27ab31155d1bc1f7c1","first_seen":"2026-08-10T18:28:17.945146Z","last_seen":"2026-08-10T18:48:38.291803Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/mutationOptions-Cwy-JuHf.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.780Z","timestamp":1786387664780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/mutationOptions-Cwy-JuHf.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 84\r\ncf-ray: a28f3413f91765a2-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 3020848\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: zh-Hans\r\nlast-modified: Thu, 30 Jul 2026 23:51:36 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50082,t17\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91,"size_decoded":960,"mime_type":"application/javascript","magic":"ASCII text","md5":"2d2e0f6c34d542ed9ad409807490393d","sha1":"ab7d4078f2e36e2570cb85e44365a0bf84a40356","sha256":"7f2bfa9aaa442ed1e6390989ea6595538659573427032971d639d87600f22f10","sha512":"26ad33c2c99930d45e21a92a9c135570df7e1110c543ca0b4183fa8cffea1963b48acfd0f14f07b09f1101d349c3a7acc5514774b13ad1f2be78c27f067a6ed4","ssdeep":"","tlshash":"9eb012ce74f1b7f068630c25411b0586513ca0c4f1064238500844752460460e526c27","first_seen":"2026-07-16T00:57:04.802901Z","last_seen":"2026-08-10T19:05:30.061063Z","times_seen":8,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-DSXffO_x.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.884Z","timestamp":1786387664884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-DSXffO_x.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1558\r\ncf-ray: a28e93d10d23bb7a-FRA\r\ncf-cache-status: HIT\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CmAkpebaOs:28332,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3723,"size_decoded":2427,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3681)","md5":"747c1b7dab9d6395c912eefc5b0bd285","sha1":"2892fd8b10a97923faa9537eb84a9f95a1d6fe8c","sha256":"4b9f8b36759a32f29ab9e0047983c97b4d49de1c1a555b0c072c4d0aab9c47fa","sha512":"da06721282964efef73ae1758317f645899d3bd41c29aa2400850fd1748ca5be423f9e9c17f34212bb0f6fdca81bc99f4ac267339d4e2d2c46b8c791492d9b23","ssdeep":"","tlshash":"2b7185d970e5a9b0c9ef9c86e0af885cb73a51a4310d0734a42e4a742755a80f21ff56","first_seen":"2026-08-10T18:28:18.321191Z","last_seen":"2026-08-10T18:48:38.294614Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/testimonials-DJDhwiLi.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.333Z","timestamp":1786387668333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/testimonials-DJDhwiLi.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 1049\r\ncf-ray: a28f3405eefc5db9-VIE\r\ncf-cache-status: HIT\r\nage: 2968752\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 06 Jul 2026 14:38:42 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1344,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3560,"size_decoded":1889,"mime_type":"text/css","magic":"ASCII text, with very long lines (3559)","md5":"c9785602cc34ee7abbcef0b60cb56c61","sha1":"53d6bd4449f3523a2317ea01ab649c62e30b5149","sha256":"8425e5782d72c4b9f8f6adc37658ce149be2d75a91a6b6fa4ec9e0bec2342f8e","sha512":"79ad71d6da37932160fcf838cb9920740d149ee4fe6fa95097224dd51415b3e6c612b69b99f3c296fb20095b84a46de261837c66cfb28c8e46c0dbb15d04c0b1","ssdeep":"","tlshash":"737102b4d5a4e27cfc3be52617e5758c50258506dd2306def81aba15c3c77e31a32648","first_seen":"2026-05-31T11:11:56.093228Z","last_seen":"2026-08-10T18:48:38.296774Z","times_seen":7,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/radio-Cv3mNCWu.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.759Z","timestamp":1786387668759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/radio-Cv3mNCWu.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/icons-CBF0S1-q.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 289\r\ncf-ray: a28f2d1ff98f371c-FRA\r\ncf-cache-status: HIT\r\nage: 6398\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jeySHQyKxh:2,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":417,"size_decoded":1132,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (374)","md5":"4c6e68efd0cdc971018719399e54b913","sha1":"3d637084d63418d541d4d58d0d9b2208d62eb1b5","sha256":"a5b352402792c52657c93c6b8d2925799ba03b81588e0ad4d18d3991055c6158","sha512":"3e1eb38f38ef5acb01bf75f61f7c86d573a98ba8ec28a8e541e0d4c228830931552afd253a2cc4bbcc810aa3daf68103c6e0cd3b2c51035d8d93d0066460c29e","ssdeep":"","tlshash":"d8e0203eaaed0dbc101a0b61014a6500575d68a8217749a03acc6b390ae6851edaeea1","first_seen":"2026-08-10T18:28:17.941113Z","last_seen":"2026-08-10T18:48:38.298116Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/index-D4USwkjV.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.701Z","timestamp":1786387669701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/index-D4USwkjV.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/index-D4USwkjV.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Hero-CKfClY-H.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.679Z","timestamp":1786387664679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Hero-CKfClY-H.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 697\r\ncf-ray: a28f3405cf240a0c-FRA\r\ncf-cache-status: HIT\r\nage: 846662\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lrHSCqsVfP:21049,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2619,"size_decoded":1537,"mime_type":"text/css","magic":"ASCII text, with very long lines (2618)","md5":"39eed5bf8105fae280fd19e17740d9be","sha1":"65febe4721acf2029984dcee7632ca57e6969b34","sha256":"dd3bbe619e783a420fa9f2cb364d61ecb188e7cdaae53eb0cfbafaddf658d8a3","sha512":"1680d36747813400528df69d3196e78399571da675e1280cb77fa676d01f0f2910dc3595a3e7a074aef1ea0312499c450284f98f7323d5769a45cc8b278f42b9","ssdeep":"","tlshash":"76512266de31b33c4d7bd6a867ef91dc31601900de6a2dfeb4c1119d43c6af28227606","first_seen":"2026-05-31T11:11:55.753071Z","last_seen":"2026-08-10T18:48:38.299751Z","times_seen":7,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/customerio-segments--uQgXg2h.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.913Z","timestamp":1786387664913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/customerio-segments--uQgXg2h.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 582\r\ncf-ray: a28f86352b8ad278-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: dQWwpWgslw:47,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":996,"size_decoded":1449,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (939)","md5":"8059822a4f02cd53f4438d4238b7343d","sha1":"b87382d0be083c15f571e9a602fb0858318869af","sha256":"c119fd8cc48e42b15475aeaead15aafc7859f13d92ad4a041955e5c228b2ef2a","sha512":"51e87756cbe92e8834f84840a91762a44db91600f1ff61e8e455e2e2f9e288d1ee05592a13d9e81d8304d051179037feaeb3a31d37952dc84878d84fa51bb7ea","ssdeep":"","tlshash":"af1154ccb8fa55b2b98c1c73843e4a43b12cc8636b2c824570af74843625b51839ef72","first_seen":"2026-08-10T18:28:17.763971Z","last_seen":"2026-08-10T18:48:38.301824Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useAppAccount-CxZc0zV9.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.962Z","timestamp":1786387664962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useAppAccount-CxZc0zV9.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1446\r\ncf-ray: a28f86353e63cb3f-FRA\r\ncf-cache-status: HIT\r\nage: 149\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:59,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4004,"size_decoded":2287,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3953)","md5":"8583cad4a9b9118e345b6b5e7939ad39","sha1":"8733bd27f0fc97fb70e137a8489cf30f9e94c087","sha256":"beefc188a2bd683b2e6aa98bc498bf429bf3f6cf3daee031a95acd14d1cb70f4","sha512":"f1135e2fb281f71533cb4813019e46cbf1fc1ba9872424c503077ff1eaa9d7b99dd885da572aef6fa626fdd1cfe5b2f918f58ae14481de60118f407728dacf85","ssdeep":"","tlshash":"758176d890a830597f1799896c2216a603246ce2070193ed76fa91f3d7b43c5d2eaff3","first_seen":"2026-08-10T18:28:18.152771Z","last_seen":"2026-08-10T18:48:38.303277Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Accordion-CMmPUmp5.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.583Z","timestamp":1786387668583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Accordion-CMmPUmp5.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2343\r\ncf-ray: a28f2d1d1870382c-FRA\r\ncf-cache-status: HIT\r\nage: 6398\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:24497,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6773,"size_decoded":3189,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (6726)","md5":"11a6146268fe41d9819379a3673d661d","sha1":"55ef60b0215be55b0794cef689011213616eeb19","sha256":"b1c474f98bb0c95f6db568b5771a19b7756233e54e05d17fb960732c2684e925","sha512":"386cd6e957fe3bb6ca595e9273ad5d7b1ea1e64435d35d4c99c8eea2d0e711becc12cc6582f6b11d2f8ba1cd5acc78293defd530d5783d077a5a84f2f5fee5f7","ssdeep":"96:urH/PosxTSQx7OdGXLSYBt2Ye5muOLTGsgZ8heeqKGhvTkRB/hIjM1:Yn5xGQgdUZtumuOeBZSwrhvTkRB/hIm","tlshash":"f7e1a998e0513564c66fccc5c12f003cb23e6654e90e2a31b5bb5d58671a3b1b3ebfa5","first_seen":"2026-08-10T18:28:18.0479Z","last_seen":"2026-08-10T18:48:38.304535Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Shelf-Blllwayj.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.588Z","timestamp":1786387668588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Shelf-Blllwayj.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1535\r\ncf-ray: a28f8669befb4d7a-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:51741,t20\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4040,"size_decoded":2380,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3997)","md5":"a9354f26dd8a43cb965026479c4f2e36","sha1":"c74f8233d2dfbe20f1b7345f5bd552ed1cbcacea","sha256":"46c4809b8f26895f51ef47ed6ed975836a68a4d0dce7d62fc98f33d3b3f17f52","sha512":"93f508a67bf0c4f8385f52a081f637270df5d9cd464c11a72e494f04b560b2f09ab2c7a0f9ce3d995830e3d7d42cae7e9ead81ce635febeaefcee7f5e564fe0c","ssdeep":"","tlshash":"8c81734694b076e1ec1f8db8c01e802ef237e585970b5468b45e585029a3cb57b4ffca","first_seen":"2026-08-10T18:28:17.840449Z","last_seen":"2026-08-10T18:48:38.305985Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Link-78T-cJXY.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.702Z","timestamp":1786387664702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Link-78T-cJXY.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 230\r\ncf-ray: a28f34061c029b98-FRA\r\ncf-cache-status: HIT\r\nage: 1176004\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 27 Jul 2026 17:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:9285,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":1072,"mime_type":"text/css","magic":"ASCII text, with very long lines (418)","md5":"27ecac0f6a8454eb5edc434e68e99f6c","sha1":"1dbbf5f326d3537d243d6f6580e77d0d33a2f8d7","sha256":"ea32e90ab4ed4a759d2966908b8cc1e7a53f4b216d7460cecc295efcc183821f","sha512":"51e3b34331c5916a96ab3b39a191d8d4ad7c1037686dfcae93f82cb67fcebec0ca8bed10e634406b850e8fc77149cae3f9748a7413c681ead5fc74bc78abcd46","ssdeep":"","tlshash":"28e0ecee0b1d2177c44b553b53ad43c5e1b34090ca6790c2a5bb9b30d395b54e2dd041","first_seen":"2026-05-10T06:59:24.4501Z","last_seen":"2026-08-10T18:48:38.307235Z","times_seen":9,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/SearchInput-BABb5V-3.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.187Z","timestamp":1786387668187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SearchInput-BABb5V-3.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/SearchInput-BABb5V-3.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/URLStructureRouter-UQLD4QC1.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.918Z","timestamp":1786387668918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/URLStructureRouter-UQLD4QC1.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 12331\r\ncf-ray: a26ecfd67adc9291-FRA\r\ncf-cache-status: HIT\r\nage: 146\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: pl\r\nlast-modified: Thu, 06 Aug 2026 14:37:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZUfsnGjFkD:1589,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71406,"size_decoded":13169,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"f31fec1a86c440689852f529d216a819","sha1":"b324dc92a1d191731c077b690e33346e99b9cdfd","sha256":"9cc141d138c30b437f5c05e6f03b49f98e71a0a8477582e701ec0b6aa11e5313","sha512":"e3ef9822dc8bfc42c5ec6ba278cac2c7fa239927a7503e30066d5ee68ab63d49056cb1905559880647dd9cb342f0eed38be1651e0e3b4544f2feb78481354786","ssdeep":"768:i5WStiJmSme6pTBhNNHj6slqiuHoj0craurzCrnlf:BSti0NNns9frnd","tlshash":"4b6351bce563f63f7c7f94b693e8b3ad5104a602dd770be9fa01a02121c76f10166a25","first_seen":"2026-08-10T18:28:18.271899Z","last_seen":"2026-08-10T18:48:38.308174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CookieConsent-BfxCeDYs.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:50.328Z","timestamp":1786387670328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CookieConsent-BfxCeDYs.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/URLStructureRouter-B1PtNMUc.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:50 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1206\r\ncf-ray: a28f86769fe477d1-FRA\r\ncf-cache-status: HIT\r\nage: 141\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:276,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2823,"size_decoded":2073,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2772)","md5":"1e2f6f38ad03ca668ed15613d248b336","sha1":"0ee6275dacb15cc2a1c3f80cdebab1daa54a8852","sha256":"7784db028b2b38728c3953a36b5994382e87e5a402e2f76bcf225becc6ecf5d9","sha512":"dc2a63ca57f1cc130d47822a3d28dc21a00578f82e6ce621256e88a5a6c9c8fefbc8345dc4eeca9145c8b1898131da714c62da5a98044a2c47bba18f734d230a","ssdeep":"","tlshash":"df51840650f86ab86d5d5ef4e01a901e767b805ca21dc0e4a4aa2d9003167d1bbdffcb","first_seen":"2026-08-10T18:48:38.309326Z","last_seen":"2026-08-10T18:48:38.309326Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/product/roblox-usa","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:50.896Z","timestamp":1786387670896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/product/roblox-usa HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nX-Rel: cbbcd5c33ba171317476fbc5fbe9b33976e00d1e\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 86877\r\nage: 322\r\ncf-cache-status: UPDATING\r\ncf-ray: a2912bdf8e6b8824-PRG\r\ncontent-language: en\r\netag: W/\"1535d-SVqYnYj998ouQtYs9r0GMPbR/Pk\"\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-cfw: oPWIxLJoxQ:62,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-robots-tag: noindex, noindex\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86877,"size_decoded":87623,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2076c3f55da2934af135639b0fe156e8","sha1":"495a989d88fdf7ca2e42d62cf6bd0630f6d1fcf9","sha256":"9f93cb3e9041633f96cc3d428e48549c23eb83ff0cc85e8d698bd9150937eace","sha512":"881b34575cf66e980e810a78b001507feff2ff0bb4ea2ef7c230229d6db10179eb987a9ae8c4a620c9888e73ee78178044700a7ebd804ae77a9ac4f6a8712e05","ssdeep":"1536:Hg3/+NiY/fNptKfm04pGRS+QGTOdW/IznBbkis5RLNPF1nKb+l4CaUg7g3:Hg3/+NPfftKezk+WQzntrstn6i4ZS","tlshash":"1d835bd455c904b8d97011995eabbf293c3d24bff282dac1f08deeac60e8143763585b","first_seen":"2026-08-10T18:48:38.311857Z","last_seen":"2026-08-10T18:48:38.311857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/product/foodora-norway","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:51.398Z","timestamp":1786387671398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/product/foodora-norway HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nX-Rel: cbbcd5c33ba171317476fbc5fbe9b33976e00d1e\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 42898\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a2912be2b82a8824-PRG\r\ncontent-language: en\r\netag: W/\"a792-SUC1ce+FtvIdnQxS+VoVX9UCWhQ\"\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-cfw: FSyZsVnrNc:136,t77\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-robots-tag: noindex, noindex\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42898,"size_decoded":43637,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"180bd96125dd44e8f84c69811d7bef55","sha1":"4940b571ef85b6f21d9d0c52f95a155fd5025a14","sha256":"8bc7dddc1ea31bf20dbb22232d2e3fff469f118d006917c66dcfc25c97dafe86","sha512":"96ba827c00b8184b1cbc66595f9e66097603dcb66646d94abb4bdacf57c4727a0b8925ab25b01a60f47f49bebbb6d8a221c5d7d7a28454ac341aed14a1f15bad","ssdeep":"768:Y0BHb4NbCXoFk9Ng85M7nJ4bzDTH4beH2JhINhBa/EJGmju0ejUdb:Y449kTg85M7nKbHTYbeHOINhBGEEmj/b","tlshash":"2f1319c894e50878c3f512a41e777f692d3d20bbe2c5ca96f09c8ed8a0f9257357681b","first_seen":"2026-08-10T18:48:38.314043Z","last_seen":"2026-08-10T18:48:38.314043Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitraflll.com/","fqdn":"bitraflll.com","domain":"bitraflll.com","tld":"com"},"ip":{"addr":"91.92.242.79","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T18:47:43.035Z","timestamp":1786387663035,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitraflll.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 09:35:23 GMT","end":"Tue, 22 Sep 2026 09:35:22 GMT"},"fingerprint":{"sha1":"B0:A4:1D:C8:1D:00:DB:9A:65:27:61:62:2F:D2:B4:A9:5B:F1:17:89","sha256":"D0:15:21:ED:4D:C9:D3:1F:03:42:F6:3B:CA:46:F4:00:AD:43:CE:64:B2:17:0E:2C:1D:59:2B:29:66:1A:20:3F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitraflll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Mon, 10 Aug 2026 18:47:43 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 685\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\nSet-Cookie: cf_guard=NTYyMDc2MWY2MThjMzA2NTM3MmMzNTkyNDExZDBiYzJkOGJmOTdjZGVmNjhhZjE0NDgzZGUxODEzNzAxNTJiMXwxNzg2Mzg3NjYzfGI2NWZmZjJkZGZmN2I0YWVjMzk0MTI1NWEzNGM5YWFkMGI1OWFlZjg2ZWQ1MjBkZDhkZjM5N2Q2ODQzZTQwOTQ%3D; expires=Mon, 10-Aug-2026 18:52:43 GMT; Max-Age=300; path=/; secure; HttpOnly; SameSite=Lax\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1347,"size_decoded":1293,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"025314e47005e4477b356571739bd014","sha1":"5f0a11d104339243b3c4b7f7ab6f54e6eda98ecf","sha256":"68efdaed30d0d459272626e2a0705ffa8937dbf35ecb2815f51e231850314e2f","sha512":"238560b00dd14efba2219d5a2983fab72df0315b67683370bbd1082bb506c0976dc00bab2b1f3f594bfab0b8e774bf430622a47cc631fdf4112fa9d001eb080d","ssdeep":"","tlshash":"0321d05a0ac18804527183b99bf1f57cfa9740575b048954bddc741b1f75f478853bac","first_seen":"2026-08-10T18:28:18.143548Z","last_seen":"2026-08-10T18:48:38.316878Z","times_seen":2,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":5,"connect":71,"send":0,"wait":211,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitraflll.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/circle-check-big-D5_P4KF2.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.878Z","timestamp":1786387664878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/circle-check-big-D5_P4KF2.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 376\r\ncf-ray: a28e93d21cfe1e57-FRA\r\ncf-cache-status: HIT\r\nage: 123\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CmAkpebaOs:28334,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":512,"size_decoded":1221,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (458)","md5":"809f09b46e6a48ca1ea3e965b7a6a19d","sha1":"962da14c5e03c277cb65d132fcaf8582819a0bb7","sha256":"6397c50e9816c5da96fa9e4a4277bfa3e91e5bbf68b4acb8c248165ce39fac1a","sha512":"c07899284cc17269f088a95c2b88ed121d19461d47cbf36ff59403f9b81dc1b30c1addbc199717826ee521367011f6ad3bf6fea3366e03ab8a969b8665c1fd51","ssdeep":"","tlshash":"d2f0c01fdaa92db8a01a4d9d9a69a54af69a8590af451614b3ac107042004c05627bc1","first_seen":"2026-08-10T18:28:18.022711Z","last_seen":"2026-08-10T18:48:38.319156Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useKycStatus-BIe1f0do.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.919Z","timestamp":1786387664919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useKycStatus-BIe1f0do.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 330\r\ncf-ray: a28f8634fda3cb3f-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:57,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":482,"size_decoded":1196,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (432)","md5":"0dbbe8c4f34e4caf72fab8472786f0d0","sha1":"06407bc4199643a27514a0314c26f7fa71a8f575","sha256":"1621b8c6158aadcb4314299d78006789221e6a29242d096c6ab9bba36482c570","sha512":"7546ad11007a0f695f1bfcc5746ebeb0dfc9a1bc42b7e4bcf6d7e4287a6e52c21a57bb603a7ca2dea03b18f22891a0caa75fe6c3d434561f1e27bee8f1447357","ssdeep":"","tlshash":"e0f05488d3f800ba6a1d1c1ed03505a09a7c7006d242a734e2ff5634733caf4c18c713","first_seen":"2026-08-10T18:28:17.996113Z","last_seen":"2026-08-10T18:48:38.321006Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useShouldShowFiatPayments-NVGUYSXY.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.949Z","timestamp":1786387664949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useShouldShowFiatPayments-NVGUYSXY.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 321\r\ncf-ray: a28f86352fb1e866-FRA\r\ncf-cache-status: HIT\r\nage: 149\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:58,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":553,"size_decoded":1187,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (490)","md5":"1186ff2823b2171193fd389ce52035cf","sha1":"f87c10efd123fb62bb51ca35cd460c6b24a6375d","sha256":"ebe2c00da7ded4fb4eb86563fad80c5b1181b5c4d879cf6f02d1a5cde37253f1","sha512":"74a72aba821630765b63c0e11316f339815fac9da9625fd0bee7f9f7c05aa771488f1f8ae8e7b379aca0c89ee829327ed432e08f2139b24c87225a8564b3b81c","ssdeep":"","tlshash":"8ff08b9b70ebbb7d736c92d7c9182c538b2ce8984a44168547d0d2052e0897ea251d36","first_seen":"2026-08-10T18:28:18.396212Z","last_seen":"2026-08-10T18:48:38.323149Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-assets.i.posthog.com/static/array.js","fqdn":"eu-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.434Z","timestamp":1786387665434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:16:21 GMT","end":"Wed, 14 Oct 2026 23:16:05 GMT"},"fingerprint":{"sha1":"A4:C7:89:02:89:1E:87:A4:0F:B1:DE:E2:A8:19:4F:7B:D5:1D:6A:BC","sha256":"36:85:BF:C1:16:3A:49:C9:98:16:2F:48:3A:FD:14:C0:9A:20:E0:C9:AE:CB:8C:72:55:A8:B5:4E:E6:83:5D:5C"}}},"request":{"raw":"GET /static/array.js HTTP/1.1\r\nHost: eu-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a2912bd06a69723c-OSL\r\ncf-cache-status: REVALIDATED\r\nx-amz-version-id: VaAhMVriZALM2UsNPTo.rrZiteSCmOb_\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nx-amz-server-side-encryption: AES256\r\nlast-modified: Mon, 10 Aug 2026 09:57:04 GMT\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\naccess-control-allow-methods: POST, GET, DELETE, PUT\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nx-amz-id-2: AWi1zcZlyqXqCmKBb84k+6C0oSZXIHmY2jTNBt1h89RVCg/5dkvXZKXdhiUbYzPnEPqwuyKCRbYO2scZ3jb9SQXao4EDcfAS\r\nx-amz-request-id: GF5CH51B02ZJ8C5T\r\netag: W/\"2438aa6f241441ba7e6082ee34f7aff5\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":243544,"size_decoded":79224,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"2438aa6f241441ba7e6082ee34f7aff5","sha1":"ebb36d62f02bc9fc3d6aebf480aec6b1a7b52ee0","sha256":"ec90b4bb4d8153fcd12441acaa4b638b1b941af193fd7fce073eb32db932364a","sha512":"d5d42d10f8cad13333dbb3fb80aa7c9ab40312ded34bcd77413bbb9ea91ee89d154a153bd87cf75636ce44d707f914b686b44e79883478a07e9d1933677cf4ed","ssdeep":"3072:tuXTzZYJXZSQH4DAaM/Da1IO4b7th5zaAMFFmFSvkxypgOTIc:tuDzafP1aYzMFFmFeWIIc","tlshash":"85340b97b77ae03246e690a5d03a0113e32a3b0e6149c06cf26eddcd359d589b277f36","first_seen":"2026-08-10T11:02:13.60462Z","last_seen":"2026-08-11T00:40:10.595874Z","times_seen":44,"resource_available":true,"data":null}},"time_used":3181,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":63,"receive":0,"ssl":3113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingFooter-Ckx_0eCA.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.896Z","timestamp":1786387668896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingFooter-Ckx_0eCA.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 1375\r\ncf-ray: a28f3405a9cbf51f-FRA\r\ncf-cache-status: HIT\r\nage: 2792792\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 08 Jul 2026 13:10:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: huhItYZPXB:2057,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5789,"size_decoded":2216,"mime_type":"text/css","magic":"ASCII text, with very long lines (5788)","md5":"374bcdd3eb8bde64073cb12020188f51","sha1":"1619ebbd16d0dc48748b4c0f32814e45231956fb","sha256":"d7d19b0e020720f423c3a776dea5cc7224f3c41dd375c40531596701f80934d4","sha512":"acf4f2890959c5352a1fc66d4dfd17d5d097574a42d32256b4625ee2a8202e5247e8b8cdb48293965d49e92e31bbaa214e72e784c74de774342a7bc89ea3727a","ssdeep":"96:dWq7GLBihLcMSn4Wd6vQ86ojiPhNMi/q4pbfjzXBEVQo:3GUhVwnGQfoCwi/qQREVQo","tlshash":"96c142856b50f73fec7f912d82be728c62986506ca6719e7f919a200cbc57f21932489","first_seen":"2026-05-31T11:11:56.092136Z","last_seen":"2026-08-10T18:48:38.32708Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/sui-icon-DVZ5J9Ii.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.967Z","timestamp":1786387664967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/sui-icon-DVZ5J9Ii.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 880\r\ncf-ray: a28e948b79abdc79-FRA\r\ncf-cache-status: HIT\r\nage: 152\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:13:32 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: QtIEGlNvBZ:91,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1626,"size_decoded":1744,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1580)","md5":"088514c88ab3a271f3b1494a9ed1efbf","sha1":"24a32277cb8047c6589ea7ad35605a6ab6867ca5","sha256":"2404c1d1f4a8afae64524a133f3d647eb6cf66af491e5ed43f2b88f048587384","sha512":"4c37ad2efb8d821fe2800146e431d4a6aa4906d8c9c6ef30eb8d911e583f14cf03350557f7f656a321656ed8f9dcfd7a161dbcb6f9a27c990e68fdccb896ba65","ssdeep":"","tlshash":"b23114cd6bb50dc5408c8fde7f92d49e7c14c5735e8a4915d4681fa42280ce86a66b83","first_seen":"2026-08-10T18:28:17.914376Z","last_seen":"2026-08-10T18:48:38.331744Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/shield-check-CqajTMC5.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.718Z","timestamp":1786387668718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/shield-check-CqajTMC5.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/ValuePropositionItems-Bfjp9s_M.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 443\r\ncf-ray: a28f2d227bf3371c-FRA\r\ncf-cache-status: HIT\r\nage: 6393\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jeySHQyKxh:6,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":631,"size_decoded":1310,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (581)","md5":"29a420ec0105dc237c5e636de6c59470","sha1":"3ba5710935de599076f480c2d9952d56b2b3b677","sha256":"942f9aac97074727addfd3fb57d1e5a3a3b9180837eed6d6edbe887814d39b2a","sha512":"0a0fb7acafef648c5b75a704357f592c3307e99bb86caca8c557497cf88ff2fa95a8bf605764c48674aaf2632d2b884037ae4e7fbb36b57c5c9be6f4f5e84ccc","ssdeep":"","tlshash":"63f0dd5fdf6c1dfcb00bc9ddea5b654aef9ae294ab6a1520f28c187842010849217bd0","first_seen":"2026-08-10T18:28:18.334563Z","last_seen":"2026-08-10T18:48:38.33385Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Text-fkry7N_q.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.609Z","timestamp":1786387664609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Text-fkry7N_q.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 49932\r\ncf-ray: a28f8630aa32dcc4-FRA\r\ncf-cache-status: HIT\r\nage: 155\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:2451,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172087,"size_decoded":50776,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"06b4b54b5ac9eefba21e01b97c80f14d","sha1":"9adb8a0825a8bc65841b061efa2e37fdf28f50c2","sha256":"8c1231d8962c514663a88d2305a988b479b08c833cb70a407b8df293cf6c32e4","sha512":"9af00da40ae2b9439933fe51c8754a3817323a8d73e5e4e17703d68b9ca0aa3f6a413d7dd066a5a22c05e66c463f50815e004ae557c92b7d2fe0e2c5c5e38177","ssdeep":"1536:fzUwlbNxiTuifemIOinUoEMwOeODIEcmoOd9cIUHqUgsV3dT1HrvNuANh7ph7:TlbOkU7e9hatRHrvNLN7h7","tlshash":"7ef34b89328ab1a9e3bb4b6590b2140db77ad540ec4e180cf1d9f5c519e3842f2f6fb5","first_seen":"2026-08-10T18:28:18.222884Z","last_seen":"2026-08-10T18:48:38.336616Z","times_seen":2,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":95,"receive":57,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/toNumber-CDMG4uG9.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.806Z","timestamp":1786387664806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/toNumber-CDMG4uG9.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 646\r\ncf-ray: a2750d2c5e6c916a-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NTCtKCSaut:6328,t26\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1360,"size_decoded":1479,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1314)","md5":"9613bc3fec45bd77d760e5588302ddbc","sha1":"0b908d5aa78dd18c5848563f3df289aef150f993","sha256":"bb1dc2ae489fc17d72ff514521abc30994766c3f106946b66048ceb1e1b39319","sha512":"57759a7245359b8f1ac2c9782d1a59299c8668baf625c6dbc2cf54324cfbcc8b4d3b5fd0769ab4a77df633446bc414ad99dddd8fb5b49ef45b2573861b3308f6","ssdeep":"","tlshash":"26210eccb8c6f2a403628d72805f5d15f1ba68f541acbfa0e291d1f1ac7285dc932e57","first_seen":"2026-08-10T18:28:17.966712Z","last_seen":"2026-08-10T18:48:38.339742Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Counter-DHrtJ36z.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.848Z","timestamp":1786387664848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Counter-DHrtJ36z.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 504\r\ncf-ray: a28e93d10847b270-FRA\r\ncf-cache-status: HIT\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:7750,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":813,"size_decoded":1373,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (768)","md5":"c6f57938715855bea997af8e621c3bd7","sha1":"4d17b9eb71084aeb1bca7f85ad30b0daf22054e8","sha256":"23cb600e2ac5482929e4242f8904209f24334b009ce989d5b376695152bd3ad0","sha512":"ae5816c65c491510fb632cc9f8aef7031f214632137ce764b9db52ba0e42d0efbbf610b7596b7df3679733f5c1e2c147bf8bf4c59aad9b28b8a6c65bb8f5c979","ssdeep":"","tlshash":"38014142f4f0b9f2961b8cb8004f57a5735100c9cf0e3d79a0b274a81aad4fd0b29f62","first_seen":"2026-08-10T18:28:17.829883Z","last_seen":"2026-08-10T18:48:38.343191Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/misc-CR5auoDY.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.956Z","timestamp":1786387664956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/misc-CR5auoDY.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 132\r\ncf-ray: a2750d30186fd0d5-AMS\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CKwinJKdhI:6483,t23\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155,"size_decoded":965,"mime_type":"text/javascript","magic":"ASCII text","md5":"4b68e8c663db1e2c636171d63a999f1f","sha1":"2c06198666609cc4a8f96b4753cc3606a597b3e1","sha256":"ce64d50741f84cd0928fa5a56988ab585a23a21367db6190ac8e45477ccf8e62","sha512":"457e128ad3cd9242beef7c70fbf0e8adef1d2f3f1ad26e5d6b5f51d52760347e19d70245b1b3542932f6e8aceeed327ad7f8790abdcaafa488871456bc0df39a","ssdeep":"","tlshash":"e8c08c9e26f83aa853290a35460780a1661572cda1480b5ca090126068704e6122af08","first_seen":"2026-08-10T18:28:18.178588Z","last_seen":"2026-08-10T18:48:38.3459Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ProductTag-CTbPgjx_.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.309Z","timestamp":1786387668309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ProductTag-CTbPgjx_.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 180\r\ncf-ray: a28f3405c8fb9a0e-AMS\r\ncf-cache-status: HIT\r\nage: 983876\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: BjSokvcnAX:11,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":257,"size_decoded":1018,"mime_type":"text/css","magic":"ASCII text","md5":"4bcd1ab922c9a5da3deb8463a9e4d4d7","sha1":"5e9104f3a63a04318ae60e043cfee6f2d7564c44","sha256":"39af1c2b53eca7fb284c92a5b65aa357eb0e67f00458b44a691caf715e25d39d","sha512":"dcf27c143dddb7dc4974fa5704cf33997ebc28b65cd986f8d2d5902b92429122df7d11da3cab935e3de87ae3825ca5683da7b4819ae528e375b2779bd85e462b","ssdeep":"","tlshash":"7ed05e44a730803d987d6662969ca8cefe41d3c8698bc8f5ea90731493812d2a5d65d9","first_seen":"2026-05-31T11:11:55.793013Z","last_seen":"2026-08-10T18:48:38.347413Z","times_seen":7,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/TrustpilotWidget-D2CAoTrL.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.326Z","timestamp":1786387668326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/TrustpilotWidget-D2CAoTrL.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 326\r\ncf-ray: a28f34059be6371c-FRA\r\ncf-cache-status: HIT\r\nage: 2785848\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 05:33:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jeySHQyKxh:15,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":632,"size_decoded":1166,"mime_type":"text/css","magic":"ASCII text, with very long lines (631)","md5":"077301a693d4537db663ed6e57c7d6ec","sha1":"9b7cd4f4bcf967715d92081113638798dd2f8ce5","sha256":"660b16696d3169e5547946a989d9a02c564e6205800029569408e0e70139336c","sha512":"0983885b569cba4a554106e1522631ccb18cd75cbe81dda96ec804b11fb06fa6e88e33c90dd75b5df0a5f934afd86ed67541d5e41206d68dbbf904b19d760239","ssdeep":"","tlshash":"95f0944e0b28e22ec4d3013b4a4e96cf540845cbc23746b3f483b72a81c4fa76c321ca","first_seen":"2026-05-10T06:59:25.029418Z","last_seen":"2026-08-10T18:48:38.348828Z","times_seen":9,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/HrefLang-ul-Axlf2.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.532Z","timestamp":1786387668532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/HrefLang-ul-Axlf2.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/landing-EzeWBxTg.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2579\r\ncf-ray: a28f2d1e58a2360c-FRA\r\ncf-cache-status: HIT\r\nage: 6389\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47827,t15\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19189,"size_decoded":3425,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (19129)","md5":"1aaae7d40120319a27fa01a534f5126a","sha1":"7055fe09b45dac492236f5037f630654737bfc8e","sha256":"7fd80a8531a249217a5f0a6bfe9684957d086485ffdd9815537c68528313a6a1","sha512":"17f9c87d5e4dba9e2234e3f14437ab8a9277d006d6bec7f02b29131697884df62601831b76c203201b6ea08fe43cdd398e8e24d44ec68d853e38d53ce63aa583","ssdeep":"384:kd/dRu+7yL7HX2g9UbeYdTSlO/vhmFp836XPsOS780si8wc0DR3JFaEji:kd/dRu+7yL7HX2g9UbeYdTSlO/vhmFsa","tlshash":"8e82bbd6e96830f65503a3632ab51c0a4879e74dd447cfd790c863e820bdfb8c789a76","first_seen":"2026-08-10T18:28:17.928307Z","last_seen":"2026-08-10T18:48:38.355135Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SearchSorting-DqP3owRi.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.817Z","timestamp":1786387664817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SearchSorting-DqP3owRi.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 215\r\ncf-ray: a2750d2ceee4916a-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NTCtKCSaut:6329,t30\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285,"size_decoded":1050,"mime_type":"text/javascript","magic":"ASCII text","md5":"5f701e6213bd6b2091956f3896e91376","sha1":"64c9809efafe2e73b9af076ec92a93b95f9bed8a","sha256":"5b8343754bd35c6f20a065cdf3d6f4f5c903c1f06d833517dd4803ce663dd8d5","sha512":"a2cb83ef1d2e1a13296d346a80743bd5e018224816d9c3c88c0993344a01491a4320d457dda94d6f4a85beebaa701c46ab2acb3447310ff4ed0ce7b8c48111a1","ssdeep":"","tlshash":"7cd0c21e95edbcd824974522422725912d5e64cac20e11a0e7c2068c2c9cae79c24d67","first_seen":"2026-08-10T18:28:18.13783Z","last_seen":"2026-08-10T18:48:38.35715Z","times_seen":2,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/queryClient-CryZq-J2.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.897Z","timestamp":1786387664897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/queryClient-CryZq-J2.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2296\r\ncf-ray: a265b1b4ff028aa8-FRA\r\ncf-cache-status: HIT\r\nage: 321\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 05 Aug 2026 11:57:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: RSspwaEfSI:8182,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7592,"size_decoded":3139,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7543)","md5":"9969b2cf8b367fc7ff56deed9dad98ea","sha1":"54d2f693faf0e3c5c5fbe8912d2db966692d5636","sha256":"c844acafc53b4ec98baddc325017f6ae5fb257d90440f8d1153bfef809fd57ba","sha512":"97bfccae99e0e457c0f2f989ed68f001623325af2bd1dbd4195b9eb8891f330df1eab1845f771e41660fe56fa78632d9ef4d58518c968b15a856241a87cc6b7a","ssdeep":"192:83VeHsuCNktp0Naa4nlv9vWha0GoAoFnDoI6hFXSe1:8VhXklv9vWVed91","tlshash":"fdf1badab393f1760bf64443d07a81a1f1356e161c1b3028b1951de179a6a0bf6baf33","first_seen":"2026-08-10T18:28:17.885127Z","last_seen":"2026-08-10T18:48:38.358427Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/agent.esm-D4rbcBU3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:46.509Z","timestamp":1786387666509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/agent.esm-D4rbcBU3.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/api-client-BCvJLI2Y.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 102213\r\ncf-ray: a2750d380d62155c-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lyytAWfgNq:218,t24\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":304464,"size_decoded":103048,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3fb0c42cdbbbcba68f7ed5295f03e0d5","sha1":"8a4d67b435b44767930a86cd3807d15377fda22d","sha256":"43c60a2b5a1b7a57d3272dfa6af8cba670c45fcf5a98e569537b81ab1a111643","sha512":"5fbd6b848f0be895c2beafd466c6ff102ef938f5332abd457e077020eea50acf0b11b0c06454fe6ed4863bfb1f536b670768e41cabde911b1a1e70fb9f6b5a61","ssdeep":"6144:87MJYAOqa80GQZQTpQEvy+aNLgrm8BPFwxP6:87mYAr06iEK+6LgrZPFg6","tlshash":"755429cc769ab07e63436c29421f3127b32d3d23a40ea541d962dde53e39357a173ea8","first_seen":"2026-08-10T18:28:18.084021Z","last_seen":"2026-08-10T18:48:38.359963Z","times_seen":2,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/wallet-DDbO7IeU.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.314Z","timestamp":1786387668314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/wallet-DDbO7IeU.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 511\r\ncf-ray: a28f34057f678c0d-FRA\r\ncf-cache-status: HIT\r\nage: 2951026\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 06:58:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lrHSCqsVfP:21047,t15\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1456,"size_decoded":1352,"mime_type":"text/css","magic":"ASCII text, with very long lines (1455)","md5":"ec531092f6b7c33b85642a557d97e4c9","sha1":"e1d51fe668fbb289c32a24ed391f3238ca0dc442","sha256":"9a28967efbbb1763a3fa0acbba8410c78f8ea845d3d622965dd0af417321424b","sha512":"2f2ed599b3df119c38f2833ead3f3057260e63c969420628135488dfc000db8e7bfab0498ab18d7ba67e093ee8e016d8f39914c7e5bd9ef9f20aec05ee89bb93","ssdeep":"","tlshash":"5f31deda45a1b23f6f6abd3953ba34eee0045502df4308e6cd532250a6eaff20873204","first_seen":"2026-05-31T11:11:55.913011Z","last_seen":"2026-08-10T18:48:38.361635Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/circle-play-CQPTTQJg.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.630Z","timestamp":1786387668630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/circle-play-CQPTTQJg.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/landing-hero-footer-kEzyS1sY.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 367\r\ncf-ray: a28f2ea38bcf9c23-VIE\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:00:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1091,t43\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":497,"size_decoded":1226,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (448)","md5":"d7f08f12afe07b2d8f17cfd63c41a5bf","sha1":"7da35a8491930720cd8f516e41be95117dfa3aa8","sha256":"202387a3a52cb6a769eed59bd182c23e8f9ef141dc42292328a7bde1371632de","sha512":"f995f2eeb756564ba5c57773fee0541a768758b6a129756f4a0718c31b62789f626a53a01632e39db19df5fadbc74b0e3b46412565c640365522b9e8432573a5","ssdeep":"","tlshash":"b6f0955ee97c0cb9b41e4c8d6975918eb67bd2b1ef411504e1dc16b043115d05731bc0","first_seen":"2026-08-10T18:28:17.906974Z","last_seen":"2026-08-10T18:48:38.362696Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Header-CAWkZLh6.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.758Z","timestamp":1786387669758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Header-CAWkZLh6.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 3474\r\ncf-ray: a28f34056c36368b-FRA\r\ncf-cache-status: HIT\r\nage: 2791186\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 05:33:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47872,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16469,"size_decoded":4316,"mime_type":"text/css","magic":"ASCII text, with very long lines (16468)","md5":"c7d0fe79f4356d99456fa4e4a6d62d3f","sha1":"8b9c1c3ce334d2112595c92afc540cf9c1455a56","sha256":"8060da0e14d80d7f6f08be32b8319114120182d505801613530e15cab547b0ed","sha512":"b7150be76fda625562c0695a305a40ce47d256bec6ef2d00db9f433a1f294043d09f060d3845b9927adf8a7402f1722213f9ad888fb13615a72e88e0dc9ef9ee","ssdeep":"192:u8Wgvv2o2K5xqJZfOx0G/bW7js3P15tIuYxi8WgbCFqOoOQUfSsqkWjTFzWtirUQ:uZQoTjOoOQ7kykjF93jFH+","tlshash":"bb7275994a51b33eac7be42847fd635c52289506ef732adbf409712983c7bf1093314a","first_seen":"2026-05-31T11:11:56.074425Z","last_seen":"2026-08-10T18:48:38.364169Z","times_seen":8,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/TrustLanding-_OqOEVti.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.172Z","timestamp":1786387668172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/TrustLanding-_OqOEVti.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/TrustLanding-_OqOEVti.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/html-react-parser-DVW-WKYg.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.710Z","timestamp":1786387668710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/html-react-parser-DVW-WKYg.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/htmlParser-DUAwYev7.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 10344\r\ncf-ray: a28f2d210ad8360c-FRA\r\ncf-cache-status: HIT\r\nage: 6394\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47833,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30719,"size_decoded":11191,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20724)","md5":"77f394c52764398d2ac8933742eb1c42","sha1":"697bad69a35a6d02f760fd5d1905d99e30981e0d","sha256":"88d1c0b9e772f6d361671f53cc76e623f1a80abc91482f7440bc69e0e58e2fd8","sha512":"0d42130c9de1d91dc686612b79c93159cc9c3dbe8d38a4863bd79be2aa9d5a737080039b34c311c156adbe3e211d9913857343f3e0bca3e8c19ecf52c237cd6b","ssdeep":"384:2kNa3WsOYGbfTVpHwa0O5M25labammOxIW9BEJC7GSJpvCytYPmsT5diKA9prvQ0:2s/56baZOxOSJpvCyB3P7/1hc5wfFl","tlshash":"10d24c89b594b86203a3a5a980ef2a0ff335144d9c1c90b8f354d8e57db8d1a135bfbd","first_seen":"2026-08-10T18:28:18.287986Z","last_seen":"2026-08-10T18:48:38.365396Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useInfiniteQuery-DnVBCYdB.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.768Z","timestamp":1786387664768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useInfiniteQuery-DnVBCYdB.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 497\r\ncf-ray: a265b1b3cf3bd3a8-FRA\r\ncf-cache-status: HIT\r\nage: 357\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 05 Aug 2026 11:57:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: PiNrEFgXyV:600,t19\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1208,"size_decoded":1339,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1154)","md5":"b6aa9d0535f0a9a297c802b043e8765c","sha1":"2d431987ee049b78bf3d2538ea4250d19efa5a2e","sha256":"3156a7f89c73d3cca41fb39975a9e433d24523c9ae1c11ecbf3b2e3e8ea36445","sha512":"26036196f6e2117370858ca0f3ceae98b00037edc860bcc9e8bf46661c33f4cb4f334b605539fffc92a4e1aef72f51dd038d7c10ee93d5230fc4c084ab6d1177","ssdeep":"","tlshash":"dc2121ba7657ba07d0e7c25fe32d0705a10848637a3ed76de8188271e670d019309977","first_seen":"2026-08-10T18:28:18.135307Z","last_seen":"2026-08-10T18:48:38.367313Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/castle-C3nLZkCt.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.750Z","timestamp":1786387665750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/castle-C3nLZkCt.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/api-client-BCvJLI2Y.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 149076\r\ncf-ray: a28f2d0f3ba4360c-FRA\r\ncf-cache-status: HIT\r\nage: 6396\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47819,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":658226,"size_decoded":149923,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b2551c7e80fb6181ae2bdb464fa30cfe","sha1":"f95d2423ae30bede4a5b3a2dbcc94534ea7ba506","sha256":"9d407f11e8ec3085bb5faebd5948fefcd6a92509885e96aa2cc4cbce1dce3ef0","sha512":"6e373e72db30edee3c2844829cb809fef9cd1b11228e2045f5792a20bb738c41e71033600825e8f38d58af2546ba8c2e8a0add897a2006580754b67d41107649","ssdeep":"6144:I9Irukfiq1srMvohKzVTo7xamUuPxFxaaxaXKxa6xaOxaerox4:IGSrMvq7xam9xaaxa6xa6xaOxaero+","tlshash":"c0e461a83e0922bd7b89657b21af370b70e33af5702d5a54d1f1d8fb7da0c58122c958","first_seen":"2026-08-10T18:28:18.40587Z","last_seen":"2026-08-10T18:48:38.368812Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Combobox-zFBC6oRi.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.329Z","timestamp":1786387668329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Combobox-zFBC6oRi.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 616\r\ncf-ray: a28f34057fed382c-FRA\r\ncf-cache-status: HIT\r\nage: 2487331\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 10 Jul 2026 14:05:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:24541,t20\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1865,"size_decoded":1457,"mime_type":"text/css","magic":"ASCII text, with very long lines (1864)","md5":"5693aacfbdd626b1b7ebdc3ad8e1e469","sha1":"04379a88ade1a3cf9c7fa91af64aae6ebdc66082","sha256":"e4122589c3d071202b66a920b5116d439b65f8608a35cc21e19d1db9af0bdb35","sha512":"6a02f8745b3d3f167670819303453095a86383e21055e31a79ab6d91157d350d7b007a187dadf699311347f332393a9a1dc3cb6eea43f9408ba08c06f80dcb10","ssdeep":"","tlshash":"2d3131b8d261617cac0b511997c9faedc2b86a62d86786ebff95602c47c27f051c3602","first_seen":"2026-05-31T11:11:56.060398Z","last_seen":"2026-08-10T18:48:38.370273Z","times_seen":7,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/credit-card-BHevS6Uw.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.745Z","timestamp":1786387669745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/credit-card-BHevS6Uw.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 628\r\ncf-ray: a28f34056bca65aa-FRA\r\ncf-cache-status: HIT\r\nage: 2632216\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: zh-Hans\r\nlast-modified: Fri, 10 Jul 2026 14:05:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50071,t29\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2186,"size_decoded":1474,"mime_type":"text/css","magic":"ASCII text, with very long lines (2185)","md5":"d9ea22ecc2281752e002e44bd9e1f57e","sha1":"e4658e68c87bd197da4ff3deeab5911b5fbc5c34","sha256":"ba4fcf1f8057c232713b27a8497203e5921eed0faa49982cf2582ce9897e8a51","sha512":"ddcaddc3e9f8a6f9e739d2bca444cd6d0a743a691b873b884107cb1aa7dde73cd44085f61b658dfd282a283afce5464af2244ed537096846b812359acab4a65a","ssdeep":"","tlshash":"fd41cfe4a290b23e7cb7e6351ba8a6494410500cdd1b4bf4e11eb5d04ecabf15ae3b26","first_seen":"2026-05-04T21:33:06.327417Z","last_seen":"2026-08-10T18:48:38.371788Z","times_seen":13,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingFooter-Ckx_0eCA.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.661Z","timestamp":1786387664661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingFooter-Ckx_0eCA.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 1375\r\ncf-ray: a28f3405a9cbf51f-FRA\r\ncf-cache-status: HIT\r\nage: 2792792\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 08 Jul 2026 13:10:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: huhItYZPXB:2057,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5789,"size_decoded":2216,"mime_type":"text/css","magic":"ASCII text, with very long lines (5788)","md5":"374bcdd3eb8bde64073cb12020188f51","sha1":"1619ebbd16d0dc48748b4c0f32814e45231956fb","sha256":"d7d19b0e020720f423c3a776dea5cc7224f3c41dd375c40531596701f80934d4","sha512":"acf4f2890959c5352a1fc66d4dfd17d5d097574a42d32256b4625ee2a8202e5247e8b8cdb48293965d49e92e31bbaa214e72e784c74de774342a7bc89ea3727a","ssdeep":"96:dWq7GLBihLcMSn4Wd6vQ86ojiPhNMi/q4pbfjzXBEVQo:3GUhVwnGQfoCwi/qQREVQo","tlshash":"96c142856b50f73fec7f912d82be728c62986506ca6719e7f919a200cbc57f21932489","first_seen":"2026-05-31T11:11:56.092136Z","last_seen":"2026-08-10T18:48:38.32708Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Image-BeX-OFZZ.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.689Z","timestamp":1786387664689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Image-BeX-OFZZ.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 482\r\ncf-ray: a22600a10bcc037b-CDG\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Tue, 28 Jul 2026 18:33:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AKvTUNQbfW:5374,t22\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1424,"size_decoded":1308,"mime_type":"text/css","magic":"ASCII text, with very long lines (1423)","md5":"adbb99aadd1bf1a1ed5fca83f8d6c479","sha1":"f5fa3ab40c61fefec47fa5cc313371ed7e52968e","sha256":"d6e7b19c770dd46d760220dd73556c1d7d662a73225345286cbe5eb4ff0c79ba","sha512":"dead78e0e5444939133638cf5e05f4969b32bfdb0481ef66400299b4a890438c8652c7a785ada2b6122130e2fdb00e404b7d77767c8650fbd50b288847b3125e","ssdeep":"","tlshash":"5d21cb24e12896a88732ce0b6ab3b3a5403ba052ee41b302f28f651d4cc95406ee5769","first_seen":"2026-08-10T18:28:18.009822Z","last_seen":"2026-08-10T18:48:38.372774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/account-B270pzMv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.777Z","timestamp":1786387664777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/account-B270pzMv.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2844\r\ncf-ray: a28e93909f8a1e57-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CmAkpebaOs:28330,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10282,"size_decoded":3689,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (10237)","md5":"d351bef8e323555deca74d9a9c4084f1","sha1":"b19cfa055178547e76dfba849dea3db1c89ff007","sha256":"1a1b265a0ef85ab47d72dcb8073b8a7410aaede597b47562e576217e373f179e","sha512":"c1e8342ec1c949b2d061329aa8ed94c0268c9bd9c53ded3edbf2a39fe6a493b6bc510bfebe56b49895793296c001b72ddbe6e39155d87a24d3d97394efe579a7","ssdeep":"192:+yuK+gmfaX9TkdNtES0L00HcBPHiT/NQ7q:+yG1fk9Tk/tC34PUi7q","tlshash":"112213cb765371228f15cb7ab3bb890ea2785cc6cc5b4f18bfd6846d35540f8aa23944","first_seen":"2026-08-10T18:28:18.043838Z","last_seen":"2026-08-10T18:48:38.373998Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/subDays-d5cI155y.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.904Z","timestamp":1786387664904,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/subDays-d5cI155y.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 112\r\ncf-ray: a28f86351e57d9d8-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:3091,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126,"size_decoded":978,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"f37f826bb7a8da913db6fa0739ab5975","sha1":"21c0dd22218f7d40ceddb78cfd2f8e512d195f36","sha256":"5dbc182a3d25b094d55b8cf4e5064acfae7613d6692ae7c5d562b1187cf3c307","sha512":"4a777312c7b82a6029f400fbe0a83ec2b1b192cfa9eacd501d242f114aea25ac54b50ec3d640565ac8e5a71d98c1e28859215989c72fac3a025ba777ad48a850","ssdeep":"","tlshash":"2db02b09a0f563730214bc7440320443a26cf0c0e7400c40c001902001304b1a437d6d","first_seen":"2026-08-10T18:28:17.740126Z","last_seen":"2026-08-10T18:48:38.375266Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Shelf-BgyBos5-.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.180Z","timestamp":1786387668180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Shelf-BgyBos5-.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Shelf-BgyBos5-.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:48:03.697Z","timestamp":1786387683697,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:48:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/cart-E9QghCKW.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.773Z","timestamp":1786387664773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/cart-E9QghCKW.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4201\r\ncf-ray: a28f86323ba86eeb-CDG\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:59 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tWZjNIthpZ:45960,t19\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13063,"size_decoded":5060,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13021)","md5":"bfcb7cb33d8b2ad9f8f47cf07077b5ea","sha1":"0fa1d0415dc00a2dc1e21c517803a9fe9a5c3f4d","sha256":"c610571bab1c67bdaa95ab456cceb9a3c428e1f38b1afde135fdc73ce2c4885d","sha512":"510da253d7b81b5e6fb575d03745b327550ef6071b3d35b8dfd9b34e48c6819acb3d1d589fc5901c63e0e92f000990713cec036d9271c1072f6f576b783c2262","ssdeep":"384:GzaeX6FlZiWyIz7PuFbt7pXOHqd7cShfC:IXiJGF/XOHqFcR","tlshash":"c342e8cdb6ffa03a3aa90670d07b4696a33df847dc0d4464f21959a433805539ab3b3e","first_seen":"2026-08-10T18:28:17.811723Z","last_seen":"2026-08-10T18:48:38.377972Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/LandingReviews-Br_su98X.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.211Z","timestamp":1786387668211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingReviews-Br_su98X.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/LandingReviews-Br_su98X.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Product-DBz4EriG.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.599Z","timestamp":1786387668599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Product-DBz4EriG.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1504\r\ncf-ray: a28f86684fbc4d95-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:51736,t24\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5094,"size_decoded":2349,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (5049)","md5":"57c4d711045f7059cd7c796a4fdc4032","sha1":"2919e45d7a904584a141563747ea397376f2a554","sha256":"d4a96ef7547018315e31e6595e5b90b85f9d8f57f3d3c81dbdcf9c6b7e8d1866","sha512":"01953c5c5af0b142fb43cfa0156038ac3d8e2cffce81e465ca6000f627a35245e44e7902bc14219e82e7c61c6a421a4af51e1160c8437e4e5b19258c8f94fa2e","ssdeep":"96:PSAbT7WEQ4SiDOTLCq4EEq4z5ujQvV8+49SVmH8baSaIXrDP9+OvZ:pbmEQpJCqSqOEjAbkSXvd","tlshash":"4db15445c421e62ead270968c26e420eaa78419cd713cbfcf4d4a42c32815dcf71fec5","first_seen":"2026-08-10T18:28:18.386528Z","last_seen":"2026-08-10T18:48:38.382101Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/RewardsBanner-CMQZAMzD.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.856Z","timestamp":1786387664856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/RewardsBanner-CMQZAMzD.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 922\r\ncf-ray: a28f8634eeb0e866-FRA\r\ncf-cache-status: HIT\r\nage: 154\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:56,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3267,"size_decoded":1762,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (3216)","md5":"a7547d8b763b471713c5dd4987679f26","sha1":"4694d17e991ab887391b6b1813ba24e0d4f17dc2","sha256":"e14d4fcf3ee36e4985242c297c8822b619c59a77ca5dab79833a6e4b2f5aaa85","sha512":"a7d60ae1ec8cc6728a9ddcdea33087078d30d65e0f47e357aa00be08113e8724e16c3520c017ce5ca22f236d4601a483325f19ea9284bf5b932f6ea0ace79952","ssdeep":"","tlshash":"5e61420580b537e8fcb5589d413743be3eaf64a4931e49b0e288625f17282f17427fc6","first_seen":"2026-08-10T18:28:17.897172Z","last_seen":"2026-08-10T18:48:38.385394Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingReviews-H5yDzDxc.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.604Z","timestamp":1786387668604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingReviews-H5yDzDxc.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1335\r\ncf-ray: a28f8669a81535e5-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zqyodxIUSG:76,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2948,"size_decoded":2177,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2896)","md5":"1fef4fffcac0f9711f4dc7db868a8a5f","sha1":"92418f3d8537e8706a75f6da6438562ba08c4b2b","sha256":"6b18ce1b90855845fd0ed462a6ef129a05cc1496239012b8daa66cc7eb63c3ee","sha512":"f6cf87c1f9017aa650fa17cf32278cc2fc0f6b6b19e57e2e3769a61cbc20c9027ff30f42679952e7ab987cdf3c9a9592d03ceee000f871e6583eae503babbaea","ssdeep":"","tlshash":"5551642e91460df5b18e48d5c12e875db13e9889ab015ae8f1bc2c3922047f17e5abe6","first_seen":"2026-08-10T18:28:17.742877Z","last_seen":"2026-08-10T18:48:38.386693Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Divider-CYrs_lgC.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.185Z","timestamp":1786387668185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Divider-CYrs_lgC.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Divider-CYrs_lgC.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/newspaper-Cj6UA5qe.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.756Z","timestamp":1786387668756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/newspaper-Cj6UA5qe.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/icons-CBF0S1-q.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 284\r\ncf-ray: a28f2d1fee399a0e-AMS\r\ncf-cache-status: HIT\r\nage: 6398\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zVqkiAenNG:126,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":391,"size_decoded":1128,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (344)","md5":"2ee692ad5d1a6991d57efe2f31275629","sha1":"541e38499fe7c9bc63e57337d595027435efe350","sha256":"a2f0cb49f85685f2e0566acd5eb2933e5837c72b47a23aeb3427f06d8b1b8bcd","sha512":"f73c84c35e27ebab6482a138fae01c53614ca1f9652a6ae81c6331237216c7237d128ca4ebc323d6685d9d350b5cc116148c169983c2b553b69407f08a4d2f75","ssdeep":"","tlshash":"bce02b5e8fbc3afc09291895181ed81a575984ed729a8440b35d11fd1751051dc7ff22","first_seen":"2026-08-10T18:28:17.818239Z","last_seen":"2026-08-10T18:48:38.387752Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/parse-DAKSBcq5.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.611Z","timestamp":1786387664611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/parse-DAKSBcq5.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27887\r\ncf-ray: a2750d2a0b913a86-FRA\r\ncf-cache-status: HIT\r\nage: 195\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:51:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: JZBXrKgoTU:7545,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115820,"size_decoded":28756,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"36ab9f743fc1c43861b328e5d24f1c0c","sha1":"e551e5d733ab7d1251bd5e4cead081331b0af2c8","sha256":"bf203a02510b65b44cbb6826b795adcadd27d2f4845519646e3d957a3f24be70","sha512":"77a55d10c320adf289a00a1e0e9a72c3832f1fffa95dce7601da683aaef8371f2f7b2ca7a8b996564e6748657201b30c43c710fbb546669d7fc60403022beed9","ssdeep":"1536:4h0ttE45Z8jbOGTio27Hi8zLb1pLMlABEJO5RkeiALYt3hMENfvwax7OzT:C03E4v8jcJ1xM5LrALYFPwi7e","tlshash":"68b343fbba80a3b7b6f53a188615424c8a4ecc5eec8d180d5ee6f89b5d7051434bc71e","first_seen":"2026-08-10T18:28:18.015703Z","last_seen":"2026-08-10T18:48:38.390028Z","times_seen":2,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":95,"receive":57,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SearchInput-BABb5V-3.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.683Z","timestamp":1786387664683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SearchInput-BABb5V-3.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 432\r\ncf-ray: a28f3405dd869c23-VIE\r\ncf-cache-status: HIT\r\nage: 2697207\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 10 Jul 2026 05:39:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1343,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1341,"size_decoded":1271,"mime_type":"text/css","magic":"ASCII text, with very long lines (1340)","md5":"cc9604322fdf6ee8306e2271e141d0fc","sha1":"dd1b15b258fef5af366cc91f71da51bbb3d9e480","sha256":"0a0b19c8d637b6fa9da8c488945e33fb7258b49a5facdf6253cee6ecc57b6691","sha512":"05c4a110811b8857659dcc5ad6195797c1ca2baee239e17043446ddf090753bfad84c2b44ca8862557c51e16050e97e26381f7e59a1d821e2097f4e73b483597","ssdeep":"","tlshash":"0321444ae091e13c5a22a92dc2de72597a2952d7ded30fc3e419a00cc1d3bf412f6503","first_seen":"2026-05-04T21:33:06.754387Z","last_seen":"2026-08-10T18:48:38.39235Z","times_seen":11,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-D4ftO2sO.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.800Z","timestamp":1786387664800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-D4ftO2sO.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1707\r\ncf-ray: a28e9390d97614c6-CDG\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tNeegAMkVR:80,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4944,"size_decoded":2548,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4902)","md5":"06c6483b0519501d311c03bfddd023cc","sha1":"00bdff061f7ebc0baf3c990235256749c6180e85","sha256":"3734d072d2364078d82dec0c3b6f05434c04897e8d1e046191a6c341c76937cd","sha512":"56ec66358a7a1fc98a7ef954817c470fd499f331b2940fdceb8f7ea54ecd2357732046b55a2c208f771a0e979e180416313ce3bb6a8d1d82241433c747d6ab2b","ssdeep":"96:nkRNWMhMOMcaM1M9Rmofm9M06Ex8ez8muRYdCujKII0fmiGWrBhrWGnrHtQrzclf:nk2cZ6exn9zZOXXMfjzHGW1haGnrtQf2","tlshash":"14a184de2021f5f8aebeaca89617543d1b0a99cd440e0954b09f4e2017ee290f293f97","first_seen":"2026-08-10T18:28:18.276784Z","last_seen":"2026-08-10T18:48:38.394597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Spinner-DtVXxDc6.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.286Z","timestamp":1786387668286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Spinner-DtVXxDc6.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 463\r\ncf-ray: a28f34054b329b98-FRA\r\ncf-cache-status: HIT\r\nage: 5101600\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: ko\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:9283,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1461,"size_decoded":1302,"mime_type":"text/css","magic":"ASCII text, with very long lines (1460)","md5":"ed7eea1c7889ba338f0d86a547f4544c","sha1":"96e4cfc3e46a6f65f9a8db1c4d35e8a370b9991b","sha256":"d9d8224bc06681460d1a432c2bdf313c196702628e97b7d338bf0372cdd3e79a","sha512":"edc1aa034ef5fc6b1696e4f2d9d977bb0cd9deca586f59e96764064ad06c1ee5ed09792ce36b950a0e26aff6c3343dca5c715033177e0febc6c6ec1101ff8163","ssdeep":"","tlshash":"2931d0f8c94069255a231b3312cacc549c70cd43a9320cbdb278356f41a97452377b2f","first_seen":"2026-04-30T03:12:06.027267Z","last_seen":"2026-08-10T18:48:38.39655Z","times_seen":14,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/uid-B_EEBDq_.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.937Z","timestamp":1786387664937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/uid-B_EEBDq_.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 173\r\ncf-ray: a2750d2f8e139f1c-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bcBdKSbwcw:6655,t28\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":217,"size_decoded":1006,"mime_type":"text/javascript","magic":"ASCII text","md5":"1b12285db3666dcbf6306f1633480fc7","sha1":"96f072b9b1923cac034a35e6e0c17014817b52d8","sha256":"79466084b9855b947bcb0f19c3e8dfbcef6f59c93fb930928310ba95175f6c83","sha512":"cb580dcf8ab98ceb2af8228448b73070e7d9755644e9044307a094b418aa409d13125f4b5a72b75714476027ceffe3a73a13ad1f38d1e6d31ca64d2c5189c31a","ssdeep":"","tlshash":"6bd0a7467aba25bb08510c75078b9a4959585bd0d03707a6d09194993920ae4257bd41","first_seen":"2026-07-04T02:32:37.309243Z","last_seen":"2026-08-10T18:48:38.397865Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CookieConsentOptions-Czi7qhij.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:50.368Z","timestamp":1786387670368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CookieConsentOptions-Czi7qhij.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/CookieConsent-BfxCeDYs.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 577\r\ncf-ray: a28f86773a9b77d1-FRA\r\ncf-cache-status: HIT\r\nage: 141\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:277,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1678,"size_decoded":1419,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1620)","md5":"f4d31ab9de3f870633ef0090841da236","sha1":"a9fdb65e6ac3ed60a7e84abcc702c3b709382c3c","sha256":"184ee77b9033cbe76816f59060fe433eff82a461463f6a643febc73966bba6b7","sha512":"b34c9db2b1cf26fa8c158f1be16b2f99a79551de01127cb1ee0346811d33d6fa5c1164b34d7a8a45bb2c9fa1c3b49f881473c7c331034411fc8243459b7bc828","ssdeep":"","tlshash":"0c310f2b944422f2acdb0abed8e7908e9335d3cb614d01e29556188c2e423685fe3fe1","first_seen":"2026-08-10T18:48:38.40205Z","last_seen":"2026-08-10T18:48:38.40205Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/product/apple-norway","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:51.913Z","timestamp":1786387671913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/product/apple-norway HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nX-Rel: cbbcd5c33ba171317476fbc5fbe9b33976e00d1e\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 52119\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a2912be5e99e8824-PRG\r\ncontent-language: en\r\netag: W/\"cb97-Yac498YLukywCDuCwj6WWMPYNW8\"\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-cfw: oPWIxLJoxQ:63,t79\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-robots-tag: noindex, noindex\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52119,"size_decoded":52857,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"becd2dfd4f459e074a1af2ae728e4ba7","sha1":"61a738f7c60bba4cb0083b82c23e9658c3d8356f","sha256":"7c30e14a305dba17de57b1f753192c037a5b53244ade2712c16a49f521f6ae09","sha512":"0af4478716e5cfe01821358083f14146d0a1554f7b43d69ac5e124264108a15d184b4bbd9b97ee5528507247ce4d02157801d1ea5755276b1573a99efd4fce50","ssdeep":"1536:aAJ0yLt0lsjPGnzGwtIVw+kINjXInY+gZPxc2TYbeHjGHwE:xJlLtrj44HkujYnYXZpc2TYBwE","tlshash":"e73329dd96c408f8c7b012e45d677f682c7d20bba6c5ced6f09d8e94a0f42a7227590b","first_seen":"2026-08-10T18:28:18.352298Z","last_seen":"2026-08-10T18:48:38.403891Z","times_seen":2,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Combobox-zFBC6oRi.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.656Z","timestamp":1786387664656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Combobox-zFBC6oRi.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 616\r\ncf-ray: a28f34057fed382c-FRA\r\ncf-cache-status: HIT\r\nage: 2487331\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 10 Jul 2026 14:05:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:24541,t20\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1865,"size_decoded":1457,"mime_type":"text/css","magic":"ASCII text, with very long lines (1864)","md5":"5693aacfbdd626b1b7ebdc3ad8e1e469","sha1":"04379a88ade1a3cf9c7fa91af64aae6ebdc66082","sha256":"e4122589c3d071202b66a920b5116d439b65f8608a35cc21e19d1db9af0bdb35","sha512":"6a02f8745b3d3f167670819303453095a86383e21055e31a79ab6d91157d350d7b007a187dadf699311347f332393a9a1dc3cb6eea43f9408ba08c06f80dcb10","ssdeep":"","tlshash":"2d3131b8d261617cac0b511997c9faedc2b86a62d86786ebff95602c47c27f051c3602","first_seen":"2026-05-31T11:11:56.060398Z","last_seen":"2026-08-10T18:48:38.370273Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/classPrivateMethodInitSpec-dEFXBvX6.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.766Z","timestamp":1786387664766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/classPrivateMethodInitSpec-dEFXBvX6.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 263\r\ncf-ray: a28f3413e87f4d3a-FRA\r\ncf-cache-status: HIT\r\nage: 2371904\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 13 Jul 2026 21:52:42 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50081,t25\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":448,"size_decoded":1113,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (448), with no line terminators","md5":"a466c7bedaa3c5fca782618d4c78ac58","sha1":"63356458d633e628ad40c4b69e225c8ed04b1d83","sha256":"8b8f87752910e1f56a948a20a87a059b50ab11adaa7069df87aebf9480422d06","sha512":"57f943f545804b8cb35099520ceda0065125cddf7d218cd12014e21dc0261030b5fb11616010c500c295d1938e8b3689d99f037907be2b5b03e11ce17948c789","ssdeep":"","tlshash":"caf0278d79c4f112973b01368567400fe730a8992d1a9f005184e5d33e3583947abc1c","first_seen":"2026-07-16T00:57:04.798202Z","last_seen":"2026-08-10T19:05:30.017233Z","times_seen":8,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/utils-VtQLBZfl.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.900Z","timestamp":1786387664900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/utils-VtQLBZfl.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1336\r\ncf-ray: a28f86353892dbdb-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:3092,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3128,"size_decoded":2180,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (3085)","md5":"adb4166e31014dbd168bbf509a3ef0cc","sha1":"7b8ecce8fec2975c08b30f8b8d6f52c9f394b72a","sha256":"3e47b381ca75e7a41350498f5f9167bc1afba0e47b3f8a8dd8492fc6074b21f9","sha512":"256f78855fe53dda4d7f752f6d86a7f792e26b094351915e6fec2ef9a4220007afee4e6ea337aa42d834c23491443f514735fe6e13406dc853e6c61bc53ca882","ssdeep":"","tlshash":"415152df74f5f0b0731a55f1c0b7021bb23cd8641c8d0224f19665553b3966ad2ebe29","first_seen":"2026-08-10T18:28:18.297337Z","last_seen":"2026-08-10T18:48:38.409624Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/index.module-Bvu9PZtf.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.927Z","timestamp":1786387664927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/index.module-Bvu9PZtf.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5670\r\ncf-ray: a265b1b6d8c230e4-FRA\r\ncf-cache-status: HIT\r\nage: 346\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 05 Aug 2026 11:57:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: nvyhJLlnfg:10866,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17030,"size_decoded":6514,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16980)","md5":"8bdaab8a27619efcc9649716f3ffa494","sha1":"23f06d8353831a4bd6b3c9689d5b3e95b889ac6d","sha256":"5ed903a85a990b6ebcc870d7f6d66f47ab54e1af683c70cca45328d5ce41cfb6","sha512":"1b0b4bb095ca6d1ad3bd027a7a6006f17ef4d9ca075908f533053cf7b704ee351da6723d5ad979f3a3700ebe353ace03f8b5b3413c4463259a9fc13d6dafd9bf","ssdeep":"384:oF3BeXNL88/wOCGKiusgw13wAtJW0P/Wcs4U8qpqg7qzuVmDP+DT:uBeXJ8XOjPdqdjVmDP+H","tlshash":"9972d8e8b1d2f0724b827894813fe409f2b72858ed0d64a9f245c0e16d798499677fbd","first_seen":"2026-08-10T18:28:17.707855Z","last_seen":"2026-08-10T18:48:38.411222Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SearchInput-BABb5V-3.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.318Z","timestamp":1786387668318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SearchInput-BABb5V-3.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 432\r\ncf-ray: a28f3405dd869c23-VIE\r\ncf-cache-status: HIT\r\nage: 2697207\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 10 Jul 2026 05:39:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1343,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1341,"size_decoded":1271,"mime_type":"text/css","magic":"ASCII text, with very long lines (1340)","md5":"cc9604322fdf6ee8306e2271e141d0fc","sha1":"dd1b15b258fef5af366cc91f71da51bbb3d9e480","sha256":"0a0b19c8d637b6fa9da8c488945e33fb7258b49a5facdf6253cee6ecc57b6691","sha512":"05c4a110811b8857659dcc5ad6195797c1ca2baee239e17043446ddf090753bfad84c2b44ca8862557c51e16050e97e26381f7e59a1d821e2097f4e73b483597","ssdeep":"","tlshash":"0321444ae091e13c5a22a92dc2de72597a2952d7ded30fc3e419a00cc1d3bf412f6503","first_seen":"2026-05-04T21:33:06.754387Z","last_seen":"2026-08-10T18:48:38.39235Z","times_seen":11,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SupportedCountriesModal-DCJdmF7S.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.320Z","timestamp":1786387668320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SupportedCountriesModal-DCJdmF7S.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 277\r\ncf-ray: a28f3405dbc2dbea-FRA\r\ncf-cache-status: HIT\r\nage: 1063533\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Tue, 28 Jul 2026 22:15:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:1462,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":421,"size_decoded":1119,"mime_type":"text/css","magic":"ASCII text, with very long lines (420)","md5":"e3a15eccb89ffec5b43898372f759752","sha1":"fcac43debdb7faeb492a55213d48f76229d06367","sha256":"0baf30a6cb3e86b9e8c934cba542e14c2f631b2291fd158b165df78d5553d02e","sha512":"f06838ebbb3f35f82b20499d2620dbbb8c482d4e412ba8d2f79e6ef1c27e1cabd7aea90172cad4c3095b84777ad6895468ec209816101c9084a51a082fa42a8e","ssdeep":"","tlshash":"a9e05c99e14c633d9c7b9316229f989e30408a26ce1300e3fa94121487c6ba15c62058","first_seen":"2026-05-31T11:11:55.922006Z","last_seen":"2026-08-10T18:48:38.413575Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Canonical-DLEBP2tb.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.531Z","timestamp":1786387668531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Canonical-DLEBP2tb.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/landing-EzeWBxTg.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 277\r\ncf-ray: a28f2d1d8e34d5a8-CDG\r\ncf-cache-status: HIT\r\nage: 6389\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:13:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: iliVLMVHfv:31054,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":346,"size_decoded":1147,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"2d2f9bd620c98da4fd12cd1bbf34994d","sha1":"616e1e6f6a8d6c094def50af6999a003ff31b6b1","sha256":"f58a540f820525ad3010e29f83c7323b4a991546d8aa8351b185791f81eb8d2f","sha512":"b0c0cc5afab3e8b2a7e288a76d8c3545d6c6500da79303c3b30f21a8747a5a685278dc25f5db88ac3b37877662db9fa008e2171b78f236f47cebaf1b1cacafa8","ssdeep":"","tlshash":"efe0689fc46528e06d080f84a066274eab2ee1d0ce480400a21c25e021b00f1530df96","first_seen":"2026-08-10T18:28:17.916042Z","last_seen":"2026-08-10T18:48:38.414542Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ProductTag-Bo2tEgbH.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.600Z","timestamp":1786387668600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ProductTag-Bo2tEgbH.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1274\r\ncf-ray: a28f86696b149b98-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:10085,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3623,"size_decoded":2143,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3575)","md5":"7e2246a705ed2b09f8c0412521533465","sha1":"d26041bb13ed1c8bbbb9c363973467fbd2691337","sha256":"0f5b510f5a232917f874d150d5569571cb100a7f8b443f0de68a759a8e6800c4","sha512":"0a1068d779021ba73b5ea35bee9d8913b35d61ad1a91539a586558155184217d7515e5b7b41cd49e1c83d9e0030cf7df1122c7a83fe4097761421d89f08985b8","ssdeep":"","tlshash":"b77155cef9907974a94f4cb8906c023a733ed1c953190bf0d6b52978222c6f5e436a98","first_seen":"2026-08-10T18:28:18.306296Z","last_seen":"2026-08-10T18:48:38.418597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-C9dqGbYS.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.801Z","timestamp":1786387664801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-C9dqGbYS.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 9942\r\ncf-ray: a28e9390fafdb270-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:7748,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26631,"size_decoded":10785,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26589)","md5":"d17184adf0f0749d4f241d1df49db7ca","sha1":"f7678e962487e2ea83c4d0becf4a363a5a50ca72","sha256":"eb6f8580323a764ccd86c9b8b5acd2f6c131972db8de701df6d2a919ba9228cd","sha512":"18cd426ddfd3ce4571125cda537d8ab7b919dacb16d93fbc96664af43dd3547dab1e04979b7f3fa43285502afc5261773afadb3a27b67d2fbd1a2c945c96f800","ssdeep":"768:DeFXZv8knJImy4aBVXRrK5I91zyU43HBXEk0Hw8Lag0YRFNlT/B:6XR8kJIZ4SVXRrK5OaHB0kSwuagb","tlshash":"63c21bda3296b124e35e821bd06f420eb33791b0564e6028b32c969d3871d9197b7f7f","first_seen":"2026-08-10T18:28:17.774903Z","last_seen":"2026-08-10T18:48:38.420155Z","times_seen":2,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/withTranslation-E2xmPg6D.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.930Z","timestamp":1786387664930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/withTranslation-E2xmPg6D.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 391\r\ncf-ray: a28e9454cccbfb4e-FRA\r\ncf-cache-status: HIT\r\nage: 143\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:7755,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":569,"size_decoded":1236,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (516)","md5":"023e2747498855b650e2435d4a5a887a","sha1":"8b7fb3bf2dd8e93ba559d5523f677974de84191f","sha256":"5f7310c5e37f0cf2d91a7bbc8e5f9c772bd5ba05b966bdcb4f37641b5be63e1b","sha512":"19b60d8a04f9412902a3156f705e1e4f8f8e014b73de5b919f6bcdb0be4c447c13e307b2cca435b1e26995a5bbb0367851247d0fc41c90ea3a879eeb74ed2cdf","ssdeep":"","tlshash":"dff0e10ae4e3996640cf004785bf928172e38d5a4c36200db40d856d5736a828636b05","first_seen":"2026-08-10T18:28:18.309418Z","last_seen":"2026-08-10T18:48:38.421561Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Search-d1OLgKSE.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.589Z","timestamp":1786387668589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Search-d1OLgKSE.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6553\r\ncf-ray: a28f865fc943a93b-FRA\r\ncf-cache-status: HIT\r\nage: 149\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:10078,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19536,"size_decoded":7421,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19488)","md5":"4447d57a881ed0d42c4b44cead57b44a","sha1":"2e2536d48c29acc3258ddd5c0e7c56bdf1b099cb","sha256":"55428ffb79d077e7bff1f49f5edfc4dad3999f5aced2e1c426883afff09d4ba2","sha512":"18f0a4a00b56396a4bb5beb3401a19f2605ccd7172d046eb5850923edcbe40d2a14887f022f12c1cf439cdda23f20f63404e758661865f999b29c94d5c4e99b2","ssdeep":"384:vobZAxsiUs6SWFQu4W9aNsXn0IOL9KI8jq:cAs2i3b9aNsXjGO+","tlshash":"3992f90ed0ac7075b83b09c85427a51ff56ec099ca0928e8f9e22d4421d5fd872affd9","first_seen":"2026-08-10T18:28:18.042239Z","last_seen":"2026-08-10T18:48:38.422707Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/htmlParser-DUAwYev7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.601Z","timestamp":1786387668601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/htmlParser-DUAwYev7.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 186\r\ncf-ray: a28f2d221b79371c-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 516\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 12:51:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jeySHQyKxh:5,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255,"size_decoded":1050,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"9a58a8116893c97fedc7bba633e95f7f","sha1":"35ef9cc27c0d64dc4a024a7715dc5a6229ebcb2b","sha256":"124bdfd87af4255db46f8f1ad17dd42dd486eab54b919370ff4084fb8f4a07f7","sha512":"d1422a16b070136e6d6042403dd9aabfccfb28ac1023db78c8ce54f77a366e4bd00efc3e53fbbfea176867dfa6c13f656ac801e798cace09ebfe0bf7c1eb4af6","ssdeep":"","tlshash":"d6d0c28db8e060b15a020819c0da18aae1a5b0a4866a42508240c1b1bab18688969f24","first_seen":"2026-08-10T18:28:18.115999Z","last_seen":"2026-08-10T18:48:38.424661Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/AcceptedPaymentMethods-BdIQ9c3j.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.850Z","timestamp":1786387668850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/AcceptedPaymentMethods-BdIQ9c3j.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/AcceptedPaymentMethods-BdIQ9c3j.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Counter-DFNSvKxZ.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.746Z","timestamp":1786387669746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Counter-DFNSvKxZ.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 375\r\ncf-ray: a28f34055915f51f-FRA\r\ncf-cache-status: HIT\r\nage: 2954290\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 06:58:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: huhItYZPXB:2056,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1120,"size_decoded":1215,"mime_type":"text/css","magic":"ASCII text, with very long lines (1119)","md5":"f144778685f3219e7ffd6ec0caf7110f","sha1":"a98b88f84728b9379a23b8d05546cb897657eea6","sha256":"10f2e8c348538fbe73ee385404a7afcdf47024cde1869d8618ac737b07606e9f","sha512":"c000eb2b1339cb644cbd7cda09731009f634b43073dc8e10ee97a85eddb3c3fb19fc06b3d07d29710c807f34b47d4ab631ed5834f864ab16dc2d53776253e2b1","ssdeep":"","tlshash":"b321ebf96292f33e7827943067fda24e51516213cd034babf867b0a848c7ef31632848","first_seen":"2026-04-30T03:12:05.969292Z","last_seen":"2026-08-10T18:48:38.425996Z","times_seen":14,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu.i.posthog.com/s/","fqdn":"eu.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"18.158.90.132","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:48:05.749Z","timestamp":1786387685749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:B5:42:B0:EF:B1:77:97:C3:FF:B8:89:87:B5:A3:F4:32:08:FE:27","sha256":"BF:C3:D3:B1:0B:53:D4:58:C2:A8:1F:37:4C:D0:F6:A2:F8:E0:1E:BB:05:FA:53:84:BA:CC:BF:1D:78:D1:F7:A5"}}},"request":{"raw":"POST /s/ HTTP/1.1\r\nHost: eu.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: text/plain\r\nContent-Length: 1106\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1652,"data":"\u001f‹\b\u0000\u0000\u0000\u0000\u0000\u0000\u0003íU[k\u001bG\u0014þ+í\u0012\u00026Zkfï+0m“Æ8¾ÅNmÙ82bvvVZ[ÚÙÎÌʖ]¿õ¥vZJc¿”¾ö¡!\u0004êЧ\u003e\u0014vÿXgVr$Uv\u001a’\u0012\n-\u0002±ó9÷9ç{r¢eY\u001cj5\r@?\"!\u0000zh\u0007ŽîZ¡§£Ð—GÃóA|7r\r­¢‘\u001eI„¼~‡'(åm*$–2š\u0012\u0026bµÚÉHÒ\fúBA®çVÆÐ\u0010\t¤Õžœh¢Ÿ\u0012­æT´\u0001r¢¥¬\u0015'Ò8c‡$¨\u0026D\u001cRvð)T.P¿CQ¨n1òeF¸à¥\u0004u¥\r­-DÊkÕj\u0010\u000b¢ã9L»U”ÆU„1Í\u0012Á«\u00181QÝï\u001d{z,’-ïèÀ·¶w–w:«î\u0012ßý\u0004gŒ‘\u0004÷ç\u001fl=¾Û¡\u0018u\u0016b$îO (ie¨EæIr·´ÉúókTAÔçf™Š\fÓŒa\"a.¤ÇÍXE\u0007]\bm™eƐˆ©Ìς\u0015-Nb!}P6TˆÀm©—#±HÓuF\u0005Å´£rSeW… ì\u000beT«Šô\u0014ƌ`1\u003cHÂò\\\u001a\u001cŠ¯# ]\u0014'+”\u001edéí’ÒÀ\u0010Ç4IF^\u0026Áñ{œÈ\u0012’û\u0003ÌqRaر1ÐS OiÂÉ\bµí\u0011zmܖÏC0”ðHf\u001f\u001fËJY®­ŠŽiHÂ{4ì\u000fP¨ÐÜ„Ž9\u0012™|5\u0006\u0000e\u000eBvnX|”¦\u0018—Ý©îsÙ\"•\u0011ë\u0011\u0026\u001b\u0018'-ùÒö”Ïðu?Ë°äá\u0011‹Ë\u0017\u000b]Ï1=×qLÛ\u0003\u0003‘|\u0000Ýt$ñ€ãÛ§{§§·H]Ó?ÝScB8—a4'gÒ'Ä×]'ĺ‡\rS‡¡í@׀Ð\"HÆzç0NBzø·:®…,\u001bûØR:8·åœ\r\u000fM™./Ÿ§\u0006ç,hÏ©±\u001bMm›r5öc\u0003\u0026ł\u001e\u0010¥¶qó¨»øÙ½ããºÓ[\u000f\"îûûÛÞÂÂîÖ\u001a©·ÖÛÛK|-óûËÝþj·Þçʲì@\u0014·š!‰PÖQÓ¬\u0019Àpt`ë\u0026ò0æ\"N°˜J*Œ\u0006IùGtˆ=;@\u0000\u0004nˆ5YZ\u001aEœÈ8M šÌe‡›H¼6íé\u0010lB¯fy5`Ϲ–±+u¦\u0017 \u0001ž+\u0017 „º\u001fP7\u001cìÚ¦ƒ\u0002Ãpßm\u0001Bà9o؀æh\u0003\u000eׇš_!\u0017ªJ#\u0003\u0000Fùy#P_\u0000¼Å¿™Ÿç/ëÅÙÊF~eØ°¸Ü˜].žÎ¬nåW\r«¸Ì\u0005ù«â\u0002Âü·Íüyþm©d\u000f\f\u0014/óoò?Šï?ž¶-\u0013EB°8ÈʬÞ;2\u0017\u0014Ï6–*33ò\u003c«?ÔëùUþ¼\u003e;—ÿR\u003c}8ˆ\t.åg¥\u001b£x•Ÿ\u0015ϊ«üœå—ù‹Š\u0017ùOÅ×ù\u000fÅÅbƒí\u0015çÅE£±šÿ\\ü¨~;#—\u0010—ÿà«­Ïö‘.í½O:ߍWo\u0026ÿ}¥ÁÊoãæ\u0002†á\u0007òuË¢1m ß\"î\r†Â’\u0013QÎÀ…‹\r\u0000¡3ÁÅà\u0003sñu\u0004Ó\\|ƒ¤40Ä'¹x\u0012\u001c¿w\u000b\u0017\u000f¥“\\¬@Š‹%j;áâ!öoãâë°næb׿e\bÞÈŦkzÿsñ?Æņ\tߎŠ÷þ\u0004k,x™\f\u0000\u0000"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 18:48:06 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://biterfz.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 406\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":421,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-08-11T01:03:22.2501Z","times_seen":44155,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/AcceptedPaymentMethods-BdIQ9c3j.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.663Z","timestamp":1786387664663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/AcceptedPaymentMethods-BdIQ9c3j.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 329\r\ncf-ray: a28f3405ae1f5db9-VIE\r\ncf-cache-status: HIT\r\nage: 2866679\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 08 Jul 2026 08:01:37 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1342,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":610,"size_decoded":1170,"mime_type":"text/css","magic":"ASCII text, with very long lines (609)","md5":"8e783bc8cf1104ea6fcabba86050f517","sha1":"789e202b2e1614f31929025159c6b851fd082076","sha256":"3c62bbb4b3bc30b22ad1b9ce4d105cfb7b5f570860726255bb88b1cef183a771","sha512":"d26536ce1c51d3d7276bcc59fc1c38f640020424a9ed84040085a2bf75225164cb6aedd8588a65bc7e032cbbbf08e2677ef4aaae6923535300977798ccfe38ff","ssdeep":"","tlshash":"c8f07da59e01593cde2be3192eae920d608861028a6358d2f4466215c8cbbef0c6118d","first_seen":"2026-04-30T03:12:06.039991Z","last_seen":"2026-08-10T18:48:38.434403Z","times_seen":14,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Divider-CYrs_lgC.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.664Z","timestamp":1786387664664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Divider-CYrs_lgC.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 156\r\ncf-ray: a28f3405fb0fa031-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 2974643\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 06 Jul 2026 14:38:42 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DGbcMwnUOy:1,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244,"size_decoded":993,"mime_type":"text/css","magic":"ASCII text","md5":"06785e3ae957fb1446f0ed31a6369462","sha1":"bd5b5f103c0d918f745a66cb2cdd3d24d3d02cff","sha256":"02ef7c2b2ca8a4f31f5e75edb7b837d0a32ea986582ee1dc7c4f9311463ab497","sha512":"c889568f240cda8e2a3c5bc577e12cd9671a511392883f546efecf49355d30e51788df3c4c938362881ae2907dbb1a99fb5cf5b61506996e8e65682d0c4e528e","ssdeep":"","tlshash":"8cd0a77c32c4b2bdde138715779eecc7b1876b414585c093f8812208d58e7e46d250f8","first_seen":"2026-04-30T03:12:05.985315Z","last_seen":"2026-08-10T18:48:38.43567Z","times_seen":14,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingSections-DrshC6nU.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.671Z","timestamp":1786387664671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingSections-DrshC6nU.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 7434\r\ncf-ray: a1e3a6ac3e96974b-FRA\r\ncf-cache-status: MISS\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 20 Jul 2026 17:20:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CdMlheUDhx:19329,t53\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40446,"size_decoded":8263,"mime_type":"text/css","magic":"ASCII text, with very long lines (40445)","md5":"d96ea6dc6d1b6213cb71a575d3ca0727","sha1":"7f8579d7081fbe33127cc9f778e25ecc31445eb6","sha256":"7b4945dea3f415d36dfd4cce3dab160a395a6a4e63f266f8033032bc2e79ca79","sha512":"d74ff7f58f03be42fe1a51dfdc6ddb6cc843ff207c20d92780e100ec9d8f2a6404818b386d2e51a6d267cbac8a06b899bdc68f974cbf3f0715a657e2a3a2fb5c","ssdeep":"384:A15PHhHo1MAEZxzol5Xs2J6zGqGwlTDR1LpkVMtRV45uSoWJuAl57:APPu1M+s5TDRzkVMtXIoBg7","tlshash":"390385e51a11b23c9c7ff52493fe636c52286405ef9b16eea415722607cbbf20d3364a","first_seen":"2026-08-10T18:28:18.374704Z","last_seen":"2026-08-10T18:48:38.438139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/logo-DZWN1Rh9.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.842Z","timestamp":1786387664842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/logo-DZWN1Rh9.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 185\r\ncf-ray: a28e93905dff9bf7-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 131\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CCmZTzPoOp:5,t5\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":226,"size_decoded":1048,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"caf879273a1bd608e8ab600c1c46af91","sha1":"8b1a8792bcb4ccbb5f9cba272b697e39e8eaa429","sha256":"5236ce1bdf62139fe10719504b4ec8dc001c2c007c67786eadce67efd6ffab47","sha512":"b517a9ac50d603c1300ba4bd6ed5dafae71acbedd6c1757d1a353ee0670f516893c50b009caafa5c9024e9fac5494e0b01f039a36acc7513c3525addab4b9778","ssdeep":"","tlshash":"90d0a72fccf00e76d41c0ddee02f549e7724905983151565e94c217052a55c1e675f96","first_seen":"2026-08-10T18:28:18.036759Z","last_seen":"2026-08-10T18:48:38.441083Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/hideForUtm-FWI9JG48.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.866Z","timestamp":1786387664866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/hideForUtm-FWI9JG48.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 279\r\ncf-ray: a28e93d22c539274-FRA\r\ncf-cache-status: HIT\r\nage: 123\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:316,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":328,"size_decoded":1146,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"5c30c03bbef5ada3ada31af943927277","sha1":"74983ccf8529f10dc1131f0e67d886aa814b6329","sha256":"7c4fd93b485523bbf41d2e0bbf3275b32cb964548de10e8e383234ae08268fb4","sha512":"6dd7ee9cd557b86b2caab80ed16443b26e1d8ee30618b81e68168b24309a400ec5a949d7a6181ab7208ba0bd5e23947b62af02e86f5108d5df46a1e43351fe54","ssdeep":"","tlshash":"fae02dbbf0be34a039e300b4927b0b00e03b90508a6ac8f1b240901016bbdf3e23ec4d","first_seen":"2026-08-10T18:28:17.823037Z","last_seen":"2026-08-10T18:48:38.443002Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/react-router-navigate-Dyd-ATIK.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.915Z","timestamp":1786387664915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/react-router-navigate-Dyd-ATIK.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 98\r\ncf-ray: a2750d31cf377185-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AGbklTsBFU:7792,t30\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105,"size_decoded":930,"mime_type":"text/javascript","magic":"ASCII text","md5":"43208d4301dff7d4a49f17269eb519f5","sha1":"b4e6665cd28afc6ec2a32b81ac29f127df97e152","sha256":"ae2a1bd2bef5238418ebe988d5f8dd1df3d3b796ff3565dc6fc4797a5754ba7d","sha512":"e489de098299e809277448b228201a01bf5940cbdcaaf7793f705e6bd44b28579846a5ac18fe2cc28c97f88a0736e4bb521fdcb6f8aac0d6de7f8057ad95cf88","ssdeep":"","tlshash":"90b0125fdcf526f1a4320c3ec1971486963ef08fe32701c420c6d1901563cf89838c65","first_seen":"2026-08-10T18:28:18.303005Z","last_seen":"2026-08-10T18:48:38.444832Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ethereum-logo-ZF3L47fk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.965Z","timestamp":1786387664965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ethereum-logo-ZF3L47fk.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 617\r\ncf-ray: a28e948b7e78b270-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:01 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:7758,t33\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1252,"size_decoded":1474,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1201)","md5":"945bab1653996d11d6b6967b5809be5f","sha1":"bba37ebbdabdb34b056618d70a138c82f01d41ed","sha256":"10d74de619fa6742083dadea9b2deea4db749228695892291246adb24271253b","sha512":"89eb53f0afde924dc471642f26071b969a4ecc2b915234c4d0a23238d0aed08059b5e7ae2ec2025b203fdc60aad37ec93e146e65a0e05a800e571c8f12a3a5b5","ssdeep":"","tlshash":"bd21fdef78a00ef0f10c4ef96b2b260f773a90f01b6645a8748c2c09c1625c4a71dbca","first_seen":"2026-08-10T18:28:18.42919Z","last_seen":"2026-08-10T18:48:38.447412Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/CookieConsentOptions-CS8RC0a0.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.992Z","timestamp":1786387669992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CookieConsentOptions-CS8RC0a0.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:50 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/CookieConsentOptions-CS8RC0a0.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Text-vb1tRuSj.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.629Z","timestamp":1786387664629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Text-vb1tRuSj.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 902\r\ncf-ray: a28f34054b7d9c23-VIE\r\ncf-cache-status: HIT\r\nage: 5101600\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: ko\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1339,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3406,"size_decoded":1741,"mime_type":"text/css","magic":"ASCII text, with very long lines (3405)","md5":"2b1f93651fb0a657552f9150c976a45c","sha1":"0b7ebe68ea0ab712a90d498602347d797dc77ca8","sha256":"97dc1e6b2606e27987d29346ada6c49c3642aa74c53d03699f09b9ce67e2cfd9","sha512":"6c222cc232656ef971ccdb5442df78082825f5e2e86752b2f7a6b264ed183ee342cfdc1b1a694e2c542f9c6c21cc68f4ec7f4f33c3d33e3d520346deccca32e7","ssdeep":"","tlshash":"e361c09d37a3e135ad359c333b09a9487246e8955e1343baef72584487c3ab36b11f0e","first_seen":"2026-04-30T03:12:05.990722Z","last_seen":"2026-08-10T18:48:38.450546Z","times_seen":14,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/LandingSection-ByKy5iS0.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.154Z","timestamp":1786387668154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingSection-ByKy5iS0.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/LandingSection-ByKy5iS0.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SearchInput-7Xm4RZcI.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.786Z","timestamp":1786387668786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SearchInput-7Xm4RZcI.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/SupportedCountriesModal-CWtZYhz-.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 583\r\ncf-ray: a28f2d20fa80371c-FRA\r\ncf-cache-status: HIT\r\nage: 6394\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jeySHQyKxh:4,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1168,"size_decoded":1424,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1119)","md5":"923daeb22c0a6b151c05c47dc8f3eff2","sha1":"372189f617d2da9ab5c26198191eb4d2d7985c7e","sha256":"486658b6ed345f70d031b62a6304f4c78ede787c6caa6885e4839704602ef995","sha512":"65bafca440973810f427177f612b171eeea2d5be86dd61b58d0ad5e4918d3f21f8c7e2b8cbffc64371ab81dde5ab69219ad3b53cf4cfbe016c6d3757365f54ab","ssdeep":"","tlshash":"f621375f7001d4f5513688acc08f592abb5dd0d5cb071f55d0b9147052a1dce6f65f0e","first_seen":"2026-08-10T18:28:18.270412Z","last_seen":"2026-08-10T18:48:38.452784Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Alert-CKpIhxt6.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.631Z","timestamp":1786387664631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Alert-CKpIhxt6.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 534\r\ncf-ray: a28f34054df45d94-FRA\r\ncf-cache-status: HIT\r\nage: 1176004\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 27 Jul 2026 17:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50070,t44\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1615,"size_decoded":1375,"mime_type":"text/css","magic":"ASCII text, with very long lines (1614)","md5":"68390c7f2b1bfc1247cca7873217d352","sha1":"63de16a080c2d687eb012b4bc8a0311ad19ea797","sha256":"c8ca64c92967b4ca5f4342dc2920209282f461f209337adf76505cd62cf0ea72","sha512":"e721df7fc2b63d970ffdf3d8f1aebb43d143974d39ae6e4cadf9176fbb1d80fdba37ab13edc0dfefe2752ee43cb11db2e10e72d700253a21f45a36f684d1936c","ssdeep":"","tlshash":"4731bdb99231673f7c37b05923a8e28d9119542198560fffe41b616a4bc37f33633204","first_seen":"2026-05-15T01:25:35.558424Z","last_seen":"2026-08-10T18:48:38.454336Z","times_seen":10,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/primg/w360h216/apple-norway.webp","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.748Z","timestamp":1786387664748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /primg/w360h216/apple-norway.webp HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2922\r\ncf-ray: a1a8df8c7eb48ec7-FRA\r\ncf-cache-status: UPDATING\r\nage: 5603\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"CRF3Dbm95EzW5eVM0komQPNxQ8FXU82OydzjdJZD37Ek=\"\r\nlast-modified: Fri, 22 May 2026 14:30:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\ntiming-allow-origin: *\r\nx-chosen: 0\r\nx-chosen-size-diff: 0.22442396313364055\r\nx-content-type-options: nosniff\r\nx-org-content-length: 2922\r\nx-powered-by: Lightning\r\nx-cfw: cYgZFKQywD:9,t16\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2922,"size_decoded":3764,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x216, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6a3eb04ef2804080fe27eb74512a9c9f","sha1":"d7ff2b9865ae418f832cafb187eedfad3e1cfd99","sha256":"89f8e88974c92f233bc07956f6b641dbf3bbfe9aa90a1864c73f6ca39a7a65ce","sha512":"45e9499fbc2b048849795851db1726ce22a890b2caeaa69bd2b1f93367d9c556addc1764f2fec3a03e2d446537a8781120825589ac4c62d1db80d32c0395d53f","ssdeep":"","tlshash":"29515cf7879127685210abb38360471dd540f78f8950a29219bee4f734a2b1ab6c4751","first_seen":"2025-07-05T10:40:03.884183Z","last_seen":"2026-08-10T18:48:38.455165Z","times_seen":11,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/credit-card-BkSYA84I.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.840Z","timestamp":1786387664840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/credit-card-BkSYA84I.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1079\r\ncf-ray: a28f8633fec9dcc4-FRA\r\ncf-cache-status: HIT\r\nage: 154\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:2452,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2311,"size_decoded":1946,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2262)","md5":"639d9b35c21dca9eed9bc05788fa3428","sha1":"cbcdc97190a3a122470539f59a48cf9fd3b71fb0","sha256":"fd20302eaee2dd8fed6410059b03a35d43082ed91deced50f02e92cd75413a0e","sha512":"fc9d7d325e2fb7d2e0f276b9bca69dc406121317dc7a9fc6384a03e8945226263b9e3d20c24ce054b2253d1a97d7738ab03cb7ccc569a5b7ee2dff7f4a009042","ssdeep":"","tlshash":"66413334e0d06cfc58378fedd02aa35ff72d945cdb041624a9992a581b412c87b16f86","first_seen":"2026-08-10T18:28:18.035475Z","last_seen":"2026-08-10T18:48:38.457404Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Button-DUd9V953.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.288Z","timestamp":1786387668288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Button-DUd9V953.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 929\r\ncf-ray: a28f3405bac8db07-FRA\r\ncf-cache-status: HIT\r\nage: 5101601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:917,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4165,"size_decoded":1768,"mime_type":"text/css","magic":"ASCII text, with very long lines (4164)","md5":"5cc2c38ec50c0679ab3efa6f97dd600e","sha1":"a95f22ed23f1b4f90552c5807e1acd883cfbd961","sha256":"71ab274eef2d8fa43d6657b2a68b84abdc9728432f315671a0e041f8420ede86","sha512":"eb2bd533e5e9455d3059c00cba2d8140e4668efd240d823d402220796a959547c9fed4fbc280a53daef8acef4a880c18a8baa6dfbe773f16c0ef8f989424526d","ssdeep":"48:d2ST7L8mVSo1Jyhfqcjuz1zNlax03ZlIRRNk9BNFNANlYNPPcpN7T6Gd+wI4KBCP:dN7BSo1JytFsr4GTOYlm7J+wPGpR+7","tlshash":"7781e2e8d3f2b73eb92f95385198d2d97129b08add621bf9f425706183c2afc6075702","first_seen":"2026-05-15T01:25:35.80989Z","last_seen":"2026-08-10T18:48:38.458352Z","times_seen":10,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Image-BeX-OFZZ.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.331Z","timestamp":1786387668331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Image-BeX-OFZZ.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 482\r\ncf-ray: a22600a10bcc037b-CDG\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Tue, 28 Jul 2026 18:33:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AKvTUNQbfW:5374,t22\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1424,"size_decoded":1308,"mime_type":"text/css","magic":"ASCII text, with very long lines (1423)","md5":"adbb99aadd1bf1a1ed5fca83f8d6c479","sha1":"f5fa3ab40c61fefec47fa5cc313371ed7e52968e","sha256":"d6e7b19c770dd46d760220dd73556c1d7d662a73225345286cbe5eb4ff0c79ba","sha512":"dead78e0e5444939133638cf5e05f4969b32bfdb0481ef66400299b4a890438c8652c7a785ada2b6122130e2fdb00e404b7d77767c8650fbd50b288847b3125e","ssdeep":"","tlshash":"5d21cb24e12896a88732ce0b6ab3b3a5403ba052ee41b302f28f651d4cc95406ee5769","first_seen":"2026-08-10T18:28:18.009822Z","last_seen":"2026-08-10T18:48:38.372774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/testimonials-CxDwtznw.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.602Z","timestamp":1786387668602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/testimonials-CxDwtznw.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2297\r\ncf-ray: a28f8669cab3e7ba-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:272,t16\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6416,"size_decoded":3140,"mime_type":"text/javascript","magic":"HTML document, ASCII text, with very long lines (6366)","md5":"ea826e0cadc7f23b8e2aaeef1df61d4a","sha1":"07b8579cf7ed0c0a3d3d9e20fde851faf0a3e325","sha256":"7df381d32a14878a7884d33cf5d0266284238383e0623496a4fd4340808e2035","sha512":"775bcb8fdcbaef1f2a894e0509e8cec9b41b09acfbbe1b8e838da70f750a23eedb64a330cb1f5b9f898fedd085d6ce09e1b7d9d3901d9fb452e39ded84080748","ssdeep":"96:tVw2RB74mfD4gI/XOEeV9jWVsrRzQcnQRJZkBTVxSId9VL0vii3jzMTDt8N:xBGCpSGRzIRI4IdqM+","tlshash":"ebd18599f0745cf9b72b8de8c12fe11eb2bae41ece010ea9f856746411c92d0719bf46","first_seen":"2026-08-10T18:28:17.904729Z","last_seen":"2026-08-10T18:48:38.460426Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/x-BHNuOW6G.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.705Z","timestamp":1786387668705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/x-BHNuOW6G.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/Search-d1OLgKSE.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 167\r\ncf-ray: a28f2d19196ddb07-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 6397\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:786,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193,"size_decoded":1033,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"a4ecb7ade0f48bed3844809f49202f19","sha1":"2690d11c5c54bf681660bc0c773ee87983aac0e3","sha256":"395f55e2434d368407edb75328e46ee2329ca748b7b3586ef70741135356a51a","sha512":"082a0fa434e714356358fc5a463fdd74c4c420059c2da21015d7a681e19bce4b7450712079c68b9bd67532269ca5ce7d8362c864eaf1407679ffc35f48816b96","ssdeep":"","tlshash":"7ec022bfadf11ef009000e62201e6440879298cce3a30d52321002391b51c917c9cf20","first_seen":"2026-08-10T18:28:17.946998Z","last_seen":"2026-08-10T18:48:38.462008Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/mail-D-6MGew4.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.719Z","timestamp":1786387668719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/mail-D-6MGew4.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/ValuePropositionItems-Bfjp9s_M.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 377\r\ncf-ray: a28f2d227b61382c-FRA\r\ncf-cache-status: HIT\r\nage: 6394\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:24513,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508,"size_decoded":1247,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (466)","md5":"8c4ad5cad223a75797aa865399234e89","sha1":"9f7e26a19b4a35afa85ddb1c99282137b9ac909e","sha256":"ec7e23e0ce7397e31eef78fc70b6b3bf7f447fb29dddd185cc60a9ab7256d49a","sha512":"f469425f96460cd6fd9e5cb7f8bee9dd2ed608afa4edf7bcca9606e910e1e9c6c465dfc2857ac918078ff973f8dfde850ff9dec000e396c7b35c8d4a0491ec47","ssdeep":"","tlshash":"03f0c01eda782cbcb016498d7ba8664efb66d190ff421604f2a9247003001806725fc0","first_seen":"2026-08-10T18:28:18.342024Z","last_seen":"2026-08-10T18:48:38.463411Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/content/cn/c_limit%2Cd_flags%3Aunknown-flag.webp/w_56%2Ch_56/c_crop%2Cw_32%2Ch_32%2Cq_auto/v23/flags%2FNO.webp","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.720Z","timestamp":1786387664720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /content/cn/c_limit%2Cd_flags%3Aunknown-flag.webp/w_56%2Ch_56/c_crop%2Cw_32%2Ch_32%2Cq_auto/v23/flags%2FNO.webp HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 142\r\ncf-ray: a28f3a512995253c-FRA\r\ncf-cache-status: HIT\r\nage: 1176257\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"Q304\"\r\nlast-modified: Thu, 03 Oct 2024 11:57:09 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nx-cfw: lrHSCqsVfP:21143,t9\r\nx-powered-by: Lightning\r\nx-track: 0.20978530628671088\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142,"size_decoded":891,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2e243989d0664bca5e5d417aeb0fd1f","sha1":"bc89def100725e8f6b853edaf135b5437a5507c6","sha256":"8ed735f11dfb941a770b56954680bff1db9ab92cdaad459d15f0643d16c1f6ab","sha512":"7e4fdcadc2887589a8f37a8e971513a03ea89e87f9503b00cf8522a79dcb97bd34d542cb97f48d393057836e8e7a533387337492f816d0401356d2c6ade1bf31","ssdeep":"","tlshash":"fbc02b30c2907c09883b7cf1949625b61c210a101b1349cc82534ed342538a07f52107","first_seen":"2025-10-08T12:43:42.963417Z","last_seen":"2026-08-10T18:48:38.464573Z","times_seen":11,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/differenceInHours-L4JCVyfs.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.774Z","timestamp":1786387664774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/differenceInHours-L4JCVyfs.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 257\r\ncf-ray: a28f86339c8d6eeb-CDG\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:59 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tWZjNIthpZ:45961,t19\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319,"size_decoded":1117,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"04c64288021e48a5c40f8dae5ac1acec","sha1":"b2c407d7608fb5f98e825b963f33e3dd999c8b12","sha256":"d82a2b37a5b57630ecbb2959b954091e72f92d78041d099bb5a68c9270c617f1","sha512":"867503129f7bf08fd3fef6524a8f5802ce6af2936ac646ecfb6b4f352b17ceb03ff504514db090eb4e35e3baa4796cef6fbddd3a4fa69f01fdc93eb7463ea4ee","ssdeep":"","tlshash":"07e0c64bb0e63028235d0c2cc01b300af11ea9a2920e0fc8e084da5032185e192baf37","first_seen":"2026-08-10T18:28:17.755788Z","last_seen":"2026-08-10T18:48:38.465477Z","times_seen":2,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/metrics/Al9I498WNVCaJ3gOyq-VvDT9Hc8ofFf_z0AXDjRZofCjp5fI","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:46.934Z","timestamp":1786387666934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /metrics/Al9I498WNVCaJ3gOyq-VvDT9Hc8ofFf_z0AXDjRZofCjp5fI HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 487614\r\naccess-control-allow-headers: Cache-Control\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2912bc6e99b8824-PRG\r\ncross-origin-resource-policy: cross-origin\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npragma: no-cache\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487614,"size_decoded":488186,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6369)","md5":"85719aac9d64752df1a56ca37dd1f595","sha1":"a6f5d7b27979c387f5add7a2ef452ab1fa906634","sha256":"0f4b5c9325432ba2c04b4d40d21615bbe7cab754894b1484469a3262703c0fa2","sha512":"a605f6b59cb2c11daa8c969228b2733174c686044ce6833e9620413dd46e830c41bbb169a2a5f2f46429fc372506dd702c1e246bde15e531596b48c01f374e1f","ssdeep":"6144:g/ghMX6Z7ioQ+o/FWDEsoGz4ZOl0fcPbvTEaI3sIobkd8wS1LQM2eO:g/ghb++o/5uUZ0U8FnO","tlshash":"83a4f8cdb3d6746293a2f478903f018ba57a69e2f44cc899f185cce42e7465a4227f7c","first_seen":"2026-08-10T18:48:38.466508Z","last_seen":"2026-08-10T18:48:38.466508Z","times_seen":1,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":568,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Tag-CzFiEk0D.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.168Z","timestamp":1786387668168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Tag-CzFiEk0D.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Tag-CzFiEk0D.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/shield-check-B4hzhZo_.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.748Z","timestamp":1786387668748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/shield-check-B4hzhZo_.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/icons-CBF0S1-q.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 739\r\ncf-ray: a28f2d1ffc40db07-FRA\r\ncf-cache-status: HIT\r\nage: 6399\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:793,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1620,"size_decoded":1581,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1570)","md5":"a3d2d23e704863e4465974d4b0a9cd59","sha1":"fadfe113b358dce4e15681db5f28e01e7c5f3061","sha256":"a89a40e5a397b234e6267dbd24f81cdfaad315401bebee41e16f570cbad303d5","sha512":"45ed977294f388ee528d61a75ef61e1acb351bec421dd4b49f89c957a1d0a5fe186691140af02e456899759414b1c4b69fa4825d16730e4e64d583df7ae8dab8","ssdeep":"","tlshash":"bf31797e5ece2bbc02439794510ba800978f94fc717e4991f15c557b0a92581ec3bf51","first_seen":"2026-08-10T18:28:17.795877Z","last_seen":"2026-08-10T18:48:38.473419Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Notifications-Ccjm7GPx.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.872Z","timestamp":1786387668872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Notifications-Ccjm7GPx.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Notifications-Ccjm7GPx.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/StatusText-YL2xEzDb.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.893Z","timestamp":1786387668893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/StatusText-YL2xEzDb.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 359\r\ncf-ray: a28f3405dd474db8-FRA\r\ncf-cache-status: HIT\r\nage: 2811211\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 08 Jul 2026 13:10:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50075,t15\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":1202,"mime_type":"text/css","magic":"ASCII text, with very long lines (861)","md5":"7b0d110d2292a6fe5b53404b4898653e","sha1":"813554c7e3b37b9b59c0fb9385f1ad416ffc0999","sha256":"e545e352dfc280af24a145767ed9b04600cd095b74ce5b0cf6dbcfb21a7c3ba0","sha512":"068bf778efe31426cf4dfb28db41c5c715ebd0c959f96cb95e3358f6b43bfb71bde8cc05ca7f384b5e0cb8fa9687be834a8896569a73f9f069e63dd97a36cf39","ssdeep":"","tlshash":"051129994224da3dec3ef42d17dc723d915566086e5246f5a806332547c2ff39d27542","first_seen":"2026-05-31T11:11:55.614506Z","last_seen":"2026-08-10T18:48:38.475829Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Scrollable-C-avTb9b.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.003Z","timestamp":1786387669003,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Scrollable-C-avTb9b.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Scrollable-C-avTb9b.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/url-Caz6rh2n.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.606Z","timestamp":1786387664606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/url-Caz6rh2n.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 50452\r\ncf-ray: a265b1b00a2f8aa8-FRA\r\ncf-cache-status: HIT\r\nage: 365\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 05 Aug 2026 12:03:33 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: RSspwaEfSI:8177,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":165569,"size_decoded":51321,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41881)","md5":"2a8933247112662ade7324f2804ba99a","sha1":"648ff9d23f7e25cae8d03d9d2be4a9a054a91f95","sha256":"0f0f869e31c594fbd5c88cbc8097b21479899925fc4407a37aaf93cae5755a32","sha512":"9fa1171cbf28cb55b3596eb5137cfbc4bf5b1bbf8c6eba247cc825d57aa082432a0fd7487e2833dda5996bbdadf358c266b0e5c34fe593ca2023e5765afe05b0","ssdeep":"1536:xK8nPn6YhOjaluztpOz35miPG+QpVe0UMCn7gD3qzqoINYr4AGsQM:HnPn6YhOjRIE+eVYMwaNKGsQM","tlshash":"67f34cff7252b022179b235990bb4046f3355d97141e9864b3a8e8ae3971c4cb2b7f39","first_seen":"2026-08-10T18:28:17.931563Z","last_seen":"2026-08-10T18:48:38.477341Z","times_seen":2,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":94,"receive":50,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Header-CAWkZLh6.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.630Z","timestamp":1786387664630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Header-CAWkZLh6.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 3474\r\ncf-ray: a28f34056c36368b-FRA\r\ncf-cache-status: HIT\r\nage: 2791186\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 05:33:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47872,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16469,"size_decoded":4316,"mime_type":"text/css","magic":"ASCII text, with very long lines (16468)","md5":"c7d0fe79f4356d99456fa4e4a6d62d3f","sha1":"8b9c1c3ce334d2112595c92afc540cf9c1455a56","sha256":"8060da0e14d80d7f6f08be32b8319114120182d505801613530e15cab547b0ed","sha512":"b7150be76fda625562c0695a305a40ce47d256bec6ef2d00db9f433a1f294043d09f060d3845b9927adf8a7402f1722213f9ad888fb13615a72e88e0dc9ef9ee","ssdeep":"192:u8Wgvv2o2K5xqJZfOx0G/bW7js3P15tIuYxi8WgbCFqOoOQUfSsqkWjTFzWtirUQ:uZQoTjOoOQ7kykjF93jFH+","tlshash":"bb7275994a51b33eac7be42847fd635c52289506ef732adbf409712983c7bf1093314a","first_seen":"2026-05-31T11:11:56.074425Z","last_seen":"2026-08-10T18:48:38.364169Z","times_seen":8,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/RewardsBanner-D01JhDRf.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.700Z","timestamp":1786387669700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/RewardsBanner-D01JhDRf.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/RewardsBanner-D01JhDRf.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Counter-DFNSvKxZ.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.643Z","timestamp":1786387664643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Counter-DFNSvKxZ.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 375\r\ncf-ray: a28f34055915f51f-FRA\r\ncf-cache-status: HIT\r\nage: 2954290\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 06:58:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: huhItYZPXB:2056,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1120,"size_decoded":1215,"mime_type":"text/css","magic":"ASCII text, with very long lines (1119)","md5":"f144778685f3219e7ffd6ec0caf7110f","sha1":"a98b88f84728b9379a23b8d05546cb897657eea6","sha256":"10f2e8c348538fbe73ee385404a7afcdf47024cde1869d8618ac737b07606e9f","sha512":"c000eb2b1339cb644cbd7cda09731009f634b43073dc8e10ee97a85eddb3c3fb19fc06b3d07d29710c807f34b47d4ab631ed5834f864ab16dc2d53776253e2b1","ssdeep":"","tlshash":"b321ebf96292f33e7827943067fda24e51516213cd034babf867b0a848c7ef31632848","first_seen":"2026-04-30T03:12:05.969292Z","last_seen":"2026-08-10T18:48:38.425996Z","times_seen":14,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Skeleton-B0PvOGCy.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.647Z","timestamp":1786387664647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Skeleton-B0PvOGCy.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 262\r\ncf-ray: a28f34055fbc9a0e-AMS\r\ncf-cache-status: HIT\r\nage: 846616\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: BjSokvcnAX:10,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":416,"size_decoded":1101,"mime_type":"text/css","magic":"ASCII text, with very long lines (415)","md5":"faac15860e641ac4595d2b8f961e0dbc","sha1":"538ca31a64704bfcc8daa6ebb47c4c1f308088e3","sha256":"dc9055a7efa195af7a1fb25c43591fe8a9162d49f2a0dfc527ad3493ab25104a","sha512":"0498ea6497d2969963ae9c67df8b5ec046967ce880f87a7237a049990923bd8f4fbad0b1f7811235ef6378f46fd970b6d90548e74b6acf2327f319fdce79438f","ssdeep":"","tlshash":"8be0a3ec5a4523f46cc343636895948b08ba45519d7350eae2b530dc52d3a6c5463f24","first_seen":"2026-04-30T03:12:06.07683Z","last_seen":"2026-08-10T18:48:38.479026Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.685Z","timestamp":1786387665685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/user-DT9lFo3b.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.720Z","timestamp":1786387668720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/user-DT9lFo3b.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/ValuePropositionItems-Bfjp9s_M.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 361\r\ncf-ray: a28f2d227c654d7c-FRA\r\ncf-cache-status: HIT\r\nage: 6393\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50005,t24\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":479,"size_decoded":1208,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (437)","md5":"3da71ad9718458b3cb88b1b43844f797","sha1":"bef74264c2b3147f0fe842cc18a2d4ef336a7f75","sha256":"f14be366edb9ac6b898b29b2440f42337a737303ba4f6a1b13c13ee59f6d9c09","sha512":"6c1e4e6b3ad60fb24e40139bb2b5bc57a5a4bb771ffdb383bf12d1c7811f8b383dc5f44cdaee247d6302b7a7901e52f8987cf436adfeb860f4eead544e5a7072","ssdeep":"","tlshash":"d3f09e1edfa90cbdb41a4c5d6a69b58fba76d2a0bf422615a69c217443002c05321fc0","first_seen":"2026-08-10T18:28:17.716474Z","last_seen":"2026-08-10T18:48:38.479828Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Connector-Dz9cFlRR.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.873Z","timestamp":1786387668873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Connector-Dz9cFlRR.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Connector-Dz9cFlRR.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/CookieConsent-DlAbnUNB.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.993Z","timestamp":1786387669993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CookieConsent-DlAbnUNB.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:50 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/CookieConsent-DlAbnUNB.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Command-q5BsoKZZ.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.657Z","timestamp":1786387664657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Command-q5BsoKZZ.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 601\r\ncf-ray: a28f34059f9b248e-CDG\r\ncf-cache-status: HIT\r\nage: 1176004\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 27 Jul 2026 17:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: oLTMcizddB:423,t4\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1646,"size_decoded":1439,"mime_type":"text/css","magic":"ASCII text, with very long lines (1645)","md5":"a5d251fcc0bc151769cee5ae6713982f","sha1":"666761a7b118f516962776ce70d85f54c5ee2fb7","sha256":"19719672f3514807e8c8201138ac64a98f5a909439c2269cffa421f6958decc5","sha512":"4be633e1e5a96770128ee1afd09069377f5e538bf7292691a46274734cb524dd87b23f68b2f3a68092c12d217b4e24098e8baa1f40e4274f5b084c3f5315ddfd","ssdeep":"","tlshash":"d331efa99790f63cac3be2315bdcb2ae6200d6559d6246ebe550b12943c7ff20e31494","first_seen":"2026-05-31T11:11:55.674574Z","last_seen":"2026-08-10T18:48:38.480836Z","times_seen":7,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/TrustpilotWidget-D2CAoTrL.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.686Z","timestamp":1786387664686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/TrustpilotWidget-D2CAoTrL.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 326\r\ncf-ray: a28f34059be6371c-FRA\r\ncf-cache-status: HIT\r\nage: 2785848\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 05:33:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jeySHQyKxh:15,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":632,"size_decoded":1166,"mime_type":"text/css","magic":"ASCII text, with very long lines (631)","md5":"077301a693d4537db663ed6e57c7d6ec","sha1":"9b7cd4f4bcf967715d92081113638798dd2f8ce5","sha256":"660b16696d3169e5547946a989d9a02c564e6205800029569408e0e70139336c","sha512":"0983885b569cba4a554106e1522631ccb18cd75cbe81dda96ec804b11fb06fa6e88e33c90dd75b5df0a5f934afd86ed67541d5e41206d68dbbf904b19d760239","ssdeep":"","tlshash":"95f0944e0b28e22ec4d3013b4a4e96cf540845cbc23746b3f483b72a81c4fa76c321ca","first_seen":"2026-05-10T06:59:25.029418Z","last_seen":"2026-08-10T18:48:38.348828Z","times_seen":9,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/utils-C4bW6HNT.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.764Z","timestamp":1786387664764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/utils-C4bW6HNT.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 8093\r\ncf-ray: a28e9390eb8be537-FRA\r\ncf-cache-status: HIT\r\nage: 131\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: HcKxlISubs:2247,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21291,"size_decoded":8936,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12839)","md5":"709b81652f7fd388b139e54842a72776","sha1":"72602220e16c0ae4985fe9dfdcf3a878023d1265","sha256":"83b7b297601644b3f952193b71051a9f08bd633881857ba84b2838fde61642a9","sha512":"0c733a88b7fc7c4922e3bf328c1abfd6d4be852f9f7d05da7f3917b277d4c72b53a0f579c84914681a909255fc0f5fd2f0524ceadb9a7b7e123fcf709bfaf0f2","ssdeep":"384:uKsHlVxAUpx/ALxus3N63zeRBEKk495FCbJOOtpaWk:LsHlVxAUHius383yRBEhFtBk","tlshash":"eca2c7a931d2f030d3ab4066516f9909f33a68a0784d1414f1b7ddce39a255a82f3fad","first_seen":"2026-08-10T18:28:18.062016Z","last_seen":"2026-08-10T18:48:38.482015Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/emotion-is-prop-valid.esm-Ct7dbkbL.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.813Z","timestamp":1786387664813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/emotion-is-prop-valid.esm-Ct7dbkbL.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2174\r\ncf-ray: a28e93908903dbb5-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: wuvSjokemO:8,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4559,"size_decoded":3039,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4496)","md5":"cf8a434ddb21017baa5baeb6c1a86a7b","sha1":"8550ecb3c304638b96889394e16dea35e80cfdd3","sha256":"060f0b77b21d5b81befc4eab63ee730986542c3b3d54e04cff6ef128490b934f","sha512":"b239762db0b87a56dfe01abe6032613bfdf05d9735f30f14cdac40ad688d82af9c6ff4d699e565fba7ef3913275ec1f097118c4f3075f3f22413b102a5e0af8d","ssdeep":"96:jA3GKipEJ8v8kfLxKTX8EhhqcsnOtqUUDfqiXao:MGKipQ8v8kfLxkvhRMoqlDfqTo","tlshash":"9491f8f4fa417d27191ba18bd6e35e47e1304592310344b2f29c3a1cc5c8aa4876fbbe","first_seen":"2026-08-10T18:28:18.344594Z","last_seen":"2026-08-10T18:48:38.486438Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/constants-DNQe4TEO.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.855Z","timestamp":1786387664855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/constants-DNQe4TEO.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 228\r\ncf-ray: a2750d2ee973dcda-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lyytAWfgNq:199,t24\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":351,"size_decoded":1062,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (304)","md5":"2efe06487c5a1915be3d57263c2b49e4","sha1":"537430abb1b25e50ad9151091b25077ee9a8e5bf","sha256":"40cad51c7bfa7ab957e75ccc4aaa341db2dd221143851a073ac57d6bcaa580cd","sha512":"422c4aaccda885c321511735743c101e40541d269521ad0f17ccc79c93eb9dfe337153023f1e88aa49255df4b3368d5394aabd1c54c5ec755b798a72d7fdf7cd","ssdeep":"","tlshash":"46e0df2ee85416791882ade912e3c1ede22ca040feb48984864f0c204db8e2aeb24842","first_seen":"2026-08-10T18:28:17.96843Z","last_seen":"2026-08-10T18:48:38.491629Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/bitrefill-card-5OngOoVG.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.902Z","timestamp":1786387664902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/bitrefill-card-5OngOoVG.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3267\r\ncf-ray: a2750d2efc98155c-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lyytAWfgNq:200,t31\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11536,"size_decoded":4100,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (11470)","md5":"83ac14e1e941e23e1eea26b953c6d26a","sha1":"541d7ef3c3ed4a90b62f450b4afbb988f7d6e2ee","sha256":"39ef52d45648dd92a170eacd38a39b1fcd8f07049c72676542349fd807b8ebfa","sha512":"0b335775680ccba93df0e47a2b962d738c5d3dbb421c8897c1c902e6320706f7caf7e204a06d2b7f5c05c26998e5ec3f78bdd58e3185cf3b8d9838053d72e58e","ssdeep":"192:QKhNKO/HCFSowkJyABTXsD+qgUDI7ISDaEFtb9YInfxDtLFjzBc:NhNKgHSSo/J1TXu2aETGEnb9Y0JDthj6","tlshash":"3832729bd569b3b9541bc0f1306b438a7ef78018daece796a919f0513018a0833f36de","first_seen":"2026-08-10T18:28:18.086906Z","last_seen":"2026-08-10T18:48:38.493419Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Product-C26tbHVc.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.207Z","timestamp":1786387668207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Product-C26tbHVc.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Product-C26tbHVc.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/URLStructureRouter-UQLD4QC1.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.875Z","timestamp":1786387668875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/URLStructureRouter-UQLD4QC1.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/URLStructureRouter-UQLD4QC1.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/proxy-DR8vbTgA.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.812Z","timestamp":1786387664812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/proxy-DR8vbTgA.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 35404\r\ncf-ray: a28e9390085314c6-CDG\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tNeegAMkVR:77,t5\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111264,"size_decoded":36246,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1d2fd02c898b87105d80490b23cd2a2e","sha1":"eb83c5d1387fd813c1d78ae6dad0f56f4397a018","sha256":"54d0c933a326ab53234b38f31774e216f3344256a7b6a8dc1ecfde66f2c96175","sha512":"e7e210320926a1c93112a120ba6a8bd56f98e5aa04d374d29f8c42caf6917d868ffec6976caad60c21ee4ed809bc544bb838b6957e5e59f4a0937bf83a11f246","ssdeep":"1536:/Zd93JBaqgOLxZOLjHXrxO8V5/FjvmXV5EvEyUcM5JJSk:/Zj3iqZc7w0EjJkk","tlshash":"d3b3e7d573a0b121d3cb9166c0af4b45b33b59d8280d803c7639a9cf396190867fbb7a","first_seen":"2026-08-10T18:28:17.819991Z","last_seen":"2026-08-10T18:48:38.500024Z","times_seen":2,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/_patched_static/api-readiness-recover.js?v=api-readiness-20260801-cart-persist","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.970Z","timestamp":1786387664970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /_patched_static/api-readiness-recover.js?v=api-readiness-20260801-cart-persist HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 11782\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11782,"size_decoded":12072,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"f5f4cfa74828d09e3150a271e4b91b9d","sha1":"5e845fba0a960699f58e5274dc930090b8cba99b","sha256":"e30d2421fafc58b08f95378bbb9a2331d8535117595d7ac52972ee183e5f2f6d","sha512":"e749b689476893881706fc84e4ab0b0c2d240ee09bcaa76bf773ec6be0df3922ae5f4edcc881c72730597cc14be4f7bd9810185ed687f4b3ee3ccc6fedef0c44","ssdeep":"192:w60+WGprGctyE1unbPsMj9lFDzmMnzxLLm3wWCW83ehsyBTluywYIa879RKbt0bU:FVgdDsMj9llzD1kBMAz+zs7aGHib0HJ","tlshash":"5c32228928f370228697707e578fd4493126d423298dde947e4c03147f95a6a8bf2bde","first_seen":"2026-08-10T18:28:17.987775Z","last_seen":"2026-08-10T18:48:38.504954Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Divider-CYrs_lgC.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.315Z","timestamp":1786387668315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Divider-CYrs_lgC.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 156\r\ncf-ray: a28f3405fb0fa031-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 2974643\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 06 Jul 2026 14:38:42 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DGbcMwnUOy:1,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244,"size_decoded":993,"mime_type":"text/css","magic":"ASCII text","md5":"06785e3ae957fb1446f0ed31a6369462","sha1":"bd5b5f103c0d918f745a66cb2cdd3d24d3d02cff","sha256":"02ef7c2b2ca8a4f31f5e75edb7b837d0a32ea986582ee1dc7c4f9311463ab497","sha512":"c889568f240cda8e2a3c5bc577e12cd9671a511392883f546efecf49355d30e51788df3c4c938362881ae2907dbb1a99fb5cf5b61506996e8e65682d0c4e528e","ssdeep":"","tlshash":"8cd0a77c32c4b2bdde138715779eecc7b1876b414585c093f8812208d58e7e46d250f8","first_seen":"2026-04-30T03:12:05.985315Z","last_seen":"2026-08-10T18:48:38.43567Z","times_seen":14,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/credit-card-BHevS6Uw.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.693Z","timestamp":1786387669693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/credit-card-BHevS6Uw.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/credit-card-BHevS6Uw.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/trash-2-DOrEvYeo.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.843Z","timestamp":1786387664843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/trash-2-DOrEvYeo.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 419\r\ncf-ray: a28e93d10f4f9736-FRA\r\ncf-cache-status: HIT\r\nage: 123\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: uKvJGYNeXq:1,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":637,"size_decoded":1284,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (592)","md5":"5106c928a62ee444d0eb97a02337e099","sha1":"0ba57b4720863b42b48dbd02ece0e9eccf76e721","sha256":"b62749087ac253ef7b477e745aaf06f955c29726c803177357e2c8d84be4f97c","sha512":"14bedfac2cf0669833c470f56d722287fd84b45e344aaf3878117297068f1c0c49a76d334aef7cc8229673499fcd6de4ac3d8491c8c6240dc3e2a050aa457bde","ssdeep":"","tlshash":"73f0994ecb981cbaf01a8e5d6e5ee94fea9b96b6ae5b1515bb4c20b041020c00736fc0","first_seen":"2026-08-10T18:28:18.053464Z","last_seen":"2026-08-10T18:48:38.516753Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/contracts-Bpr7NBAI.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.909Z","timestamp":1786387664909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/contracts-Bpr7NBAI.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1731\r\ncf-ray: a28e93d22962b270-FRA\r\ncf-cache-status: HIT\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:7752,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7517,"size_decoded":2598,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7470)","md5":"20a1488198b082296f262febbd167948","sha1":"59896e84d73d8b74391d275232b0cc7a0fcf06b2","sha256":"c46ba12a8bf5bcae2ed2453dce02def946ba14c2c82119efb0817173fb9c1242","sha512":"db1568964d2841a68cb6aa8896de0392f7a1f7a2e49f33ccbf091002803266c75d10130dcfda53723a5bad1f446570b1f6da302a938dcbf41dcd6087df5d71ca","ssdeep":"96:cSrVUudROyORKOYR+C+Y829eiiHhWFPqMtxYQPtmrvFcvn/3dn2bU:YMtxYVbFcndn2bU","tlshash":"36f122e2d009b5c88d21454695c31a08d19edbd3ecdcc85be29cd93a1bfe465c62ef4d","first_seen":"2026-08-10T18:28:17.857002Z","last_seen":"2026-08-10T18:48:38.520951Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Flex-CBqrzjUj.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.157Z","timestamp":1786387668157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Flex-CBqrzjUj.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Flex-CBqrzjUj.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Hero-Bjo2ud7w.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.528Z","timestamp":1786387668528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Hero-Bjo2ud7w.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/landing-EzeWBxTg.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1882\r\ncf-ray: a28f8669ad6adca4-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:2462,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3972,"size_decoded":2726,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (3930)","md5":"536623aebe35043e9bde39378b42eae1","sha1":"dfb7fc6dbba9e44db60cd07c672cd891fd8c4e11","sha256":"f90f0aba0c7d0ea8589f592146851b2daccacaed89b317076636092157177f38","sha512":"26258498ea8e93b05d571a955bb51769fea8829fd291ea6d6befc1b171731489b825e5cc0b2b4fb928def7245355ad53b2e50c1dd4e3701c6e2f10eb52e95528","ssdeep":"","tlshash":"958175afd8b476b8a12a4df0a19b419d323f91e4cb0118a8f5e9745417074c1fa16fd7","first_seen":"2026-08-10T18:28:18.299305Z","last_seen":"2026-08-10T18:48:38.523067Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu.i.posthog.com/s/","fqdn":"eu.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"18.158.90.132","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:48:11.744Z","timestamp":1786387691744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:B5:42:B0:EF:B1:77:97:C3:FF:B8:89:87:B5:A3:F4:32:08:FE:27","sha256":"BF:C3:D3:B1:0B:53:D4:58:C2:A8:1F:37:4C:D0:F6:A2:F8:E0:1E:BB:05:FA:53:84:BA:CC:BF:1D:78:D1:F7:A5"}}},"request":{"raw":"POST /s/ HTTP/1.1\r\nHost: eu.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: text/plain\r\nContent-Length: 721\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1064,"data":"\u001f‹\b\u0000\u0000\u0000\u0000\u0000\u0000\u0003…TiOÜ0\u0010ý/Vŧ\r\u001bçÎJ¨—@\bÊ¡–£¢B+Ǟì\u001a²vj;@\u0016íï8»eAmÕoñ›™7óæȏgÒuR\t\tiYƒ\bÃ\u0000D”\u0006¹à,(s–\u0006u˜\u0001«b‘åUIF\u0004\u001e@9tg\u0015kí\\;ÄZ£[0N‚%“ç­eZõÎCy‘^¡‚9F\u0026?ž‰ë[ “lDÖÈ3i›n\u0026\u0015’\u001bó\bÕX{Ôæþ\u0003õ)Xßh\u0026¼—Ÿ\u001dXg\u0007\u000eÅ\u0016ÈAæεv2\u001eWҁ©—»\\/Ƭ•cƹcΌ\u001bß=,‹@:uY\u003cݗÉõ÷ãïÍI~doÞóÎ\u0018P¼ßÛ¿üºÓhΚ\u0003ÉÜç7(S³ŽÍ`\u000fÔÎÀiú½Ó3ß\u0010ÿy1HÁÒ¬î\f\u0007„­ÃŒ\u0017ÒW\u0017Ŕ\u0016¨²3ÌIúârD¤’\u000esh³\t­Áñ9Æ)xr‡º=7Úi®\u001b¯-BØ7\u0002Ì7OJ\u0026á\b3\ti€»?‘}%†÷@¸1ÿ®@/˜T_´¾ïÚ[\u0006‚\rεRÛ,oÁ×~\u0016°…ðym@o\u00036\u0013ۂ\u0011õ mµ²°EÓ|‹þ\u0026÷˜3LÙ\u001aÕË%v*ÉSßt®\u0005ˆOZôk”zTÀßÐW‰\\‡[\u0013…á Ááä6ÍgmÛH\u003eLg|gqD^‘y\u0000ƒ\u0003”j†›vësŠ—y\u000eeáãÌÈaci^dq‘gYœ\u0016áڄ\u000b°h·–\"ËÊbu»ZýÚÇåê֟\tX‹eLßÞd\tP\u0006y\u0026xPð(\u000e¨H3šG”\u0026À°ÖwR\týøߘ\u003caIÊKžø˜FVèw¶yLQ®\u001d֓Ð݄¦»þì¶W;×֟ý«\u0003C³Ó÷à\u0003Ú9Ÿ\u003e-\u000e?~Z.¯²‡óª¶eyw]\u001c\u001cÜ\\žÂÕì|~}dO»²?^ô'‹«Þzfœ@-gS\u00015ë\u001aÍ$\n£,\bÓ \u000eÑ.¤uRq÷‡(Q¯E•U\u0001\u0001åEZ±0¬ðE°µº®-`q\u0018R?Cå¦Ì½P\u0017\u0001\r/h1IŠ\t¥»y\u0012ݐÕí/oR\f}\u0002\u0005\u0000\u0000"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 18:48:12 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://biterfz.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 509\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":421,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-08-11T01:03:22.2501Z","times_seen":44155,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useMutation-hJvpf7AT.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.895Z","timestamp":1786387664895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useMutation-hJvpf7AT.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2140\r\ncf-ray: a265b1b70fc477bd-FRA\r\ncf-cache-status: HIT\r\nage: 322\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 05 Aug 2026 11:57:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: RSspwaEfSI:8187,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6904,"size_decoded":2983,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (6855)","md5":"12739d50125df00ff19bf05e643cb19e","sha1":"6a6e0bfc42379b6459781bb7719fdf40007e11c2","sha256":"edbea9fd2c1e277aaaeb0d6cf8df9b06ae9b959c081a808a0d8e9b69992f8e8a","sha512":"bcf644c9b511afef8bf87b1b77ac37d9b8d85e5db8280f627e0faa800805277ea91c6e902025b5ec979679952d57f4fac3f88f0002e7f497de4d5aedf92e8df7","ssdeep":"96:DXP0DpVsA1OXhPfNm7uJrDADCrDVDIuoLGHfxqQVZ67UTMPfEKeYgcmamKsU:D/0FVsWyHRcS5cuWGHfxqQHwArcmamC","tlshash":"9ce174ce961b25267dd68a80d07e022b913ca31a5c16946830bdcbfa7ad054df5bff31","first_seen":"2026-08-10T18:28:17.787978Z","last_seen":"2026-08-10T18:48:38.525525Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/globe-C5Tb0yP_.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.754Z","timestamp":1786387668754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/globe-C5Tb0yP_.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/icons-CBF0S1-q.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 229\r\ncf-ray: a28f2d1fec76dbea-FRA\r\ncf-cache-status: HIT\r\nage: 6398\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:1320,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":285,"size_decoded":1074,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"7518f865aed23a3876394fcaa93322fd","sha1":"a1144358542ba107d197586ca1347a4389bb9e94","sha256":"5f8b0f822e688c5ec6ef4739e317995112ef63606fff07f5fdfc57de46dd5e55","sha512":"c0f6a1e4fb9604a05d452fd1f82c3ed81333b78508020bcf95d44f7aacb71f630e38edfa6098c18327c17de4134ddda89711742017c5467a84d36b11a97b2882","ssdeep":"","tlshash":"aad07d1eddf81a3849002d592608d504830dc155b2424cc475ac02b923c04c9eceffa0","first_seen":"2026-08-10T18:28:17.909179Z","last_seen":"2026-08-10T18:48:38.527029Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/PreferencesModal-CtoqIVMh.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.062Z","timestamp":1786387669062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/PreferencesModal-CtoqIVMh.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 671\r\ncf-ray: a28f34061e659c23-VIE\r\ncf-cache-status: HIT\r\nage: 2410925\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 13 Jul 2026 10:25:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1345,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2355,"size_decoded":1510,"mime_type":"text/css","magic":"ASCII text, with very long lines (2354)","md5":"3d010c38e7c33c60afc02d4060996484","sha1":"ba6807ff2c67b2a0abba338d00d620edbe95fb0f","sha256":"62fafbfdc8737722caa39d8ed9d93a162102fe6ccdb237592aefef407c9be15f","sha512":"116ab2df893493df79c5ead2f9c914838b1032a0a29af73e069206d2285c07201a602b036563335f0f120f0c486787ef4486e25107792d120b7a27f74a286c14","ssdeep":"","tlshash":"6f4142b21b54b33dec3fe01886a677de02989510db9726ebf814708807cb6f64c33589","first_seen":"2026-05-31T11:11:55.618207Z","last_seen":"2026-08-10T18:48:38.528289Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useExperiment-DniQ8Qdl.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.816Z","timestamp":1786387664816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useExperiment-DniQ8Qdl.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1687\r\ncf-ray: a28f2259388cdb07-FRA\r\ncf-cache-status: HIT\r\nage: 77\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 12:51:15 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:205,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3447,"size_decoded":2552,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3396)","md5":"9991450c10146ddd96c5dba3f633fb50","sha1":"6db93fe28c8a028c96b0c88a29e4dc9d24ed58f4","sha256":"6b495eebc672103b2c0b220d740333425627dbf035e1108356aafa24870642f0","sha512":"0614bbabd163cf7c416af694970e18e8a6a1161ebc2528e35de06280bf3055254e416bcd569a182703de6caff4f940191988b02b58e5b99a485cbce2b5ac68aa","ssdeep":"","tlshash":"b561d7edb34079f9e3154532c1af013ae33f25446448c020e179928f2668e4687a7f6b","first_seen":"2026-08-10T18:28:18.110147Z","last_seen":"2026-08-10T18:48:38.52901Z","times_seen":2,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SkipNavContent-mNNDP41q.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.958Z","timestamp":1786387664958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SkipNavContent-mNNDP41q.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 537\r\ncf-ray: a28f86355e8635e5-FRA\r\ncf-cache-status: HIT\r\nage: 149\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zqyodxIUSG:74,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1075,"size_decoded":1402,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1023)","md5":"ddcf7e825755b6f55ca08307a5f4949a","sha1":"7f7fe6047fbc21db5428753d2425220e25e31c29","sha256":"ba3c27841790dce2e4b6d5eda739bd4f100a9f2be173c860f35048fc168e0b3e","sha512":"bf586e103f9cb3171a9df80a8ed8009e1aed76491e5297f6e1cd1b1456e777c83c84488106fb84ebf37a24925dda6a238240c7213cccdf3edbc33e6bd719436a","ssdeep":"","tlshash":"0a11dd96dad0b9f5b80b4ae4403bc16e721f6888821e55f4bc53b0665b405f42b23fda","first_seen":"2026-08-10T18:28:18.349376Z","last_seen":"2026-08-10T18:48:38.530934Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/search-C_n3yDYH.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.586Z","timestamp":1786387668586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/search-C_n3yDYH.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 184\r\ncf-ray: a28f2d191c4f360c-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 6393\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47821,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":218,"size_decoded":1028,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"db0fc3747f8cf8fc716cbd06a085f996","sha1":"da9b6447f6b517c50431b80ce2b9d08a4b21949e","sha256":"7bfe09b2125ea364ea2c67f2339eacc0dd4e6cd10e7a297c0af153ebd4f8232b","sha512":"d9f316959e9a2edd68aad6f001394c026cff84aa4db559a87cfa97ddefed0ba27c16344f2ced1822fde975a8800ba2379872519d7b7c606abecf67a1d881ed3b","ssdeep":"","tlshash":"e7d0a72aaca908b41d2118605119ac03ad95d08c93524b4477d0523906d1c725ce8e51","first_seen":"2026-08-10T18:28:18.263592Z","last_seen":"2026-08-10T18:48:38.533679Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/_baseClone-BmwNfYGx.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.592Z","timestamp":1786387668592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/_baseClone-BmwNfYGx.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4460\r\ncf-ray: a2750d46ab1239e8-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: JZBXrKgoTU:7576,t22\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13090,"size_decoded":5294,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13042)","md5":"5230605769e98b2cf6f23f53ec70622c","sha1":"dee3633cff6710f8de1eef993559e40e6739ca18","sha256":"aa28ada8ce961a8d5d92339bc6b38a1cea8820dcc38999cebe9c4f3c30ecdb6b","sha512":"e8d668c7733dcc807d8ac7f693f9a26386555af4b02733dd1c1844f50601d9a1f5182fe185f69302f8a8de70ff69878bfa058b9f9823e5cf86d5b0ae5fa8b067","ssdeep":"384:pfrTkk4drcVm2eo/viccct8VbZHS3YZpIAnEw+Xet:pfaZcV/eoXprtQbQoDxERu","tlshash":"004276c575d1f0a293a76876c06f1c0bf23c2c64a84cac58e4c5e2d9bcb5519c777e2a","first_seen":"2026-08-10T18:28:18.431218Z","last_seen":"2026-08-10T18:48:38.534855Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/lib-BPJfHZJe.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.771Z","timestamp":1786387664771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/lib-BPJfHZJe.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 13422\r\ncf-ray: a2750d2afdaaf46f-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: YmdVlemlyZ:3,t27\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59838,"size_decoded":14254,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59797)","md5":"106219c032d7ea717efc251fdc38bb0a","sha1":"66dd94cb8c4a4d41c49b1c9cbc5cc83ef03eb4d8","sha256":"236ad7c8e3960076531cdac7f07e081e529048ddebaad0d43c8109a9777d2140","sha512":"b7f44064a6a77bab8c33b31f0c7e70bcc8719b46ecf91ed48b97de65b5f900682406c047de270603ec44442a6be961ec3084f4ee0d950c19bb1398e7c4690582","ssdeep":"1536:3F2lD+YGOUC+dpW9ANzMKbta+y71i4UAuHWXGUueejtbvVU2:3FPNgKbta+y0Au2Xaeej5vVU2","tlshash":"1243f9ca779560100bae908614b90543e3aabd9c451e54adf8ee94ef7b8dc41f3b3f24","first_seen":"2026-08-10T18:28:18.37105Z","last_seen":"2026-08-10T18:48:38.537163Z","times_seen":2,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useSolanaWalletStandard-CjbryL0X.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.924Z","timestamp":1786387664924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useSolanaWalletStandard-CjbryL0X.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2592\r\ncf-ray: a28e948b5fca1e57-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:01 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CmAkpebaOs:28338,t39\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6702,"size_decoded":3451,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6641)","md5":"b91e5cf099a2494764bc0cd5dbff87f9","sha1":"4fab534e5dc06683ae234e029abf6928009cc24e","sha256":"bbac4c31732b77d87bbb9577c2e03ab80873ed525f7e9e1640477730c85f0603","sha512":"8cd70787d550f319bee27b65693f5a637c415e16909486a2ebdc617c76696c9c64b00c16caa7b3c7a168bc66584b2e8d5149bcf672812e0f1e69d5cd5a0909fe","ssdeep":"192:UpNq9gufzBkODFGoO+8Bx0WhqNWrpDSILUgph5W0XJHPQb:UBuLusFGosBaUlpDxxJzlQb","tlshash":"dbd10ad52792e3356b6f018e981952d2f32c184a280dc178f2b7ae2e3368442d5f9f77","first_seen":"2026-08-10T18:28:17.979198Z","last_seen":"2026-08-10T18:48:38.53859Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/MobileStoreLinks-DsekRDU7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.941Z","timestamp":1786387664941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/MobileStoreLinks-DsekRDU7.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 547\r\ncf-ray: a28e948b79a03a52-FRA\r\ncf-cache-status: HIT\r\nage: 152\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:22582,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1025,"size_decoded":1391,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (971)","md5":"b64cecd266bb5c0c6b1e01c6623def52","sha1":"af14247845c8129bee2c71f7d064c04cb747f5e1","sha256":"a94c5e4b907f08e5addad52daaa366998f6ed03f31bc3e32da31c79a8f28c62a","sha512":"6b575e946a9564ccceb79d1e35b353f5416e7a10c1e97e6b6ff6e505727096f22227a83ab698842a2be86061a2a2e4814769412c6c02279f5ea582059862ce91","ssdeep":"","tlshash":"7a11658fe810d57f45194cebe006311da31b919cd34016f4e0b912f5a31069bb311f8b","first_seen":"2026-08-10T18:28:18.254885Z","last_seen":"2026-08-10T18:48:38.539531Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useModulePreload-D69htP2x.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.964Z","timestamp":1786387664964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useModulePreload-D69htP2x.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1414\r\ncf-ray: a28f86357e64f47f-FRA\r\ncf-cache-status: HIT\r\nage: 149\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:267,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3439,"size_decoded":2280,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1821)","md5":"9a7d730f07f52eca341542e1cdf6cdb8","sha1":"37554ee1ca3ba44d0f509b6f7f4957a472f7a9af","sha256":"ee98db9493a17280f6e5b43764bc9be9972b524d26f3eec77453db596fa44019","sha512":"c217637f25f780d964e4b3a1a6f3245039251c3bbf1c2c4455cfd95db5f7c31987254b83ff0178c6dbaa242000fb2e38039cbad7017ecf53562d13982ce0de5c","ssdeep":"","tlshash":"ff61dc455a458bad73ae4acc954560d20ae4870a562ac03eff773dfcb4a8d848161ff3","first_seen":"2026-08-10T18:28:18.281063Z","last_seen":"2026-08-10T18:48:38.540551Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/HeroLanding-B42PMYkD.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.607Z","timestamp":1786387668607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/HeroLanding-B42PMYkD.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1319\r\ncf-ray: a28f8669c9475010-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: foOMOfbvjK:189,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3102,"size_decoded":2185,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3053)","md5":"7aa125980f64844e069af0268403d4e1","sha1":"305722900b6134ad17f60fe46dca154ac13a1050","sha256":"5fa03569763cfe7835216b235375ed75188441b51c38196f30b5fe5765b38ba6","sha512":"aee9c5df5db0ce9069611cf18233255cb0ff5253266107c776ef80e8789c26142a3dae9da7be7389fef8fa722a1dbcd0515985bc3489b6181420f01d7f286b65","ssdeep":"","tlshash":"9851474ee43031b8641bccecd5ae092db52ba0accb0965e8e475906443d2649392bfc3","first_seen":"2026-08-10T18:28:18.362302Z","last_seen":"2026-08-10T18:48:38.542441Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ledger-DxB3xkw3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.731Z","timestamp":1786387668731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ledger-DxB3xkw3.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/TrustLanding-LVRL5-gA.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3952\r\ncf-ray: a28f2d22a842db07-FRA\r\ncf-cache-status: HIT\r\nage: 6393\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:798,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9993,"size_decoded":4820,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9949)","md5":"22544417b86c7323b3de6ccb41cc58a4","sha1":"5abcb2bf8989384bbbf8b2d73e73c1105a31fd44","sha256":"69b4ff30a3cfd46747e60c23d36d211d36eed7fc4075f0a4f05e960a0b46a8e7","sha512":"386f00f6a82af295a76c2c2a69a56c6d8800f729ed630e23e51c94e4edd67da63ed6fd652f510f79cb8b6b3568294388464f542a06fa78bf459f273a72221e76","ssdeep":"192:LcZPc2Wsqnuns5LM3IHnSbEdUQk0SHPEXcuIUa11lhSfAX8m/pjpy1ctj:gZPc2QUdOuwPwHPEXX01lcfE8mBXtj","tlshash":"ec22c7fe0b247adcfa4b1b8aaf379488730e50a6b973c590564f577468478d0f607a90","first_seen":"2026-08-10T18:28:17.766776Z","last_seen":"2026-08-10T18:48:38.543518Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/LandingFooter-Ckx_0eCA.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.854Z","timestamp":1786387668854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingFooter-Ckx_0eCA.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/LandingFooter-Ckx_0eCA.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/metrics/Al8Q_t8UHWOKWWAMy9Tj3DX5apVlZ1ehlVdcVHRRqvzwoU-8i5fI","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:50.157Z","timestamp":1786387670157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /metrics/Al8Q_t8UHWOKWWAMy9Tj3DX5apVlZ1ehlVdcVHRRqvzwoU-8i5fI HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 542722\r\naccess-control-allow-headers: Cache-Control\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2912bdaebeb8824-PRG\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:71:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:71:0\r\ncross-origin-resource-policy: cross-origin\r\nexpires: 0\r\nreport-to: {\"group\":\"ascgsrsghrgc:71:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:71:0\"}],}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npragma: no-cache\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Link-yLsqG-H5.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.826Z","timestamp":1786387664826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Link-yLsqG-H5.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 838\r\ncf-ray: a28e93904bf9d384-FRA\r\ncf-cache-status: HIT\r\nage: 131\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: IJnWhnEbBr:20622,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2208,"size_decoded":1681,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2166)","md5":"3c97ad33da87a573a6017100377b2f6f","sha1":"9ade8a66bb07d764fa2ce85f9317ca02427945cd","sha256":"fd5e9bafaa356eb13c052bbdd5c507740e4cec0e4da42b696e176120bd122d77","sha512":"34e65245f0da8b7e76c2fc6da890edfb6398190ade114d88a293268a6df5d09649b6d23ca60d2f960d383074bf327ceedfad7ced161449bb13b19a5d8fbbd896","ssdeep":"","tlshash":"f74163b5fe74707ce93bc00e906a857da683a050bb4f4ad5e360586da3701d4f31af49","first_seen":"2026-08-10T18:28:17.713795Z","last_seen":"2026-08-10T18:48:38.544344Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/getSelectedPaymentMethodUnit-Dl_CIGwv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.923Z","timestamp":1786387664923,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/getSelectedPaymentMethodUnit-Dl_CIGwv.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 331\r\ncf-ray: a28f86350accdcc4-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:2455,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":581,"size_decoded":1199,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (515)","md5":"919b2fb13df62aab09a4903c39002351","sha1":"20651f76aa08b33708017b7f7a20ce3e7461b7db","sha256":"23a386c7d3ff5ff5818890ebc7a5a5750e8aeb96ae88e37c12f4e7c983c4c9a7","sha512":"cec6978a8c7a6e43b53aa02b8469735146ddc4eeb89ef8c47bc4b46b9601f4823763b498b13d1d75aa1050dfe0d64d043caa29f0e45b0e0efee14aeaedfbe6f5","ssdeep":"","tlshash":"f4f04c8cb8ee00a1b08ded9c80331e9ae715f5765413a89018cb1d180322b63cb84bb5","first_seen":"2026-08-10T18:28:18.131983Z","last_seen":"2026-08-10T18:48:38.546033Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/_patched_static/cart-storage-enrichment.js?v=cart-storage-20260801-no-empty-clobber","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.969Z","timestamp":1786387664969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /_patched_static/cart-storage-enrichment.js?v=cart-storage-20260801-no-empty-clobber HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 10006\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10006,"size_decoded":10296,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"d0d7b955544c6d0424f5d3fee19b2e46","sha1":"a500588292a9f4ce4c5fff862abe4525cd02c0cf","sha256":"dff6783f116ac92302b2597ead2009d28699acadeda5f4f568561240425d0ab6","sha512":"a7b8dd814673c24ec0fa542538887bc9d9fae468e2a2851bb5072eac07150ae31b2e0c218a62d08505993d5794c10ccc31b7dd59c0879243fc8f9579972598a3","ssdeep":"192:kV7micyY+qlw3KFZBKvDUTSV2xZe94nIS/iQqWsB:k0rYDUOVSZeKnlpG","tlshash":"8522218864f3b021c963307d6e5f98597834f413b80eda857a0dc710af5ea679372b8e","first_seen":"2026-08-10T18:28:18.017033Z","last_seen":"2026-08-10T18:48:38.551291Z","times_seen":2,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/_mirror_core/bootstrap/profile","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.688Z","timestamp":1786387665688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"POST /_mirror_core/bootstrap/profile HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\ncontent-type: text/plain;charset=UTF-8\r\nContent-Length: 320\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":320,"data":"{\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"languages\":[\"en-US\",\"en\"],\"language\":\"en-US\",\"viewport_width\":1280,\"viewport_height\":1024,\"dpr\":1,\"timezone\":\"UTC\",\"platform\":\"Linux x86_64\",\"color_scheme\":\"light\",\"screen_width\":1280,\"screen_height\":1024,\"touch_points\":0}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 11\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":299,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-08-11T00:45:11.243353Z","times_seen":18117,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CtaLanding-nL8S_QwI.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.337Z","timestamp":1786387668337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CtaLanding-nL8S_QwI.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 814\r\ncf-ray: a28f3405d81e382c-FRA\r\ncf-cache-status: HIT\r\nage: 846662\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:24542,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3371,"size_decoded":1654,"mime_type":"text/css","magic":"ASCII text, with very long lines (3370)","md5":"fcb71b0b9bd0cd5df7c4e7567c904b5b","sha1":"236005e9c42a4f87c6d60b912206cf0a454f7521","sha256":"aa8e7842f1f538c69ab904e8a6b09d591daeac0c24d4b5f073ee3393386bfc15","sha512":"c3df221d913f02179e4537a076f22fec5d8c1fb0a759c34e872a3f45d05d8a250169b8a650a1f333eab793911ce1139d50333f0518a2edd66bc35b2f8d7c38e8","ssdeep":"","tlshash":"9e61dd99a1d2e37dac27e02965fe238c43d55129cbcb75deb834b26c43c72e2583b605","first_seen":"2026-05-31T11:11:55.932445Z","last_seen":"2026-08-10T18:48:38.554254Z","times_seen":7,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ValuePropositionItems-Bfjp9s_M.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.610Z","timestamp":1786387668610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ValuePropositionItems-Bfjp9s_M.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 371\r\ncf-ray: a28f2d21291bdbea-FRA\r\ncf-cache-status: HIT\r\nage: 6394\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:04 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:1321,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":687,"size_decoded":1241,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (628)","md5":"2e4d6ca89528676e05294320d6824af5","sha1":"ed06568de5a09455b4ec9494594bde1490ab2638","sha256":"7976b8acbde06537dd2d7443c020026bc22b6c2ae8d66395d7e6323fff56cfd9","sha512":"e528ab35c3b723e7db919eece482df921d8ace9bf429964d7bef125baba4b7063b63c5b9919f447141c114096a21a46dd9e709defe255b1181e352094db2f1cd","ssdeep":"","tlshash":"13019c05c7b035fb481d19e9a9dc648e5711948cd3e1271af08d985027512d278b7f64","first_seen":"2026-08-10T18:28:18.003271Z","last_seen":"2026-08-10T18:48:38.554983Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/omni?country=NO\u0026s=1\u0026limit=8\u0026exclude_bill_pay_products=1\u0026exclude_out_of_stock=1","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.973Z","timestamp":1786387669973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/omni?country=NO\u0026s=1\u0026limit=8\u0026exclude_bill_pay_products=1\u0026exclude_out_of_stock=1 HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nX-Rel: cbbcd5c33ba171317476fbc5fbe9b33976e00d1e\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 10131\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2912bd9db628824-PRG\r\ncontent-language: en\r\netag: W/\"2793-5pVJDdjsF/yjt7G5zX17k8a6weg\"\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-cfw: mMamnrwzVJ:65,t45\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-robots-tag: noindex, noindex\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10131,"size_decoded":10865,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ba07f43263428c92956862e0b83d02cc","sha1":"e695490dd8ec17fca3b7b1b9cd7d7b93c6bac1e8","sha256":"bfb1b62746c595111703b7d2082c5bf9755683ce7a7d0e80d8f1795a3bab69f1","sha512":"eb036dfa67da2de07600b4979728421c2ff605425c0d4a4acb4cb278aedb8b761cf549dfe6d2dec396f6ed49ef70fbfed1992a7c71532a1bbc8b57f49f222a36","ssdeep":"192:njoJ6EHKXJ6pr9tRppqehlBGKSgtTjRxmwobTzkL7AZ7evZ:kLH+6pfRmm/1BoQOsZ","tlshash":"5222956cc80c0c7aef8901a470c33f2b4fec6195e5694ee5d8fc5ae451da37b0662e66","first_seen":"2026-08-10T18:48:38.557057Z","last_seen":"2026-08-10T18:48:38.557057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/product/steam-usa","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:51.681Z","timestamp":1786387671681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/product/steam-usa HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nX-Rel: cbbcd5c33ba171317476fbc5fbe9b33976e00d1e\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 63014\r\nage: 50\r\ncf-cache-status: HIT\r\ncf-ray: a2912be468ca8824-PRG\r\ncontent-language: en\r\netag: W/\"f626-oY2/I2kPTMR4TJE6aSM9g4huuHY\"\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-cfw: FSyZsVnrNc:137,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-robots-tag: noindex, noindex\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63014,"size_decoded":63753,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f073bef62964cd5f172a0b340bef0b90","sha1":"a18dbf23690f4cc4784c913a69233d83886eb876","sha256":"cf12b7f6e314f5d6afb7b832f9f33352f4f9ace59b32f31945c10c2fb9ca6365","sha512":"61c35409479a8465ad004d7a21bacd761082316ab3569b0270b3d85885105df4ba58ece0793394a98ae063281d81be211db27265073843503b9fc40bef827aa8","ssdeep":"1536:WkoGLj53wq1euZ1QcGD/a3TYbeHKRLwiNPxTl4i+gUkmc:wqgyTYQM4iXr","tlshash":"a2537de488d90878c76152d82c777f672d7d207ba180eed6f4cd8f99a0f929b213581b","first_seen":"2026-08-10T18:28:18.332406Z","last_seen":"2026-08-10T18:48:38.559601Z","times_seen":2,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/parse-DAKSBcq5.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.468Z","timestamp":1786387665468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/parse-DAKSBcq5.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/invoice-D2GxQfAn.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27887\r\ncf-ray: a2750d2a0b913a86-FRA\r\ncf-cache-status: HIT\r\nage: 195\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:51:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: JZBXrKgoTU:7545,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115820,"size_decoded":28756,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"36ab9f743fc1c43861b328e5d24f1c0c","sha1":"e551e5d733ab7d1251bd5e4cead081331b0af2c8","sha256":"bf203a02510b65b44cbb6826b795adcadd27d2f4845519646e3d957a3f24be70","sha512":"77a55d10c320adf289a00a1e0e9a72c3832f1fffa95dce7601da683aaef8371f2f7b2ca7a8b996564e6748657201b30c43c710fbb546669d7fc60403022beed9","ssdeep":"1536:4h0ttE45Z8jbOGTio27Hi8zLb1pLMlABEJO5RkeiALYt3hMENfvwax7OzT:C03E4v8jcJ1xM5LrALYFPwi7e","tlshash":"68b343fbba80a3b7b6f53a188615424c8a4ecc5eec8d180d5ee6f89b5d7051434bc71e","first_seen":"2026-08-10T18:28:18.015703Z","last_seen":"2026-08-10T18:48:38.390028Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/redux-toolkit.modern-J_LcuY4w.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.778Z","timestamp":1786387664778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/redux-toolkit.modern-J_LcuY4w.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2213\r\ncf-ray: a2750d2c4c250388-VIE\r\ncf-cache-status: HIT\r\nage: 137\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: detpTGPkFl:4582,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5435,"size_decoded":3056,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5377)","md5":"23869cb9cd858951f16c5424d88c9a28","sha1":"49f569410888870756fbd2afe509346af4937f03","sha256":"687236948b6207de6f64449ff5ffbe8b009f5a9c3bdb75c62ab49e98b436df34","sha512":"56cbf172f6c896909a592dd4dc5355be021934df9796875d91aabc934771b2de630f337c0bab2a1bbc60e5bb5e701582408eadac378f0634b09177e4200ff9bd","ssdeep":"96:GGLmIXXAC2VVdsYeKpN6kYgypUBVkmCkqjACK4AxRVAR28OtsLD:DRkVVds5KBYppBAHVARgtG","tlshash":"3eb1b6e9b7d1b0b397ab4863443f5c16f13d25aa009d6400d792a4b66df0d1eca1af2e","first_seen":"2026-08-10T18:28:17.846133Z","last_seen":"2026-08-10T18:48:38.560829Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Card-B5veHcdd.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.752Z","timestamp":1786387669752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Card-B5veHcdd.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 425\r\ncf-ray: a28f340579be9274-FRA\r\ncf-cache-status: HIT\r\nage: 1751408\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 20 Jul 2026 17:20:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:891,t25\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1255,"size_decoded":1264,"mime_type":"text/css","magic":"ASCII text, with very long lines (1254)","md5":"c03df6c0a5630bc73742869b308f1f1b","sha1":"1ddac06343f73c45d16809f73618c09704001084","sha256":"012105e7bfddd5b636e8bd11195625c91cafbd09d3cffe557f2080a64aa759e6","sha512":"1c57c624473b7303a9b81fd7f3ebbbea61c5e7a23c345e651d843ee27b9703c68a730a68e04f897399f8bcd4fc066a63dbd65693b7397307b01d21e1bd8b1633","ssdeep":"","tlshash":"29216be5594bd33c9ca78a156b9f45ac124b3563bfc224dff892329551cafd100a215c","first_seen":"2026-05-31T11:11:55.878072Z","last_seen":"2026-08-10T18:48:38.56196Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/_patched_static/login-country-popover-guard.js?v=country-popover-20260620","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.625Z","timestamp":1786387664625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /_patched_static/login-country-popover-guard.js?v=country-popover-20260620 HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 6371\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6371,"size_decoded":6660,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"ad4b160573412b71d327ebbbcea31d96","sha1":"2992e0fad7eafc2ffc61abf4e73727e1fd183c24","sha256":"7f420ebe8fc1020cc07ad65fedaf39df69c26367e52a1686d7e6a7f3fde515e3","sha512":"6aeb823ba3c23507b0afb47d0336eab8d1aaf9f3767d841c2fe9f9c14518d920cce43ef216789a0545d6adb9aab2555a21c5ecc3832ff8bff68a6e763492f931","ssdeep":"192:vobpar7agyCMKtJHt7E2yO9gZuK6cIjU8rzOeW:voNar7OCMK1E+9gEK6c5PeW","tlshash":"9fd182ee60b731351573303d578b5249b92290173a06dc483d9f87891fa2d29e2b7bc9","first_seen":"2026-08-10T18:28:17.880435Z","last_seen":"2026-08-10T18:48:38.563056Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Stack-DwHNhaFJ.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.637Z","timestamp":1786387664637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Stack-DwHNhaFJ.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 764\r\ncf-ray: a28f34054cc74db8-FRA\r\ncf-cache-status: HIT\r\nage: 2787509\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 05:33:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50068,t38\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5202,"size_decoded":1605,"mime_type":"text/css","magic":"ASCII text, with very long lines (5201)","md5":"22c2b3620e67ed690ba7392b9a692bdd","sha1":"10f5685f02f58f913a7afb8b86d31b4939373880","sha256":"50756ecefb7f7ee91adee51693b12cb985dd1a1129ac0dc180ebbc5f2f8ed56b","sha512":"232d30b91c7987a802cdda2f560fd7243c28900b750e03eba1e84d1c4055a2c3802ac4381d8a178dcd13d2c2ece91d4059732b5dce093d33ffe4a9f6258e9ded","ssdeep":"96:d0mluZUmtbBB/VwBRwz13B820p3a8F8q56r4q7obDKo62pUA8+QKZwcM7:lE10Rwz13B820tXF8q5M4q7wD/a","tlshash":"49b129593cf34a3e4fef850425ba7515c3b7acd8c82510c42f9fa2570ad7bab17a2588","first_seen":"2026-04-30T03:12:06.017331Z","last_seen":"2026-08-10T18:48:38.564117Z","times_seen":14,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SuggestedCountryPopover-CB--Yj8E.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.655Z","timestamp":1786387664655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SuggestedCountryPopover-CB--Yj8E.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 272\r\ncf-ray: a28f34057a33dbea-FRA\r\ncf-cache-status: HIT\r\nage: 5101600\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: ko\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:1461,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432,"size_decoded":1114,"mime_type":"text/css","magic":"ASCII text, with very long lines (431)","md5":"fc16553cd86cd1e02e4c066e75d6856f","sha1":"364f9ecead53f6c9e6d87c844bceae7b75b2c410","sha256":"47649b7fa3cc6c19d0feabe4526acc8a553d539de24a2db31e59b7841666d25b","sha512":"9e3e7454fc80352b232a60417921ab5ceaaa9d8a4da9878354ce7467733a15fdd5d50059cb5500dd8a04b3cef09df7f6a27564cf9067ed5a92b78858ab27930d","ssdeep":"","tlshash":"1fe05cf58618473d8d76b00ae3cdaadea101150eab1305d3e453711452c2ff20c87986","first_seen":"2026-04-30T03:12:06.130491Z","last_seen":"2026-08-10T18:48:38.564928Z","times_seen":14,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ImageColumnsLanding-CTesZ2wj.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.695Z","timestamp":1786387664695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ImageColumnsLanding-CTesZ2wj.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 414\r\ncf-ray: a28f3405ea97f51f-FRA\r\ncf-cache-status: HIT\r\nage: 2765674\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 10:13:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: huhItYZPXB:2058,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":919,"size_decoded":1255,"mime_type":"text/css","magic":"ASCII text, with very long lines (918)","md5":"616b645a3dcec3566d820d3462285676","sha1":"9ddd1a4360859d4ac7d2a1a71725006a749ccb24","sha256":"30055d8315b8f83e49cea3d94420f265a18b16ced912667b63dd67ffdc9f9691","sha512":"419750e2be08b49aa6024b31dc5222059db6b130ddeb926a3a4d7be701362c6a52e4cc6495ce6395bf760fe66383498fc69a9c8da062d581279542cda9128ef4","ssdeep":"","tlshash":"f4115e554905a03d8c7ff505e3eda5edb270a704de5751f49400226443d6ff2091791b","first_seen":"2026-06-11T21:29:59.590552Z","last_seen":"2026-08-10T18:48:38.565696Z","times_seen":6,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/polyfills-CZmxIG97.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.708Z","timestamp":1786387664708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/polyfills-CZmxIG97.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 24177\r\ncf-ray: a1e0b005c8b8e010-FRA\r\ncf-cache-status: HIT\r\nage: 91\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 20 Jul 2026 08:44:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: nqDLowEoGc:17,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73240,"size_decoded":25043,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"833f5d0b0541d08a9938308d1913dc41","sha1":"838da3a61167f5915c8e525be186f5e1592f1aa8","sha256":"c6a3607b48a3f43d741b4c96f324168c3f0b82b7b603dc77524d5b185d4eaa26","sha512":"93115063d64a05c7fefdc5953f71535c4b5befd4f5545205d031c036d23a8e13196ec57fd4cbc8a453aa6ad14c3d73c04d80e64ff9434aa0a3ed322875c0c6ff","ssdeep":"768:J1nhWxyE5fHDRUkepkNmP8PrdKhAm6mN/ZaVlQP3LaQugPzU:J1wMksP8Jm3+Qq","tlshash":"8f63a686bad5b0e502b7b559402f4407b3261a45bc0ec4a8f27fe9d078bdc499136fbe","first_seen":"2026-08-10T18:28:18.014295Z","last_seen":"2026-08-10T18:48:38.566433Z","times_seen":2,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Card-zuDPC8aD.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.857Z","timestamp":1786387664857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Card-zuDPC8aD.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 558\r\ncf-ray: a28e93d10d45d2c6-FRA\r\ncf-cache-status: HIT\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VRZgCclaWe:1534,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1072,"size_decoded":1401,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1030)","md5":"4f99f699f30d9e01711cf61a01af6c17","sha1":"b83d418ec7b4492fb61d6c3d7e1a85beb4146570","sha256":"5295d156c4461562c8c5a77c1b5b6462dcc310d31340c8917655b0dfc6ab088d","sha512":"6b807e0429b7c521fed2f9fe4990f1c9b1db2c87343d586c2d56dfea82a635038200fecc1555a94b4363b5cc863bc3c9a072070589a4398a6aae3f6f4c0b7971","ssdeep":"","tlshash":"f81146e67ce10079a02fc8ea319e0eaa62007895ef815b1af097f560e6164b4aba0d15","first_seen":"2026-08-10T18:28:17.943199Z","last_seen":"2026-08-10T18:48:38.567864Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/fiat-only-mode-BOujwpke.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.947Z","timestamp":1786387664947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/fiat-only-mode-BOujwpke.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 376\r\ncf-ray: a28f8634ffb777d1-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:265,t15\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":562,"size_decoded":1220,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (510)","md5":"a408d9f31129152ea0a41db8e8c13c19","sha1":"c67bd9bfcb7e52eb3529e8bcc684ec7e7fbfc255","sha256":"8aaec0f952b7f4f565a98b1dd5c79d505e5dfaba17701e4919bfe87f46830168","sha512":"9f5fcd64a5e5eb5587fb67d8a21adbd0a85850d40da04aa88ff0365b96bbfa54b79c836a6beb022eef23ef57913a17dbadacc386e0c7f355a9eb6bf4818a9aab","ssdeep":"","tlshash":"62f0e16df0e23874220a4cf9c0153eff831c945c5744244ad06691d06f65cbbd30bd2d","first_seen":"2026-08-10T18:28:18.01238Z","last_seen":"2026-08-10T18:48:38.569306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/TextLanding-DFkYqn6N.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.698Z","timestamp":1786387664698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/TextLanding-DFkYqn6N.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 238\r\ncf-ray: a28f34062849382c-FRA\r\ncf-cache-status: HIT\r\nage: 2792982\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 08 Jul 2026 13:10:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:24543,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":566,"size_decoded":1080,"mime_type":"text/css","magic":"ASCII text, with very long lines (565)","md5":"b4d912eb4964875c62cf3d5e3c4e8d1b","sha1":"53dab89e3f9fa9e4ded6291da2b1236c9851c524","sha256":"5fe55cf9d8fe1a9d8a21857eeb541435d124f8416ad6d089324e136664f67168","sha512":"9b00ebe8c1ca5678d9ceb7f33fa7c3c91695b529d370e7f7decb190ea5c528221862769f46e007befe7bdde61f8f584929aa5c0ca6c153dc6b841470cbe732d5","ssdeep":"","tlshash":"69f0e735eca7d634a797e434b962279f12c3ee09650380d9ef699689ef4415f3839240","first_seen":"2026-05-10T06:59:24.744943Z","last_seen":"2026-08-10T18:48:38.570712Z","times_seen":9,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SuggestedCountryPopover-t83-wcfn.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.870Z","timestamp":1786387664870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SuggestedCountryPopover-t83-wcfn.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1461\r\ncf-ray: a28f8634ae8877d1-FRA\r\ncf-cache-status: HIT\r\nage: 152\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:263,t16\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3151,"size_decoded":2328,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3080)","md5":"7a6c15138e31dcc31744c4be706c3ace","sha1":"054b249b4238244623f57b9700db90328ce2bd5d","sha256":"28698de241048c1c0b91b0d65bcb9edd01a7d256e225816eae4c8a010ed00747","sha512":"9a9c81b188c83de5787394a3b8ff46ad64e2aecfaba233394580ea8a1e00ea19dc92fb0312b513d502afffe86842d232a525ff6f2165eee698573dd8d5b1149e","ssdeep":"","tlshash":"b851780fc8a42bf8b45b99ece025913a676794bc870910d070eb17d423579caf98bf83","first_seen":"2026-08-10T18:28:18.031475Z","last_seen":"2026-08-10T18:48:38.571942Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu.i.posthog.com/s/","fqdn":"eu.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"18.158.90.132","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:59.776Z","timestamp":1786387679776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:B5:42:B0:EF:B1:77:97:C3:FF:B8:89:87:B5:A3:F4:32:08:FE:27","sha256":"BF:C3:D3:B1:0B:53:D4:58:C2:A8:1F:37:4C:D0:F6:A2:F8:E0:1E:BB:05:FA:53:84:BA:CC:BF:1D:78:D1:F7:A5"}}},"request":{"raw":"POST /s/ HTTP/1.1\r\nHost: eu.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: text/plain\r\nContent-Length: 833\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1244,"data":"\u001f‹\b\u0000\u0000\u0000\u0000\u0000\u0000\u0003íTÛnÛ8\u0010ý\u0017¡èS\u0014‹ºQ2\u0010ìn‹\u0006E»MƒÝ\\Š\u0014A‘#›‰MjI*‰\u001cäßw(¹µ\u001d'Ø¢X\u0014}è›t\u000eç\u003es\u003eß\u0007m+E0\u000e\"RÖ ¢(¬ CZFUX±\u003c\u000fã\u0004˜\u0010‚§9¯‚½\u0000n@9|þÂ*Öؙvˆ5F7`œ\u0004\u001bŒï×̤꜇hA÷6PÁ\u001c\u000bƟï\u0003×5\u0010Œó½`@îƒfÞN¥BçÆÜB5Rànµ¹þø\u0010¬›k\u0026ü+\u0003ÿ´`í}(¶@\u001fÁ̹ƎG£J:0õrŸëň5rÄ8×­rvęq£«›e\u0011J§N‹»ë2=ÿôþÓü\u0003}g/~ã­1 xwðæô¯—sÍÙüP2÷z\u000bejÚ²)\u001c€zÙû4ÝÁÑGß\u0010ÿyҗ‚©YÝ\u001a\u000e\b[‡\u0011O¤ÏŽ\u0010\u0012•Xek˜“\u001aëKðO*é0†6+Ó\u001a\u001cŸ¡‚;÷V7ÇF;ÍõÜ×\u0016#ì\u001b\u0001æoï4\u0018G{\u0018IH\u0003Üí\"o”èÿ{‡+úK\u0006zÁ¤úSëë¶yžé\u001d¬p®•ZGÙ\u00067ßYÀ\u0016ÂëÀ\u001a·\rV\u0013[ƒ$ö m´²°FÓb~qî1g˜²5V/—Ø©”f¾é\\\u000b\u0010¯´è\u0006”xTÀSèF ×âÖÄQÔ×àpr«æ³¦™KÞOgteqD¾\"s\u0003\u0006\u0007(Õ\u00147íÒÇ\u0014_çÙ§…?\u001fì7–Ð\"O\nšçIFˁÂ\u0005X4k†¦yQ\u003c\\\u003e\u003c\u003câíÃ¥?\u0013°\u0016Әlßd\tP†4\u0017\u003c,xœ„Dd9¡1æ\u0001\fs}q+•Ð·ÿiCS–f¼ä©·™Ë\n_㝭~\u0026X®í×3 û)ÉöýÙ­¯v¦­?û\u0003CÚékð\u0006͌Oî\u0016oÿxµ\\žå7ÇUmËòê¼8\u003c¼8=‚³éñìü=jËîý¢û°8ë¬÷Œ\u0013¨åt\" fíÜ_s\u0010Gq\u001eFY˜DÈ\u000biTÜí\u0014%ꡨ²* $¼È*\u0016E\u0015\u0015\u003cÀÖ꺶€y\u0026Q\u0014û\u0019*7aî«ë\"$Ñ\t)p…ÆY¹Oi|6»\u0002È˚…4æ\u0004\u001bÇEÈò˜¤\u0015dyUå¿\u0004ð»\u00040%$Ù\u0014À”üh\u0001\\eð„\u0000î2ƒö\fø#\u0001Ü\u00027ß='€\u0003ûH\u0000\u0011Ìw\u0005\u0010o.},€\u0003öÓ\tà*­§\u0005°ˆž–8š—Éó\u0002HiB\tàÿ'€é·Éßå¿sÜîø\u0001\n\u0000\u0000"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 18:48:00 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://biterfz.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 477\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":421,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-08-11T01:03:22.2501Z","times_seen":44155,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Alert-DHJd2UpQ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.820Z","timestamp":1786387664820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Alert-DHJd2UpQ.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1713\r\ncf-ray: a28f8633fcc66eeb-CDG\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:59 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tWZjNIthpZ:45962,t20\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5848,"size_decoded":2572,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5805)","md5":"fedc4aee2390d90dc7008a6fed101606","sha1":"0b745b4d90b09ffc08623d4b89cb47b004782710","sha256":"72a8a0614c01a0aefe28969cd7602bf95754211f806e7a65c9d10fa9ee7a09fd","sha512":"17af8dcfec1e6a10ff85987e4d7defe9531f4ce8eb677285730bc7d73040cbd20b22711faece6b16feb3153564d5054f9389c203d51d90bdfd6574a2f45b7b94","ssdeep":"96:bnj+Ge4SH42FG6nV442F7s61kH6COc042F7s61k6Q42Fqk61kHgNFwb3XYikle+7:3+Ge4SH4AG6nV44AI61kaCOc04AI61kk","tlshash":"7dc175a655a429f4e83a9b5c926ab06ff31fb8786b4f1c34e2cc5c1837111c8255bfc2","first_seen":"2026-08-10T18:28:18.078954Z","last_seen":"2026-08-10T18:48:38.573344Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Backdrop-D_AX3qAO.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.847Z","timestamp":1786387664847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Backdrop-D_AX3qAO.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 431\r\ncf-ray: a28e93d1098914c6-CDG\r\ncf-cache-status: HIT\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:13:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tNeegAMkVR:82,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":630,"size_decoded":1297,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (584)","md5":"060e5d1bdd304d7d016bd0a8765e85d3","sha1":"7c58b9ad9d1f05feed33a1e2f37d8ef2e3313150","sha256":"d1bd96c38b663caff490eed88828c428b44b8c263fdcc1fe64df563b3ae25210","sha512":"ee1b935c85c84bbc217868758c89c37e39b34403247492d5ff97c88d3d35d651ceebba315c76b1b8f158ae69027850755e135753459847ca0f34ec0ae663a7d9","ssdeep":"","tlshash":"bbf0d399dce00876415b98fdd04f1653732990f4d3566edc60ec25581351ac8e85ef10","first_seen":"2026-08-10T18:28:17.949712Z","last_seen":"2026-08-10T18:48:38.574733Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Tag-BXSBGgBy.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.859Z","timestamp":1786387664859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Tag-BXSBGgBy.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 483\r\ncf-ray: a28f86347c1bcb3f-FRA\r\ncf-cache-status: HIT\r\nage: 154\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:54,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":819,"size_decoded":1350,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (778)","md5":"8875e4eb511f707afce690b114855205","sha1":"ef17bf3e12c1b8f409b131d7824632fe8c62721b","sha256":"a478f37338d959325697268e3a12daeb71ec845c487205caa9c615439abebe7c","sha512":"1ce38bdb030f1baf68ea94fad50f10055165819aae6aea48f5d8e0f678ce872a3f4b7ac363a97a2f5351cff3b0722a7fb6622938c3bccebf31064a860ce854f3","ssdeep":"","tlshash":"37016b4a909826fab00659fdc06b046f6b3b9199934e1eb5a42564a013314b67627f82","first_seen":"2026-08-10T18:28:17.883251Z","last_seen":"2026-08-10T18:48:38.5759Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/triangle-alert-BeOnRkwa.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.880Z","timestamp":1786387664880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/triangle-alert-BeOnRkwa.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 392\r\ncf-ray: a28e93d22918d2c6-FRA\r\ncf-cache-status: HIT\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VRZgCclaWe:1535,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":574,"size_decoded":1236,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (522)","md5":"a066ef9e31a93b98a51c1c9a43919c59","sha1":"98831e8204ff1d8cdd7a385949deafed25819206","sha256":"cb7ccf0fcbf740d8a80fb561d34152d5fd56c75eedc17128489ebbaba9f6e468","sha512":"69ac94646ab55d40e2ae90faec2934ddd262008c2f4784b66a8ec6f2eb919ff782b506cbee5f941bd30c51bb709d7f660f9e18cba789f66c4010719d5f14aab0","ssdeep":"","tlshash":"97f0ac0ede5a0dbca01a0dac6a5de60fabaf80b0fb562519f74c11741310480c727fc0","first_seen":"2026-08-10T18:28:17.850522Z","last_seen":"2026-08-10T18:48:38.577317Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useCardUserInfo-BPLCRMyP.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.918Z","timestamp":1786387664918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useCardUserInfo-BPLCRMyP.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 370\r\ncf-ray: a28f86352ffa9b98-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:10076,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521,"size_decoded":1239,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (468)","md5":"a49bfbc3efd2b812cfa39d4ca03b3deb","sha1":"ef483169092b7c215a190817dcf809c2ef06d70d","sha256":"6b780a5bbb1decf9319a8e12b8c178f91ea3331d626d3047dd716fe7e5c76a32","sha512":"df6d7544d73d6463d6ed542850320013fdc80158de5a3ac7b3fa22228c1ceaad17444f550d35e917a793457dcab787208cf4c9a17f4d3281a019a6fe3d074e6b","ssdeep":"","tlshash":"dff00587d49414ee580d8e05c1760a495bd074a2f117ef8cd5e045795339362ad92e13","first_seen":"2026-08-10T18:28:18.092041Z","last_seen":"2026-08-10T18:48:38.57842Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/landing-BOVSBFrY.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.240Z","timestamp":1786387668240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/landing-BOVSBFrY.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/landing-BOVSBFrY.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SuggestedCountryPopover-CB--Yj8E.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.364Z","timestamp":1786387668364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SuggestedCountryPopover-CB--Yj8E.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 272\r\ncf-ray: a28f34057a33dbea-FRA\r\ncf-cache-status: HIT\r\nage: 5101600\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: ko\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:1461,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":432,"size_decoded":1114,"mime_type":"text/css","magic":"ASCII text, with very long lines (431)","md5":"fc16553cd86cd1e02e4c066e75d6856f","sha1":"364f9ecead53f6c9e6d87c844bceae7b75b2c410","sha256":"47649b7fa3cc6c19d0feabe4526acc8a553d539de24a2db31e59b7841666d25b","sha512":"9e3e7454fc80352b232a60417921ab5ceaaa9d8a4da9878354ce7467733a15fdd5d50059cb5500dd8a04b3cef09df7f6a27564cf9067ed5a92b78858ab27930d","ssdeep":"","tlshash":"1fe05cf58618473d8d76b00ae3cdaadea101150eab1305d3e453711452c2ff20c87986","first_seen":"2026-04-30T03:12:06.130491Z","last_seen":"2026-08-10T18:48:38.564928Z","times_seen":14,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CtaLanding-UPW_JphA.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.618Z","timestamp":1786387668618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CtaLanding-UPW_JphA.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1998\r\ncf-ray: a28f8669b90a4d95-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:51740,t20\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5088,"size_decoded":2843,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5040)","md5":"a4280ae4fde3d123054136c8a14fd4ae","sha1":"1318269b0c8267eb884440f16bd209d8442abb64","sha256":"23860c03f6aadd08c088bffe89486bef114aa54f17df1f98c12d6298cc02ebd9","sha512":"860e7265020cb6d4540589c2674881eb363fff06e080d753c4053d2979961ad059ec78b72725e75fe105796ef270741f06dba6f3be7fced916a03222c58065b4","ssdeep":"96:UU3+5BAe608J68YM0dT+CuooqLD6/TkwJ10UnKGnwLP86lpKjqakOMJ:vR02UdT+CX1GvrG86lpK2akPJ","tlshash":"0ba17486e0e476fa641748acc0bf422d72a990bcc78ca2edf4b955580381599372ffc7","first_seen":"2026-08-10T18:28:18.245995Z","last_seen":"2026-08-10T18:48:38.579418Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/card-BDPBJvQ7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.854Z","timestamp":1786387664854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/card-BDPBJvQ7.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 697\r\ncf-ray: a2750d2eb8bc9191-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lCcPRSqkmX:60,t31\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1582,"size_decoded":1528,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1532)","md5":"e77b906d95fe39432af762aaeb22f1a1","sha1":"1ed7629d357411e7f77f094ac737b3660e4871f7","sha256":"528789adab8ef709ae82e219871d8a4dbe94fece9030b7a5b43d40abf90bc9bc","sha512":"6b4ccc6dab3626326ef6fdad2728401d8e9130f7bd5b764159e2d9fed1fa91ed346d1dc6491631a308e55aff504636ec225f3776f3c0df73d81986c9eebc1953","ssdeep":"","tlshash":"2d3123d5b9423a7d53c7471e81f59040d26576e96c4f19eed88cf3192a33ba443f0a92","first_seen":"2026-08-10T18:28:17.761151Z","last_seen":"2026-08-10T18:48:38.580458Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingSection-B8VvHNsq.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.962Z","timestamp":1786387664962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingSection-B8VvHNsq.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 565\r\ncf-ray: a28e948b6d5f9274-FRA\r\ncf-cache-status: HIT\r\nage: 152\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:322,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1104,"size_decoded":1431,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1052)","md5":"f22b3b00d5eaf3208a78368d0133d97e","sha1":"d78f9efe4795917633f64d281d2ee471182e2b8e","sha256":"2b2a40f0bc21ede60060113319765bfbd48e6314d24a2fca0371948f5dc85e8b","sha512":"c9bff2b733276e8a0fee7c93e3c23a2154375793ab2bf074cbb9123eb55eaa5b631e33350650dc494740e7f53b8ba186d182a43fa9d3fd165a776e9f19757f7f","ssdeep":"","tlshash":"44111155a0e2bafc6467a5f6d01924a7633af1ace3050c19913822b81761bc46409f8f","first_seen":"2026-08-10T18:28:17.903138Z","last_seen":"2026-08-10T18:48:38.581458Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/product/wolt-no","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:51.129Z","timestamp":1786387671129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/product/wolt-no HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nX-Rel: cbbcd5c33ba171317476fbc5fbe9b33976e00d1e\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 41019\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a2912be0ef298824-PRG\r\ncontent-language: en\r\netag: W/\"a03b-Y9JvqlhSBCOFzUIDmO4Sluf973Q\"\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-cfw: FSyZsVnrNc:135,t75\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-robots-tag: noindex, noindex\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41019,"size_decoded":41758,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ecedb4cf35f0982e7b1df85e06189fab","sha1":"63d26faa5852042385cd420398ee1296e7fdef74","sha256":"85433976c3a05f12e69b114a123710b6e13d82d4b2114eea6b07a750b26c0907","sha512":"5ec8b5d448cc49e369dd96517a68bc1da889c3184d43f30049c56211f0d08e123c28ec1f736fae3f3eb68cfb7d2c5c6f217e4c7ce744b7e8cabfd093bcc715bc","ssdeep":"768:MO4OgX5RvsTO4OgX5RvsuEFgLrunquOoyKU8X/ywXJZTNdeXGtSXTINphHSmW/BU:14RJRr4RJR/EFOKnOoyiXZTNcXGMXTIZ","tlshash":"e4036ccd95ca01f84bb55194a7937eafa96e308cf1c69ae1d4f8cf5420c123da035dab","first_seen":"2026-08-10T18:48:38.582718Z","last_seen":"2026-08-10T18:48:38.582718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/PreferencesButton-CoKjCmYv.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.646Z","timestamp":1786387664646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/PreferencesButton-CoKjCmYv.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 216\r\ncf-ray: a28f34055e2cd5a8-CDG\r\ncf-cache-status: HIT\r\nage: 1175944\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 27 Jul 2026 17:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: iliVLMVHfv:31082,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306,"size_decoded":1058,"mime_type":"text/css","magic":"ASCII text, with very long lines (305)","md5":"fa2bd872b3cc89a64c9a01e76212ae43","sha1":"989398bd634b294a8cd28dff8706a716fc5de254","sha256":"3fcd6cfcca9bb2f69dd369de0142bbeef998aff0eac750fe8341b76b380c0c88","sha512":"1e5531acb615e96e477940a22632dd0d74e8a754dbdac4090bf7975d24f6eb3ec2470dd268457883eb38db7d09155d9037473f5e080c9b3ceb2edfea30d9bb66","ssdeep":"","tlshash":"b2e072c70200333ccca2fa06221c308fb4cf08460393a0c2a883b128c2c8f9aa9e21c1","first_seen":"2026-04-30T03:12:05.859914Z","last_seen":"2026-08-10T18:48:38.584449Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/validate-Bj26h9uW.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.957Z","timestamp":1786387664957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/validate-Bj26h9uW.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 211\r\ncf-ray: a2750d301ef09f11-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bcBdKSbwcw:6657,t26\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":265,"size_decoded":1046,"mime_type":"text/javascript","magic":"ASCII text","md5":"b7d0ded40efcd3cba466fb6f41003d7e","sha1":"6d03fe8d2cbb3bee2bdfe88e6408bfb1a05b3b7f","sha256":"a6fa24557ee8d0290f7d1531e1ce8e8eb4a23b7e41fae32ee4d0ae5050cfed44","sha512":"7850bc4ef4da667d43d614d1efa0a312eac8a0087e3644a08443df344fd0e1df594c153c8c6be1ef518e19c864472e9d045bc4266072d9120e86c7f47f42b17c","ssdeep":"","tlshash":"08d0a547d1f4f7d515113dee4cc3414139fde9a4d025b65f521d45717c50065573d909","first_seen":"2026-08-10T18:28:17.891673Z","last_seen":"2026-08-10T18:48:38.585161Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Command-BuuQ0Bau.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.873Z","timestamp":1786387664873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Command-BuuQ0Bau.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 11293\r\ncf-ray: a28e93d21e1f371f-FRA\r\ncf-cache-status: HIT\r\nage: 123\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47388,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34628,"size_decoded":12138,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18116)","md5":"0bdc1a4ffd9fe487af917a3043f9bd36","sha1":"78ad28dac81c41fd2a241113c26a7bdc908c964f","sha256":"39708952cba741a3432c53901681665040872633aa4d3ea56173314fdf0be14f","sha512":"e843257a67bb32b0b925ea6fc9cbea37afade6709b620b321d19c6c7fe7bb6e837cf930df98662a04a478f500128dfe9b1ab2f2832f7f3f5fd6d4998f54c427e","ssdeep":"384:yYzhDjuLP8gZ8RR8X2DVhtP/Kx2nAC69g0vdsAtUyRsNSP:yu9gpmD9P/pAC6m0FsAN","tlshash":"02f2e8e53155b470e3de815e906f462eb73a2aa5a40e0418f039dc4c3939e85e7f3fa6","first_seen":"2026-08-10T18:28:17.719543Z","last_seen":"2026-08-10T18:48:38.586664Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingSection-ByKy5iS0.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.280Z","timestamp":1786387668280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingSection-ByKy5iS0.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 395\r\ncf-ray: a28f3405bc9a368b-FRA\r\ncf-cache-status: HIT\r\nage: 5101601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47873,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1277,"size_decoded":1236,"mime_type":"text/css","magic":"ASCII text, with very long lines (1276)","md5":"f91be4ddf4983c191fb530c08cf7de0a","sha1":"b24e37e18719d494e6865ce99e7a054d44dfa447","sha256":"175d9ae731d6302a2b00952f60fc80efcf5a60cf2c12bcce34a533782f003d6c","sha512":"2f45e4982a0726af46b459a763f440517106785f6fdb7cc9a94f534fcd7b5a372f58a8db2f44f43425cff2a6fb84425d4b1e47d38b2ecc2efd94bc5aaf4be1d2","ssdeep":"","tlshash":"18214b552af3b37c786fb1b1d2ba71da8308a415aa061ef7943532ba5fc27e40437189","first_seen":"2026-05-31T11:11:55.829603Z","last_seen":"2026-08-10T18:48:38.587699Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu.i.posthog.com/s/","fqdn":"eu.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"18.158.90.132","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:54.784Z","timestamp":1786387674784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:B5:42:B0:EF:B1:77:97:C3:FF:B8:89:87:B5:A3:F4:32:08:FE:27","sha256":"BF:C3:D3:B1:0B:53:D4:58:C2:A8:1F:37:4C:D0:F6:A2:F8:E0:1E:BB:05:FA:53:84:BA:CC:BF:1D:78:D1:F7:A5"}}},"request":{"raw":"POST /s/ HTTP/1.1\r\nHost: eu.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: text/plain\r\nContent-Length: 247707\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 18:47:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://biterfz.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 481\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":421,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-08-11T01:03:22.2501Z","times_seen":44155,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":0,"dns":0,"connect":0,"send":44,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/RewardsBanner-D01JhDRf.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.648Z","timestamp":1786387664648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/RewardsBanner-D01JhDRf.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 255\r\ncf-ray: a2238dd0feebdbd0-FRA\r\ncf-cache-status: HIT\r\nage: 92\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Tue, 28 Jul 2026 11:26:19 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: snRXSCbzXO:22,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":1089,"mime_type":"text/css","magic":"ASCII text, with very long lines (419)","md5":"4ed1152dc90153b3e8ee8eee2a3dc0c1","sha1":"be35c6e3d474f04f707224dcf4106cd902d8c511","sha256":"9c247a2d5854cd15fca42ee698b64c522e91d4eda8941f23db0c0f7dbb1400be","sha512":"edba3238a247e1c88a75e018601684f7011ec0c066423c7dff6f7c5d7c39ef3c6ae6852aa9f3338bbc84774ac7aa55ea9243a93713dbe648ea698cfd7a204197","ssdeep":"","tlshash":"98e0ab948f52a33568fff08cd3b7751d82c453166a6701ca9880280f87cd36648b20ba","first_seen":"2026-08-10T18:28:17.851743Z","last_seen":"2026-08-10T18:48:38.58838Z","times_seen":2,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/star-B74l248E.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.821Z","timestamp":1786387664821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/star-B74l248E.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 185\r\ncf-ray: a28e9390a8ff3a52-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:22577,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":226,"size_decoded":1028,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"c93a5522105ae4121709c62633cc73d5","sha1":"778fb52f493450893fbc599ff45317036969ff6a","sha256":"574ab1c30324238f10b74ce1083f894fe56e20e292ce116a8d4b079e83cc46c0","sha512":"584f1ca39bb0489493994ba48718bad360d3e13f7c6c9d0bef19578fd3fb7cd2fc4c467a9ffeb8682a50d76f517ea9121ac6c4214006572dee44cb26045a5592","ssdeep":"","tlshash":"ebd0a72fecf04c77d80c4deed07e059e7b24904943452520ea4c516052215c1f665f97","first_seen":"2026-08-10T18:28:18.140206Z","last_seen":"2026-08-10T18:48:38.589413Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useLanguageOptions-CpMra2Zq.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.379Z","timestamp":1786387669379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useLanguageOptions-CpMra2Zq.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/PreferencesModal-Bl8q8E4o.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 335\r\ncf-ray: a28f86635d63a93b-FRA\r\ncf-cache-status: HIT\r\nage: 148\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:10080,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":457,"size_decoded":1180,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (401)","md5":"74cd4b1192754a37784d82fdd213e668","sha1":"e9ef6a79b905282f76a964025eacc4c953d971bf","sha256":"29fa720c770220f2ffa66f519c15925105a88cbf2ee743d1a263d7991de39caa","sha512":"e36b632122d7ed3786a3e94fd276e0cb77ff4659bf532ad712aa7be518a943233aca1e895268cba3c7c1bc9eb8e53474645950f48eded7d20d58802b80847d61","ssdeep":"","tlshash":"ebf0dc0fc0c494f5624e29c490a03a02a334e5a952416ed4419b01b11b76c09f09ff03","first_seen":"2026-08-10T18:28:17.878321Z","last_seen":"2026-08-10T18:48:38.59038Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Scrollable-BUIl4HGK.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.425Z","timestamp":1786387669425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Scrollable-BUIl4HGK.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/DrawerSearchableList-WnhewGCy.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3929\r\ncf-ray: a28f2d1acf3f382c-FRA\r\ncf-cache-status: HIT\r\nage: 6393\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:24495,t15\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13160,"size_decoded":4799,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13112)","md5":"b878888210dfc5856aa6ed37b249c93c","sha1":"17916d0843b8241ae6134374dd09feeb28f562f2","sha256":"2a91ad607bb7201022c0e24568e55526619ff3d38f6a55a44ed1c30071d36c42","sha512":"4c3bc37cc2734e198dafd18a76402bfa9e1fc0ef63bbc49eeaebd58cfad1f8d3d968d70f68a0f6e2be509b391e0f18b9d0582d4ffa8d10724df2c83b48cf24e3","ssdeep":"192:uY4XNk8eV7ibURsJRX4AQKBqPblGy0A3fPsMXBIqTlGsAUJ:QXuIgC3X4AQKBGcy13B3GjUJ","tlshash":"2642b86ba10168b0a3fe85e7c07bc32cab1a50d6674f01d4b1786f741a55bf0b386bd6","first_seen":"2026-08-10T18:28:17.894112Z","last_seen":"2026-08-10T18:48:38.591314Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Scrollable-C-avTb9b.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.706Z","timestamp":1786387664706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Scrollable-C-avTb9b.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 463\r\ncf-ray: a28f3405c842248e-CDG\r\ncf-cache-status: HIT\r\nage: 983876\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: oLTMcizddB:424,t5\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1358,"size_decoded":1300,"mime_type":"text/css","magic":"ASCII text, with very long lines (1357)","md5":"573f4f8685fdb1251fbdebacf49e32e5","sha1":"5f74e757294b1245d7827e0d9a39040d3fa10afd","sha256":"a1c659fc296c599f1a202f77a34926bf0b404147b43979a35d583028c17db79b","sha512":"7831a1036d92fcfd8bccbd00649353a5589b1371832f5ffc7f7c92a8466c09ae8f39691e759edf83b2b4cb50ab0e2f8fbd739375837d9ef59a01b103e32cbc6b","ssdeep":"","tlshash":"0821cee05560a4bcbcfff00bebd4628e515860d3ac6706e0e0e0ae7165c1bfa1716124","first_seen":"2026-05-31T11:11:56.098404Z","last_seen":"2026-08-10T18:48:38.59239Z","times_seen":7,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Stack-USOOIFVe.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.829Z","timestamp":1786387664829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Stack-USOOIFVe.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2116\r\ncf-ray: a28e93910a65dc79-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: QtIEGlNvBZ:87,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10318,"size_decoded":2958,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (10275)","md5":"0771cc98bb874f030adaf81d24587f2e","sha1":"3a413d7bac337a566930d0b30a923d24904114fa","sha256":"64c17eff3be443ac34751f1dc126aeeab3c657406c4401eadf64c21a4154a829","sha512":"d0e0df194500ad670db8f9e8e2998ae241ddca2c1b3797bc8c7aa65e90ae204109cf23cb78cbba505b1d1aa58d2ab226007584fea1155b65332b16242b7fee9f","ssdeep":"192:mmvM/TM8eo+tB7JR86HN7b6fUwTuw8lkIgrLPjWNS38qHqRq2v5keoeqgqbq6WUL:mp/T8xi0+xLUBmtW6ELo5","tlshash":"1a2237181cf7897e0d9e974828ae7661c3f37cc8d81499d02b8fe9a70586eef1792d44","first_seen":"2026-08-10T18:28:18.06363Z","last_seen":"2026-08-10T18:48:38.593067Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/chevron-left-CzQVKDjv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.836Z","timestamp":1786387664836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/chevron-left-CzQVKDjv.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 332\r\ncf-ray: a28e93d0fb789274-FRA\r\ncf-cache-status: HIT\r\nage: 141\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:315,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":442,"size_decoded":1175,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (392)","md5":"64a2d2e5fd0b2163097334bf46b07552","sha1":"1e5118558cfa9d789ca0068d52c7f1d2cc66d980","sha256":"cc1bd0d348ee0b46ea4bfa38b629179a45a7ee82b49bb49cf9cc38765b53196a","sha512":"6e373e12b3994a6b7db9905c10e4340b39da0cf81a40b5851929e1bcc8991ecf0910d675fdd72bc1a32a0075687537d1f6644a9d5a0002b6996391c358f7019d","ssdeep":"","tlshash":"2ef05c5edea42c3d941e4d9d9a69a58fa9a5a2a5ef462514f29c007043009c06b29bc1","first_seen":"2026-08-10T18:28:18.260666Z","last_seen":"2026-08-10T18:48:38.594436Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Flex-CBqrzjUj.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.284Z","timestamp":1786387668284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Flex-CBqrzjUj.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 229\r\ncf-ray: a28f34054b9b371c-FRA\r\ncf-cache-status: HIT\r\nage: 5101600\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: ko\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jeySHQyKxh:14,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text, with very long lines (381)","md5":"3a27cb7e7d2dd9923b028833a45c4a76","sha1":"b7e0a9e615e2de613c803151f172fc5443580e74","sha256":"ef58cca1f818f55f960a9f1aac64a1853da0a8ee6cc07801abcc158e0ea51ad1","sha512":"1134af65564a8406ce6fe57b4d6c9cb162db41a8ca1fcf5016da6494fc4d13ea328a8443ffd51bd1bcb270f6c3b6ea15fd6baf1e473a4ecc92dc8e5c5651858d","ssdeep":"","tlshash":"68e02281b7605034d857802c2926a109a0d9c742ca8f90e9a413133ac9ee2872ff99dc","first_seen":"2026-04-30T03:12:05.924332Z","last_seen":"2026-08-10T18:48:38.595879Z","times_seen":14,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/HeroLanding-ChnVGYSg.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.338Z","timestamp":1786387668338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/HeroLanding-ChnVGYSg.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 593\r\ncf-ray: a28f34063aed4d3a-FRA\r\ncf-cache-status: HIT\r\nage: 2616741\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 10 Jul 2026 14:05:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50079,t20\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2589,"size_decoded":1434,"mime_type":"text/css","magic":"ASCII text, with very long lines (2588)","md5":"ea4317e0a9d2e9846d482ed05ee3e631","sha1":"a04020575898105811669f24a554321bdcd6f8e7","sha256":"982ad9022066d2c0a8beff18243ef698274c50380cfe011dcbc61b170dc89963","sha512":"2d57e46cbd951959305c58c2bb3250f5f39ec00646982a22445234b2da6cb96db3d9f8f3fdbb0ec427879ae555c3bffefaf52f5812c566f551525e79a22a71d1","ssdeep":"","tlshash":"b9515c5eb102a138ad17dc3c52de318cc64b620edf8b6dd6a871b66853c72d18872ec5","first_seen":"2026-07-16T00:57:04.875341Z","last_seen":"2026-08-10T18:48:38.596578Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-assets.i.posthog.com/array/phc_xmHABzzV6vPbfs99jW8FFZUNeVgPhWJsNu9yKmyMmVys/config.js","fqdn":"eu-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.730Z","timestamp":1786387668730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:16:21 GMT","end":"Wed, 14 Oct 2026 23:16:05 GMT"},"fingerprint":{"sha1":"A4:C7:89:02:89:1E:87:A4:0F:B1:DE:E2:A8:19:4F:7B:D5:1D:6A:BC","sha256":"36:85:BF:C1:16:3A:49:C9:98:16:2F:48:3A:FD:14:C0:9A:20:E0:C9:AE:CB:8C:72:55:A8:B5:4E:E6:83:5D:5C"}}},"request":{"raw":"GET /array/phc_xmHABzzV6vPbfs99jW8FFZUNeVgPhWJsNu9yKmyMmVys/config.js HTTP/1.1\r\nHost: eu-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=300\r\nvary: Origin, Referer,origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://biterfz.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Mon, 10 Aug 2026 18:47:48 GMT\r\ncf-cache-status: EXPIRED\r\ncf-ray: a2912bd18f6f723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1171,"size_decoded":1225,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (971)","md5":"af5e6319bd6cd6195b94d4af7f034c09","sha1":"fdc4550538e881122db1a61b0f4ee6aa11e6405d","sha256":"655bb9172bfe046c4c0ab71227bfce9917da5a44d6c30e0641e97f754c805e17","sha512":"47991f390055ec744e4a528cc53d5f88306fd438640404bc641f5c3abda7b750f171ca160b1acfa6d12dbfb0271083deb97e9e56c8338ca98ced5e747849c04f","ssdeep":"","tlshash":"7f21003d6968187944ce8325a6877d06affe023732186c58f4dc8b5471fe5db5542b03","first_seen":"2026-08-10T18:28:17.983569Z","last_seen":"2026-08-10T18:48:38.599507Z","times_seen":2,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Badge-1_WZ-wEr.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.701Z","timestamp":1786387664701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Badge-1_WZ-wEr.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 462\r\ncf-ray: a28f3405bd3999ed-CDG\r\ncf-cache-status: HIT\r\nage: 983876\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: BcQSMchFFj:37667,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1657,"size_decoded":1301,"mime_type":"text/css","magic":"ASCII text, with very long lines (1656)","md5":"30556f2f344e989f825c71b04dc38155","sha1":"36a80e6595bc5f154e0e563f6ecde35df56eae62","sha256":"d972f65cd7e7b313a6084170719673a56cf2f65ccaf1c5ccd3c5e6a8969c806b","sha512":"0531322766003fbd9bfb57eb6dea781986901b173270adc25e0410f87d99d0e6ba19244904aa7731f9adfcec5b91d0ada61a8840177e49997141e583b63f3233","ssdeep":"","tlshash":"3f31795dbbe0f53cb817973996c8959d5605e843cf110fe9f606e3b0c1c2ef22152601","first_seen":"2026-05-10T06:59:24.564418Z","last_seen":"2026-08-10T18:48:38.600683Z","times_seen":9,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/wallets-B-XHvOpk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.925Z","timestamp":1786387664925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/wallets-B-XHvOpk.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 828\r\ncf-ray: a2750d31e8b09f11-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bcBdKSbwcw:6665,t26\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2142,"size_decoded":1661,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1037)","md5":"450a2c722633940d1117410d6259dad0","sha1":"fe95c0a97bcf8e267c1a0498565754f3d25d8f9d","sha256":"3b0276a021c922e18b7cf6df81a9dbe349f46994686a1cf711661e5974dec9ed","sha512":"18c066e513841fdc7388607bf0c35c0efff7da50c8fc28a4e44804897a941bbbe60ae4a4352f083011aec46ca3a94c7f174ca4132a110c3ac062daf1aa4c4811","ssdeep":"","tlshash":"324176dcb7f1f03311f79f6942570e22b132e74b152d58209250a9632274c9bca66b80","first_seen":"2026-08-10T18:28:17.925587Z","last_seen":"2026-08-10T18:48:38.601439Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/ProductTag-CTbPgjx_.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.171Z","timestamp":1786387668171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ProductTag-CTbPgjx_.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/ProductTag-CTbPgjx_.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Switch-Ps7novTx.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:50.407Z","timestamp":1786387670407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Switch-Ps7novTx.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/CookieConsentOptions-Czi7qhij.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:50 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1315\r\ncf-ray: a28f86781da877d1-FRA\r\ncf-cache-status: HIT\r\nage: 140\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:278,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2951,"size_decoded":2181,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2907)","md5":"f79afd29fed19cf7c52a052f0a884899","sha1":"8a6bbc8ef4478024919c2f87c83cae989578a9a2","sha256":"6387ac7d8c537e10408f38c120f9b74d72ee5f2752f3426be1ac0e9d8a845cb0","sha512":"d9be9783957e68178823e2ef2c604fd41bdcd573fb1edafee987e9fbd4f5f9ec072dfa8008f2d170907838bf11d6e6fc3c43672a3409befc49b0fa2855b2b9a0","ssdeep":"","tlshash":"5951876fa09078b0a936c8ddc08b403eb339d174934c1bd451da68a41b3e1e7b75bfa2","first_seen":"2026-08-10T18:48:38.602513Z","last_seen":"2026-08-10T18:48:38.602513Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/api-client-BCvJLI2Y.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.608Z","timestamp":1786387664608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/api-client-BCvJLI2Y.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 51294\r\ncf-ray: a28e936e1dd514c6-CDG\r\ncf-cache-status: HIT\r\nage: 107\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tNeegAMkVR:73,t5\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":176425,"size_decoded":52136,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45606)","md5":"5645b25da0517ce3d2904bd2cc9d82e8","sha1":"961af067b8583277dad36489c279cdc1447a4f67","sha256":"52cdbce7e9fc77208e007e4dddcd9c5cdf3729ed05135a0b35b4c59412257be5","sha512":"8247935153f5af6221540cfa8b7c987741116fc43239043abe767de9831f058445071bcdf5b550c1cb61c28e194fd49cd30ea55aba03f026fb26e7fe8be88c3e","ssdeep":"1536:ZRJfXEgtZjh+h8sRJ/OiHzmOj30Ci7ZFp9XULnMEWGuJw/hVpi1im/ZaMH3k6iud:Xhk+k9HzmiZ8pdyi/gMH3kEEb6","tlshash":"ee044b89b3d8b076179b2534506f190ffa7e6848ec5e84a0f372d1883d77a44a273e79","first_seen":"2026-08-10T18:28:18.197167Z","last_seen":"2026-08-10T18:48:38.603595Z","times_seen":2,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":95,"receive":55,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/primg/w360h216/wolt-no.webp","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.745Z","timestamp":1786387664745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /primg/w360h216/wolt-no.webp HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3692\r\ncf-ray: a1aafd72ace6dcdf-FRA\r\ncf-cache-status: UPDATING\r\nage: 18233\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"CoCVm5rEMyGAt4o+J1eZ0iTKsxTkmUvGV3f9vDq4a63k=\"\r\nlast-modified: Wed, 03 Jun 2026 15:48:23 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-chosen: 0\r\nx-chosen-size-diff: 0.7825349724459517\r\nx-content-type-options: nosniff\r\nx-org-content-length: 3692\r\nx-powered-by: Lightning\r\nx-cfw: zHvcAoxvUb:369,t16\r\naccess-control-allow-origin: *\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3692,"size_decoded":4536,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x216, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1431466676290476c109ed3b3174e8a9","sha1":"c3f0680aaed11a88346f0c4dba456838b1cbe58f","sha256":"5468b0efb8f8070e17e7454077c8a40cb0b857e7e31ac0148707b6dac3abaa53","sha512":"e2127eb6c74693d3efdb5c5270e3ffe8e49802d8d742040e7d8827e6bf5f97ea1a8ec692bdf324dcbc456b5fef5c964b701122d2422f19f66926170b726857ec","ssdeep":"","tlshash":"ae7139ae8adb3014c482f1f8737c339de7a9668769cf799208c5a568d42310c0f3acb0","first_seen":"2026-05-15T01:25:35.493963Z","last_seen":"2026-08-10T18:48:38.604465Z","times_seen":3,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/shopping-cart-DVGlmWwx.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.812Z","timestamp":1786387664812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/shopping-cart-DVGlmWwx.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 268\r\ncf-ray: a28e93907a2ae537-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: HcKxlISubs:2245,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":343,"size_decoded":1112,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"515af16d96e9c02fd6b35a7c5678c415","sha1":"420e9b87336cfe14c6b5af8765ae8e8f5ba2ac14","sha256":"4cceef0ac2d18fc6a2e9a183044577f5aa9261dd8a6cd9247c22e982378ff465","sha512":"01eccbd2375fdbe980299cae2537099d357207b45cf3ddf1da6ddb675128f160f9ada23e39e12a5add65b0c1d27c2aadf8f09bc7df70a7713fb86082f1e8b0b4","ssdeep":"","tlshash":"63e02075aefe19bc1e460c52305a9492975ed49cf327464070a943360f948c3e9f9f61","first_seen":"2026-08-10T18:28:18.040731Z","last_seen":"2026-08-10T18:48:38.605079Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Button-lnXTJ2JM.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.823Z","timestamp":1786387664823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Button-lnXTJ2JM.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 980\r\ncf-ray: a28f8633fa54cb3f-FRA\r\ncf-cache-status: HIT\r\nage: 155\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:52,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2059,"size_decoded":1845,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2015)","md5":"6ccb8faab8830e8ddf132a50a5c12828","sha1":"21158163da75218a7604e8bb759ed83662b49b98","sha256":"0f18f3b96111699ecdc290055801afa52e36d30a2545eb6b15dc896ffac7cc91","sha512":"3a9a918c80d12db8542d8072d716f9b61f88bc9ce4613a2a11e12fb0d38f2029f7459fe8f7494b1c21fe90c111a9966956ed5395dc21dae66d42714034243e74","ssdeep":"","tlshash":"874185d4f370a8b8b73fdaeed50651e7f366e16d8e062995e0100470439175c7134f5a","first_seen":"2026-08-10T18:28:18.251792Z","last_seen":"2026-08-10T18:48:38.605881Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/account/api/cart-trace","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.690Z","timestamp":1786387665690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"POST /account/api/cart-trace HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nContent-Type: application/json\r\nContent-Length: 167\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":167,"data":"{\"stage\":\"PAGE_BOOT\",\"path\":\"/no/en/\",\"slug\":\"-\",\"in_iframe\":1,\"ua_class\":\"desktop\",\"amount_selected\":0,\"amount_value\":\"-\",\"cart_badge\":-1,\"age_ms\":2,\"detail\":\"other\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 11\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":269,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-08-11T00:45:11.243353Z","times_seen":18117,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:48:06.699Z","timestamp":1786387686699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:48:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Accordion-B1oUk7ky.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.673Z","timestamp":1786387664673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Accordion-B1oUk7ky.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 404\r\ncf-ray: a28f34061a8365a2-FRA\r\ncf-cache-status: HIT\r\nage: 375845\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 05 Aug 2026 15:02:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50078,t20\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":726,"size_decoded":1246,"mime_type":"text/css","magic":"ASCII text, with very long lines (725)","md5":"22cea38c91b2d0725f6b518b2433880a","sha1":"94fbb498165d7e137a2decbf13886f6cff9a87a2","sha256":"493c6a5259996af0a564bdfc2b10e69ad3fe5dba47c389b1202d5933e0044827","sha512":"85559da2a8c0f76e8e56bd597d63b8aea2a607a293cde06fda2e4ecb6666b0c53745c539990850eeca14b4499e6bf5515484669e5eb3baf668d879c91f31619f","ssdeep":"","tlshash":"6801bdabff80e23cdd3e5450638cf1aae1007584984216e7ea02211546c7ff63be0346","first_seen":"2026-05-31T11:11:56.115711Z","last_seen":"2026-08-10T18:48:38.607109Z","times_seen":7,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/gift-DMgF5Ar-.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.841Z","timestamp":1786387664841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/gift-DMgF5Ar-.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 416\r\ncf-ray: a28e93904dc84db4-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:48373,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":642,"size_decoded":1286,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (600)","md5":"e905f3894fa81e4a65edbea4c1cd06f8","sha1":"8140b879f3ad12968e25853417938284388b3c5c","sha256":"690b6a68adb29be167a4ea636ba01c9aca0168c68f768ea9c04358273c6e2c20","sha512":"278609e594fc71daa12714459f288e47d9f74fabce9d001674f4af4e13941cfaca47591cd01f6883b30e2339d7fd8540bfa0bb63bc80cbb6cc1f8479ad9991df","ssdeep":"","tlshash":"9ff0762f8ea81cbcb41a899c6a1da64ea76f82e5bb5b1518f65c203012020c0cb37bc0","first_seen":"2026-08-10T18:28:18.290412Z","last_seen":"2026-08-10T18:48:38.608405Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:46.557Z","timestamp":1786387666557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useCMSLayout-5u6YBUAs.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.529Z","timestamp":1786387668529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useCMSLayout-5u6YBUAs.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/landing-EzeWBxTg.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1123\r\ncf-ray: a28f8f1c283f77d1-FRA\r\ncf-cache-status: HIT\r\nage: 507\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VUFxalGXLv:53,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2314,"size_decoded":1989,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2264)","md5":"77b70058b1162b3b1507860311432fc0","sha1":"25f72868b48ee704ccb55f8528ba07a1076562ce","sha256":"1f464e98a95adb3756d2354ee1ce0f28ede2009fd5b940a5a818d8a255a440ab","sha512":"57b2885197519e6c386a5f51f5ff75211b1815047e3bd6d1eb9f7850c48cb02a75d9c72d03d1170b70a99862127b885653ac4139a3f843361487192d728aaf9a","ssdeep":"","tlshash":"1f41c90cf1f7183968a45ccb811a2651126c58b428084fc856cf5ebd1b70edda75ae7f","first_seen":"2026-08-10T18:28:18.304784Z","last_seen":"2026-08-10T18:48:38.610421Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ImageLanding-CXj66i5N.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.696Z","timestamp":1786387664696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ImageLanding-CXj66i5N.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 198\r\ncf-ray: a28f3405edca360c-FRA\r\ncf-cache-status: HIT\r\nage: 2427387\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 13 Jul 2026 10:25:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NUSuistqZq:5,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":278,"size_decoded":1037,"mime_type":"text/css","magic":"ASCII text","md5":"74a9222e155f58b0c7061997cdd82ce0","sha1":"6a807c425ccc842da9b9125185f253111599eb1b","sha256":"2e799d353996267d6e5bfc5b59b436d70ded07e780a5fd81de3f7bd92879f8de","sha512":"a1014aabeacd7256edd9682ee4435fe8d788fce72049569fdd8a68e1f7dcf3b2cd88af8d24d0edbeda7e98a1754f2f78236282658bbe15ca47c50554d02eb5a5","ssdeep":"","tlshash":"91d02e268731f23acc03862cb5e1608e237d982c638301daefd932ee871e2029033c81","first_seen":"2026-05-10T06:59:24.749424Z","last_seen":"2026-08-10T18:48:38.611891Z","times_seen":9,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/rest-helpers-B5wijuET.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.782Z","timestamp":1786387664782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/rest-helpers-B5wijuET.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1273\r\ncf-ray: a28e938fbf62e537-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: HcKxlISubs:2242,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2796,"size_decoded":2140,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2746)","md5":"19fb28905aafdb29082d95feb1c4d7c1","sha1":"93bc74481f932d34de4d9e0aa3cd67807c8937de","sha256":"d528c70f33817693875aba4c5108774e01d3d968472d83fd13ad8fbaba918443","sha512":"f96b8c1ff8a27e86c0c051b447769bf01a87f5b6c83c402949298e936553a8b40f1ea0a86d52ec197a85732f71217aec0ed36b14f5b2a6eadf40ab5f00338f57","ssdeep":"","tlshash":"295185eda4e2b029e74ce432f82e0b6df4187927b819e95df9c8142b2114055bb77b35","first_seen":"2026-08-10T18:28:18.365623Z","last_seen":"2026-08-10T18:48:38.617002Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Notifications-Dxxho5tr.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.960Z","timestamp":1786387664960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Notifications-Dxxho5tr.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 700\r\ncf-ray: a28f8635692adcb5-FRA\r\ncf-cache-status: HIT\r\nage: 149\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:2457,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1357,"size_decoded":1566,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1306)","md5":"8c4443c259c4c84854799fd4d0540cb6","sha1":"dd9b6b5204d918e83a2a944f1794c6a599be2ded","sha256":"6251bbccd4d58b8b944a8e82e9a9bea01793b9c5bd44d4cf80a8bde052f0699c","sha512":"d5143a586345e427e26c870c10252fdc4b9ae9e6c93cda08825c13f66f8457a0db3991df5cabb73db02d0a5386981586f5143fdf53a18f76967b64a7dc656526","ssdeep":"","tlshash":"2621224e81448a70c94edcddd02e11a7933ac0a8af0999d9d14f06911b262d5e55ff62","first_seen":"2026-08-10T18:28:17.77934Z","last_seen":"2026-08-10T18:48:38.622433Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Hero-CKfClY-H.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.183Z","timestamp":1786387668183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Hero-CKfClY-H.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Hero-CKfClY-H.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Alert-CKpIhxt6.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.296Z","timestamp":1786387668296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Alert-CKpIhxt6.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 534\r\ncf-ray: a28f34054df45d94-FRA\r\ncf-cache-status: HIT\r\nage: 1176004\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 27 Jul 2026 17:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50070,t44\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1615,"size_decoded":1375,"mime_type":"text/css","magic":"ASCII text, with very long lines (1614)","md5":"68390c7f2b1bfc1247cca7873217d352","sha1":"63de16a080c2d687eb012b4bc8a0311ad19ea797","sha256":"c8ca64c92967b4ca5f4342dc2920209282f461f209337adf76505cd62cf0ea72","sha512":"e721df7fc2b63d970ffdf3d8f1aebb43d143974d39ae6e4cadf9176fbb1d80fdba37ab13edc0dfefe2752ee43cb11db2e10e72d700253a21f45a36f684d1936c","ssdeep":"","tlshash":"4731bdb99231673f7c37b05923a8e28d9119542198560fffe41b616a4bc37f33633204","first_seen":"2026-05-15T01:25:35.558424Z","last_seen":"2026-08-10T18:48:38.454336Z","times_seen":10,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/TrustLanding-_OqOEVti.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.310Z","timestamp":1786387668310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/TrustLanding-_OqOEVti.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 493\r\ncf-ray: a28f34061d280ecf-FRA\r\ncf-cache-status: HIT\r\nage: 983876\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VjFWdNxVXU:234,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1510,"size_decoded":1331,"mime_type":"text/css","magic":"ASCII text, with very long lines (1509)","md5":"c91d26d2d076a60f0686e019d90d4f3c","sha1":"a24e348fea76c92e98a1e42ffdb26367acd4604b","sha256":"1177f9f418ab5e1c451da77aa18eabe8746917f5d0fc3dfaa70b237324adda4a","sha512":"1e01aed6811bb7c581eaaa8ae2dfc720f0b3084342d53bd15e628459247eaa4091a7d4fb951821f29dae00b32df773627581225e10d995fcc52259cc2c895afe","ssdeep":"","tlshash":"9d31225d02294bbe847f6c6d70335e4e5225a009ef6ba0edfb29211481cf3912f736a8","first_seen":"2026-05-10T06:59:25.079962Z","last_seen":"2026-08-10T18:48:38.630082Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/testimonials-DJDhwiLi.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.691Z","timestamp":1786387664691,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/testimonials-DJDhwiLi.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 1049\r\ncf-ray: a28f3405eefc5db9-VIE\r\ncf-cache-status: HIT\r\nage: 2968752\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 06 Jul 2026 14:38:42 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1344,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3560,"size_decoded":1889,"mime_type":"text/css","magic":"ASCII text, with very long lines (3559)","md5":"c9785602cc34ee7abbcef0b60cb56c61","sha1":"53d6bd4449f3523a2317ea01ab649c62e30b5149","sha256":"8425e5782d72c4b9f8f6adc37658ce149be2d75a91a6b6fa4ec9e0bec2342f8e","sha512":"79ad71d6da37932160fcf838cb9920740d149ee4fe6fa95097224dd51415b3e6c612b69b99f3c296fb20095b84a46de261837c66cfb28c8e46c0dbb15d04c0b1","ssdeep":"","tlshash":"737102b4d5a4e27cfc3be52617e5758c50258506dd2306def81aba15c3c77e31a32648","first_seen":"2026-05-31T11:11:56.093228Z","last_seen":"2026-08-10T18:48:38.296774Z","times_seen":7,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Accordion-B1oUk7ky.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.152Z","timestamp":1786387668152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Accordion-B1oUk7ky.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Accordion-B1oUk7ky.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/plus-CdMVBc3h.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.628Z","timestamp":1786387668628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/plus-CdMVBc3h.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 337\r\ncf-ray: a28f2d21bcac4db8-FRA\r\ncf-cache-status: HIT\r\nage: 6394\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50003,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":456,"size_decoded":1184,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (414)","md5":"abacb4ea9cd3bd0f54fc19bdca12a8e5","sha1":"c0993af012a444fec85fe0f620308e0935793d23","sha256":"2a952651d18d58d793e593404aefeafc6c942b954aba8292c1870dfb325b7232","sha512":"94994275aed986f7a039e82fcc35a179e9f911e1fca02cbbd3442fdbeed99478779c94c27ced0fc3bbf11b6e527923260da2c960e0b637818bfea451867e0b67","ssdeep":"","tlshash":"d2f0d40fde685cbcb41a0d9eaa6ce58fe569d1a0df431618b35c147403000c01736fc1","first_seen":"2026-08-10T18:28:17.899945Z","last_seen":"2026-08-10T18:48:38.633337Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/smartphone-B6i4bKiU.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.760Z","timestamp":1786387668760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/smartphone-B6i4bKiU.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/icons-CBF0S1-q.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 202\r\ncf-ray: a28f2d1ed9594d7c-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 6398\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:49997,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":245,"size_decoded":1071,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"e3823bc071f2105baf2283526cfa8eb4","sha1":"65b50189432cb475b34ee3dff2751065278c1e98","sha256":"e97c4fe25d500b26b1e05632ccc00ae43be90faa8d8bbaa9d3abd3dedf317914","sha512":"87f6a27167e0d3693fbde57a66b004e01860c2bb040b17e97afefd219a247e4d17f81f83c34bd3c4fc3a0ac8b2c01629c2eb9d4672a6d612ae3c752436f852b0","ssdeep":"","tlshash":"25d0951d5f7d2cec5e015df2300ac847dd15e0dc97560c45b310a95706d54c24c78e44","first_seen":"2026-08-10T18:28:18.380195Z","last_seen":"2026-08-10T18:48:38.635585Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/TextLanding-DFkYqn6N.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.368Z","timestamp":1786387668368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/TextLanding-DFkYqn6N.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 238\r\ncf-ray: a28f34062849382c-FRA\r\ncf-cache-status: HIT\r\nage: 2792982\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 08 Jul 2026 13:10:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:24543,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":566,"size_decoded":1080,"mime_type":"text/css","magic":"ASCII text, with very long lines (565)","md5":"b4d912eb4964875c62cf3d5e3c4e8d1b","sha1":"53dab89e3f9fa9e4ded6291da2b1236c9851c524","sha256":"5fe55cf9d8fe1a9d8a21857eeb541435d124f8416ad6d089324e136664f67168","sha512":"9b00ebe8c1ca5678d9ceb7f33fa7c3c91695b529d370e7f7decb190ea5c528221862769f46e007befe7bdde61f8f584929aa5c0ca6c153dc6b841470cbe732d5","ssdeep":"","tlshash":"69f0e735eca7d634a797e434b962279f12c3ee09650380d9ef699689ef4415f3839240","first_seen":"2026-05-10T06:59:24.744943Z","last_seen":"2026-08-10T18:48:38.570712Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CookieConsentOptions-CS8RC0a0.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:50.245Z","timestamp":1786387670245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CookieConsentOptions-CS8RC0a0.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 193\r\ncf-ray: a21bb12e3fd27574-FRA\r\ncf-cache-status: MISS\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 27 Jul 2026 12:33:21 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: EUBWqMPRMr:64,t83\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":320,"size_decoded":1020,"mime_type":"text/css","magic":"ASCII text, with very long lines (319)","md5":"fe4014fc811cd9a00019506522c003b2","sha1":"a5fbf3313feab648057fd0b5c9d913f0c4faa950","sha256":"c28ab93f1775976f756acb1b7bfbadd8e710365b0a6a0497774d8a7a5625c7ed","sha512":"906760cf8488c47e16ec220ac8c4279f478760c2695d8f9f3ec6480577b0f74248c76de486f673e8e044186f6ea332684a5044d766e206d8b131f43743820229","ssdeep":"","tlshash":"34e02680d64c033e9e9f2367f395f4a0f18045ca411740e3a90120098bc8b7183e333a","first_seen":"2026-08-10T18:48:38.637505Z","last_seen":"2026-08-10T18:48:38.637505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/index-D4USwkjV.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.659Z","timestamp":1786387664659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/index-D4USwkjV.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 1074\r\ncf-ray: a28f3405fa2b53ad-CDG\r\ncf-cache-status: HIT\r\nage: 1063533\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Tue, 28 Jul 2026 22:15:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: oLTMcizddB:425,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3977,"size_decoded":1913,"mime_type":"text/css","magic":"ASCII text, with very long lines (3976)","md5":"ba624d9baee7055e8e88a217e4521cd4","sha1":"01dfed37bdf975a553591682313b55639b7af282","sha256":"e122c072c813e1208f119cd0bc8cefb0a63a577568010cdf0603375472aa4969","sha512":"315399cbdcbc3f0678fdf78f8f3b9cf8834c4211776d3f1e2c02315e0a8891b2f8a20e71b7111bd87077e94e957cd5825df15e2eaa7f528cd326f14a4cd42c6b","ssdeep":"","tlshash":"40812f99925da23eac6be226aaec126d50366530df7306e9f05e312746c77f30973708","first_seen":"2026-05-31T11:11:56.08268Z","last_seen":"2026-08-10T18:48:38.640579Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/EsimGridSection-CzYKQ_C7.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.233Z","timestamp":1786387668233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/EsimGridSection-CzYKQ_C7.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/EsimGridSection-CzYKQ_C7.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/primg/w360h216/steam-usa.webp","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.755Z","timestamp":1786387664755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /primg/w360h216/steam-usa.webp HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1056\r\ncf-ray: a28faf7a0af5dbc1-FRA\r\ncf-cache-status: UPDATING\r\nage: 1336\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"CFD4cB7l3HCiwDSDRaq+geaI8TLBSd4n8kwTk/ectGLU=\"\r\nlast-modified: Fri, 22 May 2026 14:21:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nx-cfw: NAQTomTnik:3459,t14\r\nx-chosen: 1\r\nx-chosen-size-diff: 0.4536082474226804\r\nx-org-content-length: 1056\r\nx-powered-by: Lightning\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1056,"size_decoded":1900,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e5fe05ddf216542fd86c3da2236d178","sha1":"9b4be27d7d9759c768bcfdb9e49db82d580e6a43","sha256":"dd46389a768c55c1a19f6e1cb9e30f8ddc8bc6927be771aa6a4cc4c1051f5838","sha512":"e20dc268ff4d459e7d006aa2725496ac875a4129d029240f58817586a2d4a7ecb369028f71bb79cc7f6acd360dfd6e12d9148528fb901d698d68dcb1286fda13","ssdeep":"","tlshash":"8711d89bc1056e483af17a27c43acddf93da696f2a34403030801b40e1d9235e06d3d0","first_seen":"2025-07-05T10:40:03.889652Z","last_seen":"2026-08-10T18:48:38.641726Z","times_seen":15,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Backdrop-CImOsIjY.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.322Z","timestamp":1786387668322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Backdrop-CImOsIjY.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 223\r\ncf-ray: a28f340558194d4f-FRA\r\ncf-cache-status: HIT\r\nage: 3323701\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Thu, 02 Jul 2026 14:35:26 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50069,t24\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343,"size_decoded":1066,"mime_type":"text/css","magic":"ASCII text, with very long lines (342)","md5":"094e114064c967093d4a417ad9156306","sha1":"953c88cfdceac7c452ffd01ca703ae0888aa22ce","sha256":"036ccbcf8df8e9ac042f407853e62950143e8b6df4b1f33e13f95af6a87bfa4e","sha512":"08d2077c1bd4dbec1abf7555ed1c0908cdd83de0c409991791a72e1dbc11a408326b269dc5f4f3b8019f7ba6b7f9739cd5d43306e1555b3e2a8fe9b07b24cc18","ssdeep":"","tlshash":"cbe0df10214040b0cb5751aa6a829f0a33ad24bbd69f03fef4dca980538af4aa89d040","first_seen":"2026-04-30T03:12:05.899057Z","last_seen":"2026-08-10T18:48:38.644237Z","times_seen":14,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/minus-Dk-xQGF5.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.584Z","timestamp":1786387668584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/minus-Dk-xQGF5.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 146\r\ncf-ray: a28f2d1e599e9a0e-AMS\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 6394\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:26:34 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zVqkiAenNG:123,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160,"size_decoded":1012,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"f364615689fc211b3287be1ee6850671","sha1":"875e8d3731e5f747d293db6afbcaf4b4d39782bf","sha256":"70dbedb683620ddec8fd565935e3f62093bd7ba7e3ab8acc7149d9ed14109e3d","sha512":"f83a95dcb1a350d0a55c1e331f65be127b5b9b2a8a7c04018ec28594bec39e8427d3f71bc1aa1f2f54850a08aa83de9c836679d25e6a08dff72fea0181490b8b","ssdeep":"","tlshash":"a5c0801badf42fb40d040d55555e1206cd55d494e36208847101535d07614d2755de55","first_seen":"2026-08-10T18:28:18.292936Z","last_seen":"2026-08-10T18:48:38.645571Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/RewardsBanner-D01JhDRf.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.753Z","timestamp":1786387669753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/RewardsBanner-D01JhDRf.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 255\r\ncf-ray: a2238dd0feebdbd0-FRA\r\ncf-cache-status: HIT\r\nage: 92\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Tue, 28 Jul 2026 11:26:19 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: snRXSCbzXO:22,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":1089,"mime_type":"text/css","magic":"ASCII text, with very long lines (419)","md5":"4ed1152dc90153b3e8ee8eee2a3dc0c1","sha1":"be35c6e3d474f04f707224dcf4106cd902d8c511","sha256":"9c247a2d5854cd15fca42ee698b64c522e91d4eda8941f23db0c0f7dbb1400be","sha512":"edba3238a247e1c88a75e018601684f7011ec0c066423c7dff6f7c5d7c39ef3c6ae6852aa9f3338bbc84774ac7aa55ea9243a93713dbe648ea698cfd7a204197","ssdeep":"","tlshash":"98e0ab948f52a33568fff08cd3b7751d82c453166a6701ca9880280f87cd36648b20ba","first_seen":"2026-08-10T18:28:17.851743Z","last_seen":"2026-08-10T18:48:38.58838Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/account-CUMP8LVS.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.787Z","timestamp":1786387664787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/account-CUMP8LVS.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 692\r\ncf-ray: a28e938fce4cd2c6-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VRZgCclaWe:1531,t34\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1933,"size_decoded":1525,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1888)","md5":"edc3ed7ac814a90fee32e224c2f40fa9","sha1":"e09dd44918e2367c1eab92cecc55937d8f858729","sha256":"fe2b7211fa8324907652501f631d18c27b9d557e25b051753c9feefaf93380ed","sha512":"0375aa18d8f4ec42ddfde5842893f8eae346f3a23940ae3657e729dcea9e3d81459c0352f74c9e34eae583aa66dc7f2f86b5d5f85d200a81632adf82c09d9687","ssdeep":"","tlshash":"1b41bd8f74e6b7649fc38c72f17c46ab34b6ec20f51d1e94a194d0aa26500cae136f71","first_seen":"2026-08-10T18:28:17.981762Z","last_seen":"2026-08-10T18:48:38.647495Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/tslib.es6-BzsZg1IX.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.797Z","timestamp":1786387664797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/tslib.es6-BzsZg1IX.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3947\r\ncf-ray: a28e93901a37b270-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:7742,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11234,"size_decoded":4815,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11187)","md5":"e762c83b142cd26d4fd3d7751665b9a4","sha1":"f1c6f1f94d392ee4802c4717445d4488b3405600","sha256":"ffc601cde99fc415938bd4f5a26c4ea75944e03d390dc2d07900f49b27007f7f","sha512":"5931f0a465a898f542bb76d10d9b155415d52c2fb1aa374b60f42c4986674d0e3409a7f119341e0bfe464074ed0ac9cab1db9c43ed940d274dd03bdb3bd08968","ssdeep":"192:YR7IwAvffyVkzGRHpM4N67sDH/icavJ7b/Cl4ZTF/Pof+cSdxGGrjipDEnSew1x2:YRdAvnylRHpMs6IDaB/CmTtfH3KEnJwy","tlshash":"b732b6ddb2d0f0a253673671c42f584bf3395806a95c64507324f9e179b586ec26bf38","first_seen":"2026-08-10T18:28:18.372201Z","last_seen":"2026-08-10T18:48:38.650247Z","times_seen":2,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Combobox-B-kdqndR.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.872Z","timestamp":1786387664872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Combobox-B-kdqndR.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1719\r\ncf-ray: a28f86345d036eeb-CDG\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:59 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tWZjNIthpZ:45963,t18\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4048,"size_decoded":2578,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4002)","md5":"408da09294ded71aa5b0815daa972c1d","sha1":"f0d2aa92484e078577d50ea9ae5eab7f7e21b619","sha256":"904b9e1bfa626adca7ff57c31579e53411d57d1c18827e206a9623e2a0524468","sha512":"9b359b02dd93e4f73f9d5cb74abf3868b38de523eaf888e12707285ec0025bfd0613c2ac5333a4074303652c14d1efc3a4ad8c29f76642f79771490e5e75361c","ssdeep":"","tlshash":"6e81754dd06071f9a71f48a5802b816e72eea2189b0dc1a5e4bb5c543365580b6effd2","first_seen":"2026-08-10T18:28:17.973689Z","last_seen":"2026-08-10T18:48:38.652568Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/extends-C0E7N7lZ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.874Z","timestamp":1786387664874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/extends-C0E7N7lZ.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 226\r\ncf-ray: a2750d311ce8c52a-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lyytAWfgNq:207,t28\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":276,"size_decoded":1060,"mime_type":"text/javascript","magic":"ASCII text","md5":"9cbde063f09d2e878a92765b1755ac79","sha1":"a63ea0527fb23e894ecaaed8fe2a805da865e128","sha256":"9f3a8db508365dd0fe4f905ade8c6f4eb262b16df2a17b43c3a22a3bf12c1976","sha512":"0c65788e1e929eca85a7f0a6ae07c66958ebb31dffeb232d0e12199884a6e7c9d461fc8a10a35133cc828f5189312554d94a2e452e9487e728c0a31822c6534c","ssdeep":"","tlshash":"19d02bcd26e975ff095618aa087ba5c3f2156a41d858d7008004d2e4a8d2957871ea36","first_seen":"2026-08-10T18:28:17.834899Z","last_seen":"2026-08-10T18:48:38.654902Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/shopping-cart-5eD16TPV.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.596Z","timestamp":1786387668596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/shopping-cart-5eD16TPV.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 407\r\ncf-ray: a28f2d211ab8382c-FRA\r\ncf-cache-status: HIT\r\nage: 6399\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:04 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:24511,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":588,"size_decoded":1277,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (537)","md5":"fe2b530abf75fdce9293766204b11efb","sha1":"fac5354c15c0c1aa6b205a332c2c63ea0e0be698","sha256":"73c5f441e6aea37ebfede89a1638b5ceb6d51d5fd8e09379abd3403402bad4e6","sha512":"777420be3617b47114f1c14d6dd36b7feb25a1cde03d6c2ee5753dafc1059e547a8b2974a502ee809e9833fd56e085521c1da3b0d89b95c83e0731f369ddcb9a","ssdeep":"","tlshash":"73f0781edab51cbdb40b4c8dbaa9a0aff77ed7a5bf4b1104e69c1a2112001c09332bd0","first_seen":"2026-08-10T18:28:17.998928Z","last_seen":"2026-08-10T18:48:38.657407Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/TextLanding--UoQo7b3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.623Z","timestamp":1786387668623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/TextLanding--UoQo7b3.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 331\r\ncf-ray: a28f8669d840f4e5-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:66,t14\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":469,"size_decoded":1174,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (420)","md5":"c59306e709349a0711c3420cc5ed4a84","sha1":"a323a0dd80bba0e801468260931c8d06cc34a3bd","sha256":"0f0d6851693d2eb663d19ed5705a98d29623fb4d994cd517456ffe8178df0062","sha512":"0513329e73cf99ac0f0b407cb093d23048a7240087fb9a58772eb14f04d297a64b8ccebdc393a53a97ac0c2e1cccfd7b6fdf9f3e95e1d81b73119c012f625c38","ssdeep":"","tlshash":"fcf09728eca4a0f876480cade13913ba1375d829630194a5e06da00417352a5e87ff6a","first_seen":"2026-08-10T18:28:18.301393Z","last_seen":"2026-08-10T18:48:38.65942Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/BaseBlock-D8czzRx4.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.692Z","timestamp":1786387664692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/BaseBlock-D8czzRx4.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 487\r\ncf-ray: a28f3405dc1c371c-FRA\r\ncf-cache-status: HIT\r\nage: 2888108\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 10:36:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jeySHQyKxh:16,t17\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1859,"size_decoded":1325,"mime_type":"text/css","magic":"ASCII text, with very long lines (1858)","md5":"638cc0085aba90e1601887adcaaa60a9","sha1":"1bd50a2199dfb6e231a04462692d8cec9a89fc04","sha256":"a868d79cf70d5b8099f85f678b53d0ff5a6c6e5323b47ea99ce399bf0a1e1339","sha512":"5ba2358ef2018ff228f778b79a4cf167081bd9c72359d6b7b9f117b5933637da9117f8a5ba4e6fceb1ceb1c864742afe5ba62e7342628c9ffec6db393a04e5de","ssdeep":"","tlshash":"6c31c38bb129b639f82fd01ac6b8124c61591119864f70e7d451722d03fb3eb2d7326a","first_seen":"2026-05-31T11:11:55.669095Z","last_seen":"2026-08-10T18:48:38.661286Z","times_seen":7,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/getAbiItem-BWBs3s05.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.936Z","timestamp":1786387664936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/getAbiItem-BWBs3s05.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4201\r\ncf-ray: a2750d2f6fc439e8-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: JZBXrKgoTU:7562,t132\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14008,"size_decoded":5036,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (6594)","md5":"1196a1c4d1e2ee64c4cc130ec7471bb9","sha1":"20fbda7bd958e5970bb577ae6f4f9691fc49d098","sha256":"05cddeec6459d168c2cd71490af53d1d0ce5c115ab8ef34b43bf308140ac8763","sha512":"15374cb4c120e4567168998bdcad9f852304e56ba38df571c2447722bac06a1d2826f442058b417070e6442d9e361e625a7e481211e4c7a200d9e0700c6dfcb9","ssdeep":"384:On+e43DsNEpweaZkgvNvy9mku5ArbExGC88EuR:O+e43DsNEpwe/2pbibEoC+Y","tlshash":"4652d6efb3e571f195e581a041eb0445f264b4b1f20c4054b59c2c963fa6de883faf95","first_seen":"2026-08-10T18:28:17.816162Z","last_seen":"2026-08-10T18:48:38.662632Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/NavLanding-BxRMYITu.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.228Z","timestamp":1786387668228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/NavLanding-BxRMYITu.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/NavLanding-BxRMYITu.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/EmptyState-DPn2i2ZH.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.750Z","timestamp":1786387669750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/EmptyState-DPn2i2ZH.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 241\r\ncf-ray: a28f34056b704d7c-FRA\r\ncf-cache-status: HIT\r\nage: 846662\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50072,t15\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":386,"size_decoded":1083,"mime_type":"text/css","magic":"ASCII text, with very long lines (385)","md5":"2ea54823270afcb886e1e5636bf11229","sha1":"560bfef13e6d99708aa5dcae63b3f196142d4966","sha256":"1222b2870f92a99713958cf96570f812bbe58a747b8d27a3da686772b71025b8","sha512":"43600815e048c181e528eb70782bb0bdab538e7412df163e9d4c3b10f055c78461fb35e00ef9aa245468f50e5f12ffd8cf5c9a9a29f4061db847aba437cb6f83","ssdeep":"","tlshash":"e8e02b559705c13cbc3ee214639db55cb4847a08ce0380e5fc9a712083dbbf21473461","first_seen":"2026-05-31T11:11:56.022221Z","last_seen":"2026-08-10T18:48:38.664556Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-BxE1RAiz.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.799Z","timestamp":1786387664799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-BxE1RAiz.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 193\r\ncf-ray: a28e93904ffcd2c6-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VRZgCclaWe:1532,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":254,"size_decoded":1059,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"fa9848adc2bed13cb58a6a8181dd364f","sha1":"cd199441f37c21bc49a8e701da69917fb6ea9f34","sha256":"5294f07fbd4722619e588d1354aec22ce7c5e1ee6b4de46317c7d94dd3308521","sha512":"1158bfd6af9ea1614b160340260f086de0ea6d1db50daeadc1a591cd0dd7589c329d5b8e78cee04ed7b010d2ffd97f6d0fd6579816612c3fe00452eeacd13378","ssdeep":"","tlshash":"45d0954ff5e087f1a7054ce7803651f3b320b0a683499674c00a45d943a7da0b036f36","first_seen":"2026-08-10T18:28:18.158769Z","last_seen":"2026-08-10T18:48:38.665742Z","times_seen":2,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/EmptyState-CQF2SBgT.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.849Z","timestamp":1786387664849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/EmptyState-CQF2SBgT.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 484\r\ncf-ray: a28f86342b1e4d7a-FRA\r\ncf-cache-status: HIT\r\nage: 154\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:51731,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1107,"size_decoded":1328,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1059)","md5":"63c336897922133ce7937ede99d90ee6","sha1":"78c363f002332f615500d8fb742106e8e3a3d5e2","sha256":"33f0eac348e1ad736facf37462904c50a8e3bd752673d3d4e15dae24820c9dcb","sha512":"360f010002d63411e5461dca87214e5539e4f2054c438afc0581d914a6b16dafe2d55a8c804900c8cbca10eac159eee85ecd92082c5b766a8d6e8624c6a6ebb4","ssdeep":"","tlshash":"c911a942f92a69f8b4261c8cc04e825bbf19c0dcd30e8dbaa09a113002c14a4fa16fc7","first_seen":"2026-08-10T18:28:17.91152Z","last_seen":"2026-08-10T18:48:38.667681Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/polyfills-CZmxIG97.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.604Z","timestamp":1786387664604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/polyfills-CZmxIG97.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 24177\r\ncf-ray: a1e0b005c8b8e010-FRA\r\ncf-cache-status: HIT\r\nage: 91\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 20 Jul 2026 08:44:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: nqDLowEoGc:17,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73240,"size_decoded":25043,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"833f5d0b0541d08a9938308d1913dc41","sha1":"838da3a61167f5915c8e525be186f5e1592f1aa8","sha256":"c6a3607b48a3f43d741b4c96f324168c3f0b82b7b603dc77524d5b185d4eaa26","sha512":"93115063d64a05c7fefdc5953f71535c4b5befd4f5545205d031c036d23a8e13196ec57fd4cbc8a453aa6ad14c3d73c04d80e64ff9434aa0a3ed322875c0c6ff","ssdeep":"768:J1nhWxyE5fHDRUkepkNmP8PrdKhAm6mN/ZaVlQP3LaQugPzU:J1wMksP8Jm3+Qq","tlshash":"8f63a686bad5b0e502b7b559402f4407b3261a45bc0ec4a8f27fe9d078bdc499136fbe","first_seen":"2026-08-10T18:28:18.014295Z","last_seen":"2026-08-10T18:48:38.566433Z","times_seen":2,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":62,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Product-C26tbHVc.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.687Z","timestamp":1786387664687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Product-C26tbHVc.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 1068\r\ncf-ray: a28f3405ae5ad5a8-CDG\r\ncf-cache-status: HIT\r\nage: 983876\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: iliVLMVHfv:31083,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3629,"size_decoded":1908,"mime_type":"text/css","magic":"ASCII text, with very long lines (3628)","md5":"42b99cf24360b2b9eddf8daa6c2df89a","sha1":"0cf40a729722c52a034195f27987502e163f5f15","sha256":"f2267244de6dbdb8bcd9d3b4ab0beb6bbc18473e2550d67dfe1d059ca259ea99","sha512":"c062784f5627498180e2f90eb4e463715c852b2dcb314f35cfbfaa3d20b50f6a881f86571286a9abc9d7b94b8982773b263018320e3f6db53538d549ea74d5f1","ssdeep":"","tlshash":"f7712297c960633e4c27ea385ffae54c55380676ae2306ed7978525cb3c7fda2653400","first_seen":"2026-07-16T00:57:04.980715Z","last_seen":"2026-08-10T18:48:38.669526Z","times_seen":4,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/AnimatePresence-B6RBB-Qx.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.814Z","timestamp":1786387664814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/AnimatePresence-B6RBB-Qx.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1509\r\ncf-ray: a28e93905f353616-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47380,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3309,"size_decoded":2353,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1938)","md5":"f743b920886a33e57de242d3656b0203","sha1":"dc631edf67d154251c082f4208f0de01c4736e80","sha256":"7d53ee691861527d042235c8313598d4cc02db871d5b9da515a476071663c1e3","sha512":"52e9d313f42a161c3c61a3dbd7d596724db7db7ea7c77839cb1141f4558dfe0616e3cab98f4cf46c79468ce587232da01ebd0ec696b57a117ca127a3399ef032","ssdeep":"","tlshash":"4761646961e03573a79e80ea813b46bdba3b244c110e8818b27d3c8d2b508d1b0f3fd7","first_seen":"2026-08-10T18:28:18.107573Z","last_seen":"2026-08-10T18:48:38.671772Z","times_seen":2,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/link-helpers-BAQdjK7t.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.956Z","timestamp":1786387664956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/link-helpers-BAQdjK7t.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 436\r\ncf-ray: a28e948b8b4c9736-FRA\r\ncf-cache-status: HIT\r\nage: 152\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: uKvJGYNeXq:3,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":590,"size_decoded":1302,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (540)","md5":"5f9e8c3333bc38bf6251cee34a143598","sha1":"9d49797404d04907ed43654ad57945e701b27505","sha256":"8b73242d914c08e3a06f258bd2e9afc539caa098e037ec4b047ecbf3222cc964","sha512":"4ea16caec1943df22e1dc23311658968dc66998a066bc026c52ffb43835e8c52f42664bf4928c75d42124f3397fdd7c6087b9fe9a40c3831ffba389b4209b172","ssdeep":"","tlshash":"f1f002cfb5c8a032a12e4e90c09b868db7349c4a6e4c818090c091b46b00dab51d6e48","first_seen":"2026-08-10T18:28:18.324188Z","last_seen":"2026-08-10T18:48:38.673869Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Stack-DwHNhaFJ.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.295Z","timestamp":1786387668295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Stack-DwHNhaFJ.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 764\r\ncf-ray: a28f34054cc74db8-FRA\r\ncf-cache-status: HIT\r\nage: 2787509\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 05:33:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50068,t38\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5202,"size_decoded":1605,"mime_type":"text/css","magic":"ASCII text, with very long lines (5201)","md5":"22c2b3620e67ed690ba7392b9a692bdd","sha1":"10f5685f02f58f913a7afb8b86d31b4939373880","sha256":"50756ecefb7f7ee91adee51693b12cb985dd1a1129ac0dc180ebbc5f2f8ed56b","sha512":"232d30b91c7987a802cdda2f560fd7243c28900b750e03eba1e84d1c4055a2c3802ac4381d8a178dcd13d2c2ece91d4059732b5dce093d33ffe4a9f6258e9ded","ssdeep":"96:d0mluZUmtbBB/VwBRwz13B820p3a8F8q56r4q7obDKo62pUA8+QKZwcM7:lE10Rwz13B820tXF8q5M4q7wD/a","tlshash":"49b129593cf34a3e4fef850425ba7515c3b7acd8c82510c42f9fa2570ad7bab17a2588","first_seen":"2026-04-30T03:12:06.017331Z","last_seen":"2026-08-10T18:48:38.564117Z","times_seen":14,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Input-Co4Qphjw.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.853Z","timestamp":1786387668853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Input-Co4Qphjw.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Input-Co4Qphjw.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/PreferencesModal-CtoqIVMh.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.704Z","timestamp":1786387664704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/PreferencesModal-CtoqIVMh.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 671\r\ncf-ray: a28f34061e659c23-VIE\r\ncf-cache-status: HIT\r\nage: 2410925\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 13 Jul 2026 10:25:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1345,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2355,"size_decoded":1510,"mime_type":"text/css","magic":"ASCII text, with very long lines (2354)","md5":"3d010c38e7c33c60afc02d4060996484","sha1":"ba6807ff2c67b2a0abba338d00d620edbe95fb0f","sha256":"62fafbfdc8737722caa39d8ed9d93a162102fe6ccdb237592aefef407c9be15f","sha512":"116ab2df893493df79c5ead2f9c914838b1032a0a29af73e069206d2285c07201a602b036563335f0f120f0c486787ef4486e25107792d120b7a27f74a286c14","ssdeep":"","tlshash":"6f4142b21b54b33dec3fe01886a677de02989510db9726ebf814708807cb6f64c33589","first_seen":"2026-05-31T11:11:55.618207Z","last_seen":"2026-08-10T18:48:38.528289Z","times_seen":7,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/bitrefill-CTqMSf11.ttf","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.561Z","timestamp":1786387665561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/bitrefill-CTqMSf11.ttf HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/URLStructureRouter-UQLD4QC1.css\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 28741\r\ncf-ray: a27c7a5ffb74380d-FRA\r\ncf-cache-status: HIT\r\nage: 4905251\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AmsSZsixLf:3838,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73832,"size_decoded":29582,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 17 tables, 1st \"COLR\", 12 names, Macintosh, type 1 string, Bitrefill2RegularVersion 1.004;Fontself Maker 3.5.1;XXXX;Bitrefill2Regular;2021;FL720Bitrefill2V","md5":"18e5f2563c145cc59c9d727a7a731196","sha1":"d91963892437e1e24997c8a56648d1b2e69a2e63","sha256":"379d664da7b2fcf8d3b7bf975d5148fc746a196bdccb81c3f421c6c0adecb0c8","sha512":"b956e3d7f3d00322992b8fe7aa517b6791ef4c2403a96d967d1ba5ceddc0e8466135b38955d8b8e4b6015eab750a2d6fc3b170f251c19bac640b7a0ded1b3604","ssdeep":"1536:YYuIW9ThThTyImyL0BjDz8aY2jMB4gb5yoQma006zeyG:YYHW9ThThTz14jTjMek3Q5006lG","tlshash":"3373098ba7c5bd1bc5de0bff8ca1c23a13aa6d249525f707be94781cf29c1508da4b50","first_seen":"2024-04-22T10:50:34Z","last_seen":"2026-08-10T18:48:38.675436Z","times_seen":19,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Image-Bbbl7GSj.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.305Z","timestamp":1786387668305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Image-Bbbl7GSj.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 264\r\ncf-ray: a28f34055d03d406-FRA\r\ncf-cache-status: HIT\r\nage: 5036676\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 12 Jun 2026 12:35:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:890,t38\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":495,"size_decoded":1105,"mime_type":"text/css","magic":"ASCII text, with very long lines (494)","md5":"70b05de0dd0eb54ae7da2a69947ae2eb","sha1":"04765184c015e6612e115281198c194f6b5ceb2c","sha256":"2136c6b9e33e97e166ee34eb0eabf023c8cd94263d36eae3db89b9b7ce70e380","sha512":"4a5ee3620d84046286fb2521426093530be0ddbd02443c7793730fcd29d2211a689169192981075cb857f8f8de8b64dc0590a3dba85e563d989a8f1352449c24","ssdeep":"","tlshash":"dff0e9a0d50cb2bc8937f3897040d499fbd94455db7121e9acc9f2d4d905cc4649d0a2","first_seen":"2026-04-30T03:12:06.158162Z","last_seen":"2026-08-10T18:48:38.676453Z","times_seen":14,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Experiment-ioY28yAQ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.614Z","timestamp":1786387668614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Experiment-ioY28yAQ.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 450\r\ncf-ray: a28f2d21dd48368b-FRA\r\ncf-cache-status: HIT\r\nage: 516\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 12:51:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47836,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":751,"size_decoded":1319,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (703)","md5":"247a56a54fa735e2fdc876f0e9f6033e","sha1":"1ae667f56b3566102dfddf57df4b5ecfb975f6e8","sha256":"dff60babb9e6744fc5b96438bfa6f032088f803992f9bb6f93240b7b19f6da08","sha512":"084a726bbdf5f9140ce17173bd639392f6b468eda960c12cba3630356b38c467c3220b1e0bc028c71bc875fea5bf510e3eab9af25ce3b106a689fe0e1b33575b","ssdeep":"","tlshash":"3501bd0de95057e1990e48f9ca19a5fbb3396048f218c6b0b119141c3766dd46326fe4","first_seen":"2026-08-10T18:28:18.28576Z","last_seen":"2026-08-10T18:48:38.677543Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/orders-Duf3M7Fx.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.722Z","timestamp":1786387668722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/orders-Duf3M7Fx.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/orders-CnQjDLm_.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 280\r\ncf-ray: a28f2d2289f49274-FRA\r\ncf-cache-status: HIT\r\nage: 6394\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:870,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":510,"size_decoded":1124,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (466)","md5":"2b84251c1ff1cb80fa2c4828ba50bf8d","sha1":"502e9bb6096b9f2ab865ff8250202973a96a7982","sha256":"6a5a7a08fdf1460fd0d54c7fef1baaa894b8bb232d0f136d5a8b98ed100391a6","sha512":"86280c022c4720fe7a54a5397817ff7b58cc8dbaec403ebbdd803093eca4b7f98d3a43381655de999bf55fc3d58802b2772835ac033b0d40aafd0d3250c7394c","ssdeep":"","tlshash":"64f097c7bfe620a3c81bcf11390e8f89c6050c17de3bad887e8040cc43cc1913a19022","first_seen":"2026-08-10T18:28:18.275023Z","last_seen":"2026-08-10T18:48:38.679846Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Header-CAWkZLh6.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.703Z","timestamp":1786387669703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Header-CAWkZLh6.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Header-CAWkZLh6.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Button-DUd9V953.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.632Z","timestamp":1786387664632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Button-DUd9V953.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 929\r\ncf-ray: a28f3405bac8db07-FRA\r\ncf-cache-status: HIT\r\nage: 5101601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:917,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4165,"size_decoded":1768,"mime_type":"text/css","magic":"ASCII text, with very long lines (4164)","md5":"5cc2c38ec50c0679ab3efa6f97dd600e","sha1":"a95f22ed23f1b4f90552c5807e1acd883cfbd961","sha256":"71ab274eef2d8fa43d6657b2a68b84abdc9728432f315671a0e041f8420ede86","sha512":"eb2bd533e5e9455d3059c00cba2d8140e4668efd240d823d402220796a959547c9fed4fbc280a53daef8acef4a880c18a8baa6dfbe773f16c0ef8f989424526d","ssdeep":"48:d2ST7L8mVSo1Jyhfqcjuz1zNlax03ZlIRRNk9BNFNANlYNPPcpN7T6Gd+wI4KBCP:dN7BSo1JytFsr4GTOYlm7J+wPGpR+7","tlshash":"7781e2e8d3f2b73eb92f95385198d2d97129b08add621bf9f425706183c2afc6075702","first_seen":"2026-05-15T01:25:35.80989Z","last_seen":"2026-08-10T18:48:38.458352Z","times_seen":10,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Link-B6vCSCdt.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.635Z","timestamp":1786387664635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Link-B6vCSCdt.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 104\r\ncf-ray: a28f34054eb0248e-CDG\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 5101601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: oLTMcizddB:422,t5\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139,"size_decoded":942,"mime_type":"text/css","magic":"ASCII text","md5":"e27d3252faff80cb1fd1ae4bfaa574e5","sha1":"cf4110b533566dbf158964cf2a9958c1c70a70d4","sha256":"67ea2a5ef644acca7d50ebfa74b0b07c5033d91187897251bd4b385b03b5e4cd","sha512":"165caa9faf747e4ea6b8110623351e32e01d426477cd535fb4730bb94742599db3449877743020b93f4d6d8bd2d3b8cb471975da4f2f179488c96b1acf3c5671","ssdeep":"","tlshash":"b0c02b04e3003e23ad039904bbc41b5b7c154450605154e4f8c0b21cc24d06fb8a8260","first_seen":"2026-04-30T03:12:06.039242Z","last_seen":"2026-08-10T18:48:38.681119Z","times_seen":14,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Input-Co4Qphjw.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.652Z","timestamp":1786387664652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Input-Co4Qphjw.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 1061\r\ncf-ray: a28f3405cc2065aa-FRA\r\ncf-cache-status: HIT\r\nage: 2192740\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 15 Jul 2026 16:37:08 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50073,t19\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4274,"size_decoded":1903,"mime_type":"text/css","magic":"ASCII text, with very long lines (4273)","md5":"152488a2dc11f6174313ee1706db2f08","sha1":"33293a9a55f5f7500905291c790205f09b488a8b","sha256":"30ab3e3d889a3ae36a67af530773a706a382b82c56eac4c78eff1728e195c39d","sha512":"da85a662c8f8d4b9ad57a2ddee75101bce942e79946dab47f819b2012dbd0bacf4f40d82920c48c1b255de4f3cb4e492907df942b1b7a438a2c60045a531ac77","ssdeep":"96:d/SHohoKlEeMq2gljgD6ptOZyjrf6tasN7:5SIhoKlEeMq2gljgD6L6tasF","tlshash":"fa9111fc53a1ad3e6c3ba527629ca45e33143162a96306e6fc706724cfc3bf14a5e601","first_seen":"2026-05-31T11:11:55.721014Z","last_seen":"2026-08-10T18:48:38.682083Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-vI-ePLqY.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.803Z","timestamp":1786387664803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-vI-ePLqY.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 388\r\ncf-ray: a28e938fdeb81e57-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CmAkpebaOs:28328,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589,"size_decoded":1258,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (547)","md5":"91b215d9a4e1e087ba1e0cc3cce8ce1c","sha1":"84edb61328d77f2f0bfdc8532b0442956c17cbcd","sha256":"00a21a1f5f0b99a158daba6d3a40e035ee99e5551c4b8cd3a701a978301fc0cb","sha512":"9e185a605c5224fc1654acaec8fcbc73927469c4fbaa6cb7acda644319364b4cd20c0ce6da4da0bf9f6260862db5d467d19b25e182f3c77a9b447b4e9a4c4241","ssdeep":"","tlshash":"8cf041777bf170bbc2548083806f28b2a03890a94a42d70ac0584c0f0d060a2e8b7f38","first_seen":"2026-08-10T18:28:18.327003Z","last_seen":"2026-08-10T18:48:38.684576Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Roobert-SemiBold-ChrvmRyi.woff2","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.432Z","timestamp":1786387665432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Roobert-SemiBold-ChrvmRyi.woff2 HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cdn.biterfz.com/assets/URLStructureRouter-UQLD4QC1.css\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78408\r\ncf-ray: a28f93edbbf46eeb-CDG\r\ncf-cache-status: HIT\r\nage: 1067451\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Tue, 28 Jul 2026 22:15:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: JCYNYPtFpi:657,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78408,"size_decoded":79250,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 78408, version 1.0","md5":"933892be902fd47ec0b62fb29252c39a","sha1":"d4613f28f9e126ef7d245a3e3ecb4bf4845ca2dc","sha256":"c72aa6425f13c2dbe806ef89479b71e1d443aad12196cc5a9b5182c7ea6f0337","sha512":"0aeb6a2ae4ba4ae7eae9dec2fbf5d65bdaad81b02f4e40d030fa2a7691d86337ba9db730068183b02d7d78f81e46f3cb265c113b513cfbe598dd23ef508fc133","ssdeep":"1536:aBHHuL2+pvF+UfBD8681YYTUsHoBiCj+Ta3fx+F6PLA5J9QmfwjmeYfJdeOwwuQ1:aBnb+lR8/1YYzyiCj+4Q39QSAMhdeOKw","tlshash":"f573124d69eb82fbc64e18fb50350fe5c0e47edcee21d58b945fc24a660c44a3d6289a","first_seen":"2024-12-01T19:46:25.277223Z","last_seen":"2026-08-10T18:48:38.685937Z","times_seen":92,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/product/hotelgift-no","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:50.276Z","timestamp":1786387670276,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/product/hotelgift-no HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nX-Rel: cbbcd5c33ba171317476fbc5fbe9b33976e00d1e\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:51.688Z","timestamp":1786387671688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/x-C92ksvIV.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.822Z","timestamp":1786387664822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/x-C92ksvIV.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 339\r\ncf-ray: a28e9390bb2cb240-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lrHSCqsVfP:19198,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":454,"size_decoded":1184,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (415)","md5":"7ee737babc013fc81014b35024b677ff","sha1":"b165e9bbedc3bead71da93f4a024b290005c7e9c","sha256":"56b7aedc259a5a58f0f9cef89006f0a8f6b3cd5749959d8f591e51ec123e03c4","sha512":"98165bd9de29116fc662a0a309901378671d6ddefc3c3a41d8c4bac1b2b8b74bf8619d1200183092796918b0ee9f5b3ae2639078575e6d3599cf6bb6ae675c9d","ssdeep":"","tlshash":"d3f0dc0fce785c7cb01a0d9daa69b54fa6a6d2a5af832a14b28c147003001c0572afd1","first_seen":"2026-08-10T18:28:18.360611Z","last_seen":"2026-08-10T18:48:38.686954Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/UserMenu-DUceNmTs.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.881Z","timestamp":1786387664881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/UserMenu-DUceNmTs.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1534\r\ncf-ray: a28f8634b9b3dcc4-FRA\r\ncf-cache-status: HIT\r\nage: 155\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:2454,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3391,"size_decoded":2401,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2036)","md5":"11bac6d8014c2f0a2df8c70cb3a31463","sha1":"f4a5edcd72244dca8fcf1fb02f110eb673d344e5","sha256":"a95379ff72d850ee56c46b4a92f0912e512f9cc43c6edd9538b11b44b5f2c085","sha512":"dd2ec619f3091feee40d64d4960a030bdefb1a2501e0fec71b3eda17dda7173eb94910530256fb80ca4737e822f1a12faec24b8cfc6f6d67c123cece1b7eb7c2","ssdeep":"","tlshash":"ba61300994a05bfcb35c4cc9901b20aa26e953498604e4befeb72cf4735a8c19196ff7","first_seen":"2026-08-10T18:28:18.045171Z","last_seen":"2026-08-10T18:48:38.688284Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Avatar-BMA0Vlrp.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.882Z","timestamp":1786387664882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Avatar-BMA0Vlrp.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 34274\r\ncf-ray: a28e93d10b652757-FRA\r\ncf-cache-status: HIT\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CCmZTzPoOp:11,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82748,"size_decoded":35141,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2f84eaf38c66b8b95459f4e1bc4d015a","sha1":"e97647799a4a02b1bee0032cf25770657b20c563","sha256":"8d0af25812f1fb893c091a1c2f0eaf10940d3dd04a5d91d4eb551496652ae63f","sha512":"16d7006ab2ecbf30fa4dc0bc19314c1e6df3fd3f244b4c6b028ae21d421a03822d4c29efc5b55ef10c74189a0c6125905c268be968520ff50e296387bb5e413d","ssdeep":"1536:eQyP59pPoQLQkkwlAUgebP1FFHT8fAlM3HuOhvmrzpba:KqOZba","tlshash":"f783d7d9a3f5a2e4f00ae7f4c62798393a5b2cf93f72c65867d46c90d61108c8999cc7","first_seen":"2026-08-10T18:28:18.185776Z","last_seen":"2026-08-10T18:48:38.68952Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/sha3-I3SyPsH5.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.933Z","timestamp":1786387664933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/sha3-I3SyPsH5.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1407\r\ncf-ray: a2750d2f5953916a-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NTCtKCSaut:6333,t30\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3112,"size_decoded":2241,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (3070)","md5":"5c6c6ce9c96fbd48506a4bc7a99ab9cd","sha1":"78af8643193a3f2b4cb4070580e943bb800461c4","sha256":"bb5b2edd607a61cf9103b8a6533b4fcfd9f91deaa36df3e7dc7b5a579e313189","sha512":"8048aefe04dace4df95a0ace9225d8ec4b05769697f6669c8520752b716beff4bcd0092f9c694e2a641111ee13a84557855046e8a48ad6fc6f8e4d3f46554f0e","ssdeep":"","tlshash":"3b5132a9132515ba9b8c87f70e284465d1b1f8a434054f1d7aed29eeee620ae00bce31","first_seen":"2026-08-10T18:28:17.841749Z","last_seen":"2026-08-10T18:48:38.695555Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Link-78T-cJXY.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.371Z","timestamp":1786387668371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Link-78T-cJXY.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 230\r\ncf-ray: a28f34061c029b98-FRA\r\ncf-cache-status: HIT\r\nage: 1176004\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 27 Jul 2026 17:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:9285,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":419,"size_decoded":1072,"mime_type":"text/css","magic":"ASCII text, with very long lines (418)","md5":"27ecac0f6a8454eb5edc434e68e99f6c","sha1":"1dbbf5f326d3537d243d6f6580e77d0d33a2f8d7","sha256":"ea32e90ab4ed4a759d2966908b8cc1e7a53f4b216d7460cecc295efcc183821f","sha512":"51e3b34331c5916a96ab3b39a191d8d4ad7c1037686dfcae93f82cb67fcebec0ca8bed10e634406b850e8fc77149cae3f9748a7413c681ead5fc74bc78abcd46","ssdeep":"","tlshash":"28e0ecee0b1d2177c44b553b53ad43c5e1b34090ca6790c2a5bb9b30d395b54e2dd041","first_seen":"2026-05-10T06:59:24.4501Z","last_seen":"2026-08-10T18:48:38.307235Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/orders-CnQjDLm_.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.613Z","timestamp":1786387668613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/orders-CnQjDLm_.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 288\r\ncf-ray: a28f8669c8d1dbdb-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:3093,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":441,"size_decoded":1157,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (397)","md5":"5149ee288666b5a821b00488079e0e04","sha1":"52d26019b3cc3fc743ef944215d0aefe87827e7d","sha256":"2f1ddd7f61c94be4dda40eb30a6609b82c1972173787e5bc6255f462e127e644","sha512":"e766fa63141db6b3044ca8afa5f033711e9a6fada242d2b4b0b72347e52c2be5ab7761179cbab11766855ae9a298a6484975463bb822a8e301e22dc058fdeca5","ssdeep":"","tlshash":"c0f05c036cf820ec90286744c0b957c5de916418b2d60a2aed4d8b641614406b27bd21","first_seen":"2026-08-10T18:28:18.188397Z","last_seen":"2026-08-10T18:48:38.710994Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CookieConsent-DlAbnUNB.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:50.246Z","timestamp":1786387670246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CookieConsent-DlAbnUNB.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 195\r\ncf-ray: a21bb12e3b6718cb-FRA\r\ncf-cache-status: MISS\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 27 Jul 2026 12:33:21 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: HlfmSvEcBL:1495,t251\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":292,"size_decoded":1025,"mime_type":"text/css","magic":"ASCII text","md5":"a0e8f773dcf102cb51d89cfb9e4c7d33","sha1":"eb8052574dfb43a898e0c98a2343eae9f2ecd606","sha256":"12cd269c1aa3e5d24a29b63ea5c628968bb7a4627e63bfed148f37f3b19dab8d","sha512":"46329a9925a6e522f5972e233b2d3c139437bdb67eb0e13f93abf8390a27496df3f3f099aecbed060f73982bbc4fbf0fc4d870567ac91a381340ac7173bb88d7","ssdeep":"","tlshash":"f6e0c28aa604cb3c9dbfe110d35ab86df0946a0d980368d7f482311263dabb21ca3d49","first_seen":"2026-08-10T18:48:38.716481Z","last_seen":"2026-08-10T18:48:38.716481Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingSection-ByKy5iS0.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.668Z","timestamp":1786387664668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingSection-ByKy5iS0.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 395\r\ncf-ray: a28f3405bc9a368b-FRA\r\ncf-cache-status: HIT\r\nage: 5101601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47873,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1277,"size_decoded":1236,"mime_type":"text/css","magic":"ASCII text, with very long lines (1276)","md5":"f91be4ddf4983c191fb530c08cf7de0a","sha1":"b24e37e18719d494e6865ce99e7a054d44dfa447","sha256":"175d9ae731d6302a2b00952f60fc80efcf5a60cf2c12bcce34a533782f003d6c","sha512":"2f45e4982a0726af46b459a763f440517106785f6fdb7cc9a94f534fcd7b5a372f58a8db2f44f43425cff2a6fb84425d4b1e47d38b2ecc2efd94bc5aaf4be1d2","ssdeep":"","tlshash":"18214b552af3b37c786fb1b1d2ba71da8308a415aa061ef7943532ba5fc27e40437189","first_seen":"2026-05-31T11:11:55.829603Z","last_seen":"2026-08-10T18:48:38.587699Z","times_seen":7,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/category-order-C7g7-U7d.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.865Z","timestamp":1786387664865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/category-order-C7g7-U7d.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 417\r\ncf-ray: a2750d311fe39f1c-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bcBdKSbwcw:6660,t28\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560,"size_decoded":1252,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (508)","md5":"deedf508f1bf442e108ea378741f87fc","sha1":"3ec537305eaf992804523d2b238d38ab2519ddb0","sha256":"8aa49a5567874f9bae794966508df57d6c1fb621e1a632c5294e6bb0488fd707","sha512":"4ede4849c331e37e21b80564c58ae21991511347bca344c8a09faa226c2572df4d28c46643234cc3ba1035c96ab88c64e16c49c65182f1e30cd1c3c2a431a3c8","ssdeep":"","tlshash":"8ef020c874ff68b4a26386bc11e7b72363aca0a1601f8970da68174c3632d57737952d","first_seen":"2026-08-10T18:28:18.184488Z","last_seen":"2026-08-10T18:48:38.720184Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ImageLanding-CXj66i5N.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.358Z","timestamp":1786387668358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ImageLanding-CXj66i5N.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 198\r\ncf-ray: a28f3405edca360c-FRA\r\ncf-cache-status: HIT\r\nage: 2427387\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 13 Jul 2026 10:25:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NUSuistqZq:5,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":278,"size_decoded":1037,"mime_type":"text/css","magic":"ASCII text","md5":"74a9222e155f58b0c7061997cdd82ce0","sha1":"6a807c425ccc842da9b9125185f253111599eb1b","sha256":"2e799d353996267d6e5bfc5b59b436d70ded07e780a5fd81de3f7bd92879f8de","sha512":"a1014aabeacd7256edd9682ee4435fe8d788fce72049569fdd8a68e1f7dcf3b2cd88af8d24d0edbeda7e98a1754f2f78236282658bbe15ca47c50554d02eb5a5","ssdeep":"","tlshash":"91d02e268731f23acc03862cb5e1608e237d982c638301daefd932ee871e2029033c81","first_seen":"2026-05-10T06:59:24.749424Z","last_seen":"2026-08-10T18:48:38.611891Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useQueries-CgYiEvju.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.898Z","timestamp":1786387664898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useQueries-CgYiEvju.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1663\r\ncf-ray: a265b1b6c9dfdc78-FRA\r\ncf-cache-status: HIT\r\nage: 338\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 05 Aug 2026 11:57:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: trroSaaAuS:49,t24\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4310,"size_decoded":2505,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4262)","md5":"9cb94470b173bb0df50195663fbce633","sha1":"e1c655b589d2c60993043a5b7d6a9f1b54b995f6","sha256":"4b78afa388e6541b42761a1754ce7013b1754ee4ac00dcae6a59b2d101a37886","sha512":"3a1772319988798eed1056e515fb52942366ba6bf2d7929b866e885c201be7485ab9185d01ab259121b6d1ac34e165e4606118ab1033b049b12d5966998a789d","ssdeep":"96:4QJHEN1sua+jmd6O2YV18qfUInTOoTj2zZeT8AiLRSK4b73YPonZ4tmiU:H1Y1sua+jmd67YV18DQSzAPiLGQwZH","tlshash":"899156ced753e1ba72fa98cac4bb8065f138e7150c1e0024b1984b4616f5a5ef6b1f31","first_seen":"2026-08-10T18:28:17.855655Z","last_seen":"2026-08-10T18:48:38.722901Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/hero_crypto-CGHYGSKH.svg","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.483Z","timestamp":1786387665483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/hero_crypto-CGHYGSKH.svg HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 6242\r\ncf-ray: a28f36b8493c65a2-FRA\r\ncf-cache-status: HIT\r\nage: 1175649\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 27 Jul 2026 17:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50097,t15\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11132,"size_decoded":7089,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5aa915001adf8bf3836a012381ae12a2","sha1":"4db6bdc2ad741e4eafc17da60b86fa4535aaa338","sha256":"30d0ffe741fdb3c43fccf720b5b5154710bfd5ba8245ba10f8b6b08d861be3b7","sha512":"9131d4af13a715af72753fa8fe10cdcf6aabc5aa5c2bea593d33c87228c79e7941e99c88dc10c28d51c4cf84149b4bf243cc42fe76df4e0059b75eb015cce5d4","ssdeep":"192:FsNysUSm+jPLOHAOEz4gxdR+qNdrAea4k8lNCS2SAASF1TaIltVn:FsEsUCPLOHArz4gxdR+M9AeXlNC4ZSrH","tlshash":"91324af463d4e9f6d91083bc861bb0e0797778ddeb095a58b3a43e439f214ae48486c6","first_seen":"2026-08-10T18:28:18.081038Z","last_seen":"2026-08-10T18:48:38.724678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/credit-card-BegbjwMf2.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.752Z","timestamp":1786387668752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/credit-card-BegbjwMf2.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/icons-CBF0S1-q.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 229\r\ncf-ray: a28f2d1fd9e2382c-FRA\r\ncf-cache-status: HIT\r\nage: 6399\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:24510,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":257,"size_decoded":1099,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"a498a908cd9cbcc5c4d3de8ea583bf59","sha1":"f4461b7a4cd214bedc0537d147beedbfb7c3b446","sha256":"3969155d7d4409a09971ebffc55aa58d1092e1ec3d43810b3e0f8ea602ff7467","sha512":"22f863bb3acc6ea4a90400fc6b0fb8dd1476db7b44993c40b3e4c882a480cf952c7971f644abb2c94dee7538f9bc2819e34ce0fcc0ca4c9ce004f95eae2d906c","ssdeep":"","tlshash":"21d02b2ebeab18fcbf4028a3311e4d46af01c08dc39d0840f250561a4281c97ac9cfc7","first_seen":"2026-08-10T18:28:18.267312Z","last_seen":"2026-08-10T18:48:38.726218Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-assets.i.posthog.com/static/posthog-recorder.js?v=1.415.1","fqdn":"eu-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.877Z","timestamp":1786387668877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:16:21 GMT","end":"Wed, 14 Oct 2026 23:16:05 GMT"},"fingerprint":{"sha1":"A4:C7:89:02:89:1E:87:A4:0F:B1:DE:E2:A8:19:4F:7B:D5:1D:6A:BC","sha256":"36:85:BF:C1:16:3A:49:C9:98:16:2F:48:3A:FD:14:C0:9A:20:E0:C9:AE:CB:8C:72:55:A8:B5:4E:E6:83:5D:5C"}}},"request":{"raw":"GET /static/posthog-recorder.js?v=1.415.1 HTTP/1.1\r\nHost: eu-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a2912bd27b7f723c-OSL\r\ncf-cache-status: REVALIDATED\r\nx-amz-version-id: V_SCWbKP7oEMdPFvaTLnA.wm3N7ydvY7\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nx-amz-server-side-encryption: AES256\r\nlast-modified: Mon, 10 Aug 2026 09:57:04 GMT\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\naccess-control-allow-methods: POST, GET, DELETE, PUT\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nx-amz-id-2: mM5KKDPRYldjvjTSnpE48PyWGI0O4eCe3JlWbvpwKn0G4/V8f9ekWuM4bu6K8k+sY+7Cbz58HCk=\r\nx-amz-request-id: QP7Q0N1QFK7P403W\r\netag: W/\"318b328519c508c911bcdcbf07d44a12\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179305,"size_decoded":58849,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"318b328519c508c911bcdcbf07d44a12","sha1":"d9a8fb50fb4690e2780286db72c60214db8697e7","sha256":"88630bd4ee0d43246b023d4eeb40f76f3e7f3fe8150f5ca816210dfd7fb8dd90","sha512":"3c6e3b55627ee550ec224d3101e4099917033727f3293c0921d34138394390e662ead4c0ef78259afc221f61bc3f0914d28222ad64a95632ede283c6cc602cf1","ssdeep":"3072:J71DfQjbAxIcFEwx/DpZClhf1qJqeSSdqgjHofQDh+15:V1DfQjbzsx7pMlhf1CqeSS4gjHVUT","tlshash":"21043bda7765a0335bf65125c06f0203e2227719204a8068f26fe9e536bc9c771b7f7a","first_seen":"2026-08-10T10:42:54.639814Z","last_seen":"2026-08-11T00:40:10.58942Z","times_seen":40,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitraflll.com/favicon.ico","fqdn":"bitraflll.com","domain":"bitraflll.com","tld":"com"},"ip":{"addr":"91.92.242.79","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitraflll.com/","date":"2026-08-10T18:47:43.789Z","timestamp":1786387663789,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitraflll.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 09:35:23 GMT","end":"Tue, 22 Sep 2026 09:35:22 GMT"},"fingerprint":{"sha1":"B0:A4:1D:C8:1D:00:DB:9A:65:27:61:62:2F:D2:B4:A9:5B:F1:17:89","sha256":"D0:15:21:ED:4D:C9:D3:1F:03:42:F6:3B:CA:46:F4:00:AD:43:CE:64:B2:17:0E:2C:1D:59:2B:29:66:1A:20:3F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bitraflll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitraflll.com/\r\nCookie: cf_guard=NTYyMDc2MWY2MThjMzA2NTM3MmMzNTkyNDExZDBiYzJkOGJmOTdjZGVmNjhhZjE0NDgzZGUxODEzNzAxNTJiMXwxNzg2Mzg3NjYzfGI2NWZmZjJkZGZmN2I0YWVjMzk0MTI1NWEzNGM5YWFkMGI1OWFlZjg2ZWQ1MjBkZDhkZjM5N2Q2ODQzZTQwOTQ%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Mon, 10 Aug 2026 18:47:43 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 685\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\nSet-Cookie: cf_guard=ZmJiZDgwYzViYzRhY2Y2MzUxZDhkMjJhZjM2YjdjNGJkN2NmMTA5NTlkNTVkNzQ1ZGM1NTBhMTMzMjNhZWZhNnwxNzg2Mzg3NjYzfDhhYzc3MGVlYTY1NzkxZTk0ZjVmNzgwNzlmYWViNWZlMGY1OTEyZTk0NzA0ZTU3MGFhNWEzZDdiM2U5NzU2MDc%3D; expires=Mon, 10-Aug-2026 18:52:43 GMT; Max-Age=300; path=/; secure; HttpOnly; SameSite=Lax\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1347,"size_decoded":1293,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"025314e47005e4477b356571739bd014","sha1":"5f0a11d104339243b3c4b7f7ab6f54e6eda98ecf","sha256":"68efdaed30d0d459272626e2a0705ffa8937dbf35ecb2815f51e231850314e2f","sha512":"238560b00dd14efba2219d5a2983fab72df0315b67683370bbd1082bb506c0976dc00bab2b1f3f594bfab0b8e774bf430622a47cc631fdf4112fa9d001eb080d","ssdeep":"","tlshash":"0321d05a0ac18804527183b99bf1f57cfa9740575b048954bddc741b1f75f478853bac","first_seen":"2026-08-10T18:28:18.143548Z","last_seen":"2026-08-10T18:48:38.316878Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitraflll.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/CtaLanding-nL8S_QwI.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.215Z","timestamp":1786387668215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CtaLanding-nL8S_QwI.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/CtaLanding-nL8S_QwI.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/package-DRnaezSQ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.758Z","timestamp":1786387668758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/package-DRnaezSQ.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/icons-CBF0S1-q.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 295\r\ncf-ray: a28f2d1ff9ea248e-CDG\r\ncf-cache-status: HIT\r\nage: 6398\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: oLTMcizddB:260,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":417,"size_decoded":1139,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (372)","md5":"7383f4434d7ca0a98737fd952385dadf","sha1":"e8ccf74894d22146f48dd999686768d7e3f0c116","sha256":"1866bad7da4e7a13641293453e747f3f5bfd55e653a38012a65b66cd10528b10","sha512":"15a938efaafe6d0822f4b05e0182a499cc68cb2880d705442e2ddaa89ef4423fe86db4d859610e69f50584847a30edc84dfb0b504ecfcf9c895af86c4541634c","ssdeep":"","tlshash":"cfe0f12e8f091b7c4d0206a0610ff2044f8e26b5f16ac4b0354c22fd0951881cc7ff20","first_seen":"2026-08-10T18:28:17.92147Z","last_seen":"2026-08-10T18:48:38.72941Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/track","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:50.196Z","timestamp":1786387670196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"POST /api/accounts/track HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Rel: cbbcd5c33ba171317476fbc5fbe9b33976e00d1e\r\nContent-Type: application/json\r\nReferer: https://biterfz.com/no/en/\r\nContent-Length: 8158\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8158,"data":"{\"mixpanelDistinctId\":\"$device:19fed00934e873-019d5f226e794d-f515724-140000-19fed00934e873\",\"meta\":{\"rid\":\"ae4d6663-e07e-4836-8c7f-182cc1b552d2\",\"ts\":1786387670193},\"type\":\"page\",\"properties\":{\"type\":\"page\",\"properties\":{\"title\":\"Bitrefill (Norway) - Buy Gift Cards, eSIM \u0026 Airtime with Bitcoin or Crypto - Bitrefill\",\"url\":\"https://biterfz.com/no/en/\",\"path\":\"/no/en/\",\"hash\":\"\",\"search\":\"\",\"width\":1280,\"height\":973,\"referrer\":\"https://bitraflll.com/\",\"route\":\"/no/en/\",\"routeParams\":{\"*\":\"no/en/\"},\"firstRender\":true,\"customPayload\":{\"name\":\"Homepage\",\"component\":\"LandingSections\",\"items\":[{\"operator\":\"wolt-no\",\"operatorIndex\":0,\"sectionTrackingId\":\"TMnKjwlz-mA5V33KRCBvs\",\"sectionIndex\":6,\"sectionTitle\":\"8k+ products in 180+ countries\",\"sectionTitleId\":\"storefront.title.8_k_products_in_180_countries\"},{\"operator\":\"apple-norway\",\"operatorIndex\":1,\"sectionTrackingId\":\"TMnKjwlz-mA5V33KRCBvs\",\"sectionIndex\":6,\"sectionTitle\":\"8k+ products in 180+ countries\",\"sectionTitleId\":\"storefront.title.8_k_products_in_180_countries\"},{\"operator\":\"hotelgift-no\",\"operatorIndex\":2,\"sectionTrackingId\":\"TMnKjwlz-mA5V33KRCBvs\",\"sectionIndex\":6,\"sectionTitle\":\"8k+ products in 180+ countries\",\"sectionTitleId\":\"storefront.title.8_k_products_in_180_countries\"},{\"operator\":\"foodora-norway\",\"operatorIndex\":3,\"sectionTrackingId\":\"TMnKjwlz-mA5V33KRCBvs\",\"sectionIndex\":6,\"sectionTitle\":\"8k+ products in 180+ countries\",\"sectionTitleId\":\"storefront.title.8_k_products_in_180_countries\"},{\"operator\":\"ikea-norway\",\"operatorIndex\":4,\"sectionTrackingId\":\"TMnKjwlz-mA5V33KRCBvs\",\"sectionIndex\":6,\"sectionTitle\":\"8k+ products in 180+ countries\",\"sectionTitleId\":\"storefront.title.8_k_products_in_180_countries\"},{\"operator\":\"power-norway\",\"operatorIndex\":5,\"sectionTrackingId\":\"TMnKjwlz-mA5V33KRCBvs\",\"sectionIndex\":6,\"sectionTitle\":\"8k+ products in 180+ countries\",\"sectionTitleId\":\"storefront.title.8_k_products_in_180_countries\"},{\"operator\":\"circle-k-norway\",\"operatorIndex\":6,\"sectionTrackingId\":\"TMnKjwlz-mA5V33KRCBvs\",\"sectionIndex\":6,\"sectionTitle\":\"8k+ products in 180+ countries\",\"sectionTitleId\":\"storefront.title.8_k_products_in_180_countries\"},{\"operator\":\"clas-ohlson-norway\",\"operatorIndex\":7,\"sectionTrackingId\":\"TMnKjwlz-mA5V33KRCBvs\",\"sectionIndex\":6,\"sectionTitle\":\"8k+ products in 180+ countries\",\"sectionTitleId\":\"storefront.title.8_k_products_in_180_countries\"},{\"operator\":\"bitrefill-esim-europe\",\"operatorIndex\":0,\"sectionTrackingId\":\"T-BF5DTtRxP7eVVgNag0Q\",\"sectionIndex\":7,\"sectionTitle\":\"eSIMs, your passport to data in 140+ countries !\",\"sectionTitleId\":\"app.storefront.esim\"},{\"operator\":\"bitrefill-esim-norway\",\"operatorIndex\":1,\"sectionTrackingId\":\"T-BF5DTtRxP7eVVgNag0Q\",\"sectionIndex\":7,\"sectionTitle\":\"eSIMs, your passport to data in 140+ countries !\",\"sectionTitleId\":\"app.storefront.esim\"},{\"operator\":\"bitrefill-esim-global\",\"operatorIndex\":2,\"sectionTrackingId\":\"T-BF5DTtRxP7eVVgNag0Q\",\"sectionIndex\":7,\"sectionTitle\":\"eSIMs, your passport to data in 140+ countries !\",\"sectionTitleId\":\"app.storefront.esim\"},{\"operator\":\"bitrefill-esim-thailand\",\"operatorIndex\":3,\"sectionTrackingId\":\"T-BF5DTtRxP7eVVgNag0Q\",\"sectionIndex\":7,\"sectionTitle\":\"eSIMs, your passport to data in 140+ countries !\",\"sectionTitleId\":\"app.storefront.esim\"},{\"operator\":\"playstation-norway\",\"operatorIndex\":0,\"sectionTrackingId\":\"tjbucZyxO9gCW7S0yD4RJ\",\"sectionIndex\":9,\"sectionTitle\":\"Gaming\",\"sectionTitleId\":\"app.storefront.category.gaming\"},{\"operator\":\"roblox-norway\",\"operatorIndex\":1,\"sectionTrackingId\":\"tjbucZyxO9gCW7S0yD4RJ\",\"sectionIndex\":9,\"sectionTitle\":\"Gaming\",\"sectionTitleId\":\"app.storefront.category.gaming\"},{\"operator\":\"valorant-eu\",\"operatorIndex\":2,\"sectionTrackingId\":\"tjbucZyxO9gCW7S0yD4RJ\",\"sectionIndex\":9,\"sectionTitle\":\"Gaming\",\"sectionTitleId\":\"app.storefront.category.gaming\"},{\"operator\":\"riot-access-eu\",\"operatorIndex\":3,\"sectionTrackingId\":\"tjbucZyxO9gCW7S0yD4RJ\",\"sectionIndex\":9,\"sectionTitle\":\"Gaming\",\"sectionTitleId\":\"app.storefront.category.gaming\"},{\"operator\":\"league-of-legends-eu\",\"operatorIndex\":4,\"sectionTrackingId\":\"tjbucZyxO9gCW7S0yD4RJ\",\"sectionIndex\":9,\"sectionTitle\":\"Gaming\",\"sectionTitleId\":\"app.storefront.category.gaming\"},{\"operator\":\"epic-no\",\"operatorIndex\":5,\"sectionTrackingId\":\"tjbucZyxO9gCW7S0yD4RJ\",\"sectionIndex\":9,\"sectionTitle\":\"Gaming\",\"sectionTitleId\":\"app.storefront.category.gaming\"},{\"operator\":\"nintendo-eshop-norway\",\"operatorIndex\":6,\"sectionTrackingId\":\"tjbucZyxO9gCW7S0yD4RJ\",\"sectionIndex\":9,\"sectionTitle\":\"Gaming\",\"sectionTitleId\":\"app.storefront.category.gaming\"},{\"operator\":\"game-power-7\",\"operatorIndex\":7,\"sectionTrackingId\":\"tjbucZyxO9gCW7S0yD4RJ\",\"sectionIndex\":9,\"sectionTitle\":\"Gaming\",\"sectionTitleId\":\"app.storefront.category.gaming\"},{\"operator\":\"wolt-no\",\"operatorIndex\":0,\"sectionTrackingId\":\"QaRSVXYdyeqx4lWrlEPCp\",\"sectionIndex\":10,\"sectionTitle\":\"Food\",\"sectionTitleId\":\"storefront.title.food\"},{\"operator\":\"foodora-norway\",\"operatorIndex\":1,\"sectionTrackingId\":\"QaRSVXYdyeqx4lWrlEPCp\",\"sectionIndex\":10,\"sectionTitle\":\"Food\",\"sectionTitleId\":\"storefront.title.food\"},{\"operator\":\"mcdonald_s-norway\",\"operatorIndex\":2,\"sectionTrackingId\":\"QaRSVXYdyeqx4lWrlEPCp\",\"sectionIndex\":10,\"sectionTitle\":\"Food\",\"sectionTitleId\":\"storefront.title.food\"},{\"operator\":\"hellofresh-norway\",\"operatorIndex\":3,\"sectionTrackingId\":\"QaRSVXYdyeqx4lWrlEPCp\",\"sectionIndex\":10,\"sectionTitle\":\"Food\",\"sectionTitleId\":\"storefront.title.food\"},{\"operator\":\"a_c_-perch_s-thehandel-norway\",\"operatorIndex\":4,\"sectionTrackingId\":\"QaRSVXYdyeqx4lWrlEPCp\",\"sectionIndex\":10,\"sectionTitle\":\"Food\",\"sectionTitleId\":\"storefront.title.food\"},{\"operator\":\"apple-norway\",\"operatorIndex\":0,\"sectionTrackingId\":\"4L0RRMJr3x-LGzhniaIBD\",\"sectionIndex\":11,\"sectionTitle\":\"Featured brands\",\"sectionTitleId\":\"storefront.title.featured_brands\"},{\"operator\":\"hotelgift-no\",\"operatorIndex\":1,\"sectionTrackingId\":\"4L0RRMJr3x-LGzhniaIBD\",\"sectionIndex\":11,\"sectionTitle\":\"Featured brands\",\"sectionTitleId\":\"storefront.title.featured_brands\"},{\"operator\":\"zalando-norway\",\"operatorIndex\":2,\"sectionTrackingId\":\"4L0RRMJr3x-LGzhniaIBD\",\"sectionIndex\":11,\"sectionTitle\":\"Featured brands\",\"sectionTitleId\":\"storefront.title.featured_brands\"},{\"operator\":\"ikea-norway\",\"operatorIndex\":3,\"sectionTrackingId\":\"4L0RRMJr3x-LGzhniaIBD\",\"sectionIndex\":11,\"sectionTitle\":\"Featured brands\",\"sectionTitleId\":\"storefront.title.featured_brands\"},{\"operator\":\"power-norway\",\"operatorIndex\":4,\"sectionTrackingId\":\"4L0RRMJr3x-LGzhniaIBD\",\"sectionIndex\":11,\"sectionTitle\":\"Featured brands\",\"sectionTitleId\":\"storefront.title.featured_brands\"},{\"operator\":\"circle-k-norway\",\"operatorIndex\":5,\"sectionTrackingId\":\"4L0RRMJr3x-LGzhniaIBD\",\"sectionIndex\":11,\"sectionTitle\":\"Featured brands\",\"sectionTitleId\":\"storefront.title.featured_brands\"},{\"operator\":\"clas-ohlson-norway\",\"operatorIndex\":6,\"sectionTrackingId\":\"4L0RRMJr3x-LGzhniaIBD\",\"sectionIndex\":11,\"sectionTitle\":\"Featured brands\",\"sectionTitleId\":\"storefront.title.featured_brands\"},{\"operator\":\"bitrefill-esim-europe\",\"operatorIndex\":7,\"sectionTrackingId\":\"4L0RRMJr3x-LGzhniaIBD\",\"sectionIndex\":11,\"sectionTitle\":\"Featured brands\",\"sectionTitleId\":\"storefront.title.featured_brands\"},{\"operator\":\"flightgift-no\",\"operatorIndex\":0,\"sectionTrackingId\":\"FjANn6tty-8EndQOdCNe6\",\"sectionIndex\":13,\"sectionTitle\":\"For Your Travel Needs\",\"sectionTitleId\":\"app.storefront.for_your_travel_needs\"},{\"operator\":\"ving-norway\",\"operatorIndex\":1,\"sectionTrackingId\":\"FjANn6tty-8EndQOdCNe6\",\"sectionIndex\":13,\"sectionTitle\":\"For Your Travel Needs\",\"sectionTitleId\":\"app.storefront.for_your_travel_needs\"},{\"operator\":\"airlinegift-no\",\"operatorIndex\":2,\"sectionTrackingId\":\"FjANn6tty-8EndQOdCNe6\",\"sectionIndex\":13,\"sectionTitle\":\"For Your Travel Needs\",\"sectionTitleId\":\"app.storefront.for_your_travel_needs\"},{\"operator\":\"bucketlistgift-no\",\"operatorIndex\":3,\"sectionTrackingId\":\"FjANn6tty-8EndQOdCNe6\",\"sectionIndex\":13,\"sectionTitle\":\"For Your Travel Needs\",\"sectionTitleId\":\"app.storefront.for_your_travel_needs\"}]}},\"options\":{},\"userId\":null,\"anonymousId\":\"58f3e67b-2f4a-491c-8713-d85157c996e7\",\"meta\":{\"rid\":\"7b59eeb1-0a87-440e-b722-2438e6d7ca63\",\"ts\":1786387669985,\"hasCallback\":true}}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":289,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-11T00:51:33.58711Z","times_seen":758738,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/primg/w360h216/foodora-norway.webp","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.752Z","timestamp":1786387664752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /primg/w360h216/foodora-norway.webp HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 978\r\ncf-ray: a1aafd72a88e9232-FRA\r\ncf-cache-status: UPDATING\r\nage: 18233\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"C1ISoXHdI+DsUJTvADbyjsFjZqzeHXEI252165wZZ1fw=\"\r\nlast-modified: Fri, 22 May 2026 14:23:20 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\ntiming-allow-origin: *\r\nx-chosen: 1\r\nx-chosen-size-diff: 0.31753246753246755\r\nx-content-type-options: nosniff\r\nx-org-content-length: 978\r\nx-powered-by: Lightning\r\nx-cfw: cmevLQmakE:95,t15\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":978,"size_decoded":1820,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1d29a8a7ed63b394a7d107f0a3fd380f","sha1":"39ec64847dcc954fb914d14194bfa68b83d044a4","sha256":"cf50a830f8b6a09bb7c0a12e7d05c2fcb40e133bd10ee6ebc3835512236bccc2","sha512":"83489bfb8da4ac02126851e249a4f95d515853fa58152687d9cc431fc9211e0207f3968afed4e2f89534eae63957e5909068531b2fb7b405186bdd5e2d6a9a71","ssdeep":"","tlshash":"9811942bc0f573032b94f9fe66a38408d3a42107eeb9d85946cd25993cb6a0913a0488","first_seen":"2026-01-08T23:49:36.857497Z","last_seen":"2026-08-10T18:48:38.731292Z","times_seen":4,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/defineProperty-DFXm_1Md.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.762Z","timestamp":1786387664762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/defineProperty-DFXm_1Md.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 390\r\ncf-ray: a28f340cc97c4d3a-FRA\r\ncf-cache-status: HIT\r\nage: 3020847\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: zh-Hans\r\nlast-modified: Tue, 28 Jul 2026 22:45:59 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50080,t29\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":707,"size_decoded":1269,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (707), with no line terminators","md5":"489a6e8420626ba7812b1b715b5ed17e","sha1":"bd93a298e8ac04a7f152ee151dbf4c783a58ff01","sha256":"c2ae68c1ad7462e777ccd4e1e3f84b3bc07ab81458f0dd0ea042a9e1b4d23afb","sha512":"3b75e2b29df199b8bedd375fccd9afc047f685551d16b647c6c75291f25d66c55181180e1ab1401d1f81709472a9ecf1b4ecaba09e9b75d7735c7ef273e04647","ssdeep":"","tlshash":"ac0110c97081f2328347d635004ff40bf63866a1509f7410f2a8e871bbbb85c8275f0a","first_seen":"2026-03-10T05:23:16.222734Z","last_seen":"2026-08-10T19:05:30.001586Z","times_seen":2702,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/constants-C3ra39WU.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.819Z","timestamp":1786387664819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/constants-C3ra39WU.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 394\r\ncf-ray: a2750d2d8c0d9f1c-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bcBdKSbwcw:6650,t28\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":743,"size_decoded":1229,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (696)","md5":"f013327a76ba4b08fdfde3916b572e15","sha1":"ef276c9551ff7537e11da3fa93cc3b75fc877ab8","sha256":"db449cfb451c8792ce29021a94c37674abac0074086d005c25115da874150078","sha512":"7dc364f47a200d90625bb7fb9951c6b2f572765c6ef53e590ca5e6ffee6afecb58b3a56508e75697f6f1be4b11c22519ae4d54945a3963bd40a663b73fcb9bde","ssdeep":"","tlshash":"50019cb75cb00a7a8d5400ed34c13306c95b77ad9e78daddd33080b83c549e5b312b26","first_seen":"2026-08-10T18:28:18.034281Z","last_seen":"2026-08-10T18:48:38.734472Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/primg/w360h216/hotelgift-no.webp","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.749Z","timestamp":1786387664749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /primg/w360h216/hotelgift-no.webp HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2160\r\ncf-ray: a1aafd72ad5473a1-FRA\r\ncf-cache-status: UPDATING\r\nage: 18233\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"CgHLUpj8lOYrE/21bo6Le8CZNdpT/uju/t2RAUOtiz9Y=\"\r\nlast-modified: Fri, 22 May 2026 15:11:04 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\ntiming-allow-origin: *\r\nx-chosen: 0\r\nx-chosen-size-diff: 0.061186335051838424\r\nx-content-type-options: nosniff\r\nx-org-content-length: 2160\r\nx-powered-by: Lightning\r\nx-cfw: GEcxActkDo:11,t18\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2160,"size_decoded":3005,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x216, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"72a6e5853471b0398f3ebdac907073cb","sha1":"c4e17bd884557768d8400a56642fa64557c45264","sha256":"a4b378c62a28c854b2da27f9e7b930ceca6b0099dbd326216a2e3b7a068cc780","sha512":"7305f142c2fcbb96d364f69cf72beeccce3dd621197abf39208bb0122e08e8129a175d19a3680d034f6b6dccb9e0cc20dc653009d143bfa82311f866cdb142e1","ssdeep":"","tlshash":"874109a74851d869efe0679985ce328400a37adce706f58bb38c8d23b0da403294563c","first_seen":"2026-08-10T18:28:17.895619Z","last_seen":"2026-08-10T18:48:38.735794Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-B6FuTlA7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.791Z","timestamp":1786387664791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-B6FuTlA7.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 909\r\ncf-ray: a28e9390484a3608-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jdmkUBpFoT:8,t30\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2063,"size_decoded":1739,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2021)","md5":"f1251bf4775fcafd96640d1c128caf62","sha1":"f1b9ecace6b8fccf69a0670979aa527bcd3f46d5","sha256":"58f1bdb4e56e8868c17685df76f610d2303cb04e572b851d6a88b556ce7a90b5","sha512":"8f8ff21ebf72b34d9a3caa7a2606b52368395f91163fe926e26010f06dafc21d5a5ef722ba79453979dbc4a81cc9593410e3001f983c45cc2a29b8751042601d","ssdeep":"","tlshash":"7c4144c970d1b290365e4892c0bfc96cb6bf7a5a001c6124d45468f125399a893f3fb8","first_seen":"2026-08-10T18:28:17.712388Z","last_seen":"2026-08-10T18:48:38.73719Z","times_seen":2,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/arrow-right-BsO9DBjk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.809Z","timestamp":1786387664809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/arrow-right-BsO9DBjk.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 173\r\ncf-ray: a28e9390e9383a52-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:14:20 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:22578,t26\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":1031,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"13262f8f137ac7e3cd6fd76d0971cdcf","sha1":"cd9a26ed332fbbb3844381c4ad7fdc9a55055433","sha256":"39c19f4e7cee5f642c1896af454e7e62d10de439075cea6809dc0e81af36accc","sha512":"3ab12b22de3901e931332573be6cb5eefa766ba0bdb03a2b823e750e87e4fe47e79dc1aec10208de9c459c93d91bf3be076b6a7ff373a67a5ffc3a8d034d0ada","ssdeep":"","tlshash":"21d0221fade62fb18e002be75c4e22128b1551ece3e384807220f2bd02954e228adf60","first_seen":"2026-08-10T18:28:18.089442Z","last_seen":"2026-08-10T18:48:38.738536Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/format-oG3G5AAQ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.899Z","timestamp":1786387664899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/format-oG3G5AAQ.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2488\r\ncf-ray: a28f86351ef8d3c0-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GMoguQIgCk:1851,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9740,"size_decoded":3355,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9696)","md5":"62167dfe98bbdaaa5e95f17a9574e05a","sha1":"89841a74b6f583c34a4498b1a420d7f413ba9eaa","sha256":"fada9f095705925cab41390c0f986a0b85eb304b049451bf7be1a4484ffb1a3b","sha512":"3e30d427f22547eca8d69902f6c01a0d8dc5c6cd47702d9d62be04eeb97db4fbae3ad5f2dbb1b02daa4cdab66c50e5aa086883ba3ec77c83d5b88707e2f6ddf0","ssdeep":"192:+/1gxX2GJGc+h4eMHdBhdy2lqMszc5J+WeNx:2SxXmh4eUdvdy2EMMc5MR","tlshash":"13120ed0b9c3b12ea3e34e1d90351009f3ad5de1ed0e6e21f1a2c24a78e294594bafd1","first_seen":"2026-08-10T18:28:18.103114Z","last_seen":"2026-08-10T18:48:38.73977Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/bitcoin-maxi-mode-Duin7zGA.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.945Z","timestamp":1786387664945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/bitcoin-maxi-mode-Duin7zGA.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 458\r\ncf-ray: a28f86353f63e7ba-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:266,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":643,"size_decoded":1325,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (588)","md5":"48bf7a16f90752ffbb7177e7266f7f40","sha1":"802c5f111f82b298b5b6f0560c86970e339ff7a0","sha256":"33ea3e3f7bf53242d5cfb5ab3362f32775c85378623d67e9efb754d270194c18","sha512":"38fb35cc1aa223fa4ab9638f35b43a77e730349d6a89b893b80faf8f6190afe1331e63ab136a7f4e509f5c532e07c7d57d3f5a3842a0af09d2841942b9d09f12","ssdeep":"","tlshash":"79f02d4ff0f23cf8a1adc0a4c0292c06511ca5f9668c2fc6902d94e4a3385a40d77ebe","first_seen":"2026-08-10T18:28:18.001885Z","last_seen":"2026-08-10T18:48:38.741812Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/metrics/gs/ccm/collect?rcb=2\u0026frm=2\u0026apvc=1\u0026tid=AW-957004286\u0026en=page_view\u0026dl=https%3A%2F%2Fbiterfz.com%2Fno%2Fen%2F\u0026dr=https%3A%2F%2Fbitraflll.com%2F\u0026top=https%3A%2F%2Fbitraflll.com%2F\u0026scrsrc=biterfz.com\u0026rnd=1538724195.1786387668\u0026navt=n\u0026npa=1\u0026did=dYzg1YT\u0026gdid=dYzg1YT\u0026gtm=45892e6860v9104326907z8890364013za20gzb890364013zd890364013xec\u0026gcs=G100\u0026gcd=13p3pPp2p5l1\u0026dma_cps=-\u0026dma=1\u0026tag_exp=115938465~115938468~118897920~118897930~119367802~119367810~119527019~119896802~120385422\u0026tft=1786387667802\u0026tfd=4223\u0026gap.gtb=2\u0026tids=AW-957004286\u0026fmt=8","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:47.805Z","timestamp":1786387667805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"POST /metrics/gs/ccm/collect?rcb=2\u0026frm=2\u0026apvc=1\u0026tid=AW-957004286\u0026en=page_view\u0026dl=https%3A%2F%2Fbiterfz.com%2Fno%2Fen%2F\u0026dr=https%3A%2F%2Fbitraflll.com%2F\u0026top=https%3A%2F%2Fbitraflll.com%2F\u0026scrsrc=biterfz.com\u0026rnd=1538724195.1786387668\u0026navt=n\u0026npa=1\u0026did=dYzg1YT\u0026gdid=dYzg1YT\u0026gtm=45892e6860v9104326907z8890364013za20gzb890364013zd890364013xec\u0026gcs=G100\u0026gcd=13p3pPp2p5l1\u0026dma_cps=-\u0026dma=1\u0026tag_exp=115938465~115938468~118897920~118897930~119367802~119367810~119527019~119896802~120385422\u0026tft=1786387667802\u0026tfd=4223\u0026gap.gtb=2\u0026tids=AW-957004286\u0026fmt=8 HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/plain\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.bitrefill.com\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2912bcd8d658824-PRG\r\nexpires: 0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, X-Origin, Referer, accept-encoding\r\nx-content-type-options: nosniff\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":574,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Switch-DeGAUvCb.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.990Z","timestamp":1786387669990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Switch-DeGAUvCb.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Switch-DeGAUvCb.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Notice-DC98bN0r.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.658Z","timestamp":1786387664658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Notice-DC98bN0r.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 284\r\ncf-ray: a28f34058c549c23-VIE\r\ncf-cache-status: HIT\r\nage: 2783888\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 05:33:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1341,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":535,"size_decoded":1125,"mime_type":"text/css","magic":"ASCII text, with very long lines (534)","md5":"d70e212802dc300ed0015de45e662b27","sha1":"abcf5d74e21d86428e59aa2cd585f48ca157cddd","sha256":"686f6a2f78f8fcea2223e271cba3f62f12b0440196d2832a88e58d35ea7d2f84","sha512":"7ddfae8dd26c0981efc87fdcf20af60592fa1e812413f3ef6b2a9e5ed7519d720e72974d350617d1c7c1c0bf0fc78c53f9b21da39ef30fa3555686697773e7b8","ssdeep":"","tlshash":"d4f0f68b9320e7399c77e12e530cf04a03615448495143b6f252691edfc6bb6e312243","first_seen":"2026-04-30T03:12:05.991886Z","last_seen":"2026-08-10T18:48:38.743109Z","times_seen":14,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/MarketingValues-D2Kml6bQ.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.681Z","timestamp":1786387664681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/MarketingValues-D2Kml6bQ.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 263\r\ncf-ray: a28f3405c8978c0d-FRA\r\ncf-cache-status: HIT\r\nage: 5101601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lrHSCqsVfP:21048,t18\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":458,"size_decoded":1106,"mime_type":"text/css","magic":"ASCII text, with very long lines (457)","md5":"66bb8891991e05b2e2ff348f7e76d747","sha1":"c5edbd6fc44c9db772018cbb734602ccb22b8081","sha256":"b21802008bf6fe3cec0edd4d7cd206d330cc8f9c3d40652516d3ae3151160cc0","sha512":"32bf87fdc95b982d8fdd8c0462351a0318c1b3189cc4c5b3cb46f224fc3bebd93b489e7c58629146229c8175157fca2333e9f9352e536ec4494369f403bc5302","ssdeep":"","tlshash":"62f02e559201467cce36e4241778a209d441d4149a4750d59447331785cbbf30af2646","first_seen":"2026-05-31T11:11:55.724716Z","last_seen":"2026-08-10T18:48:38.744736Z","times_seen":7,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:47.187Z","timestamp":1786387667187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Image-Bbbl7GSj.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.166Z","timestamp":1786387668166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Image-Bbbl7GSj.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Image-Bbbl7GSj.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Combobox-zFBC6oRi.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.203Z","timestamp":1786387668203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Combobox-zFBC6oRi.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Combobox-zFBC6oRi.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/differenceInMilliseconds-D9l_cWOL.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.775Z","timestamp":1786387664775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/differenceInMilliseconds-D9l_cWOL.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 124\r\ncf-ray: a28f8633993dcb3f-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 155\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:51,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":988,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"a59e54f4b81838190dec2785b08a0123","sha1":"a89b497353d952557608032c5561221470d01fca","sha256":"ca12f1ffbbcbd45fb1445ce0a7561a6db332cbc07ce58993f5a3ccca7a177f86","sha512":"5c7d1148a2163269fbce385571bed893b75b1084cfb4c25deea6d22ec46de6ce08164b2f2e2d023b3d0b51f72a3e0fa191333e29c38290e2a42736a153f8c76d","ssdeep":"","tlshash":"b3c02b0ff0f96272013d2c5a803a360bf26cf180f2050e489080e2ac3a61891853bd36","first_seen":"2026-08-10T18:28:18.257676Z","last_seen":"2026-08-10T18:48:38.745628Z","times_seen":2,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/bitrefill-card-CJCVqoRW.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.902Z","timestamp":1786387664902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/bitrefill-card-CJCVqoRW.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 376\r\ncf-ray: a2750d2eff30d0d5-AMS\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CKwinJKdhI:6481,t19\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":623,"size_decoded":1211,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (571)","md5":"b45e6aca012b9d3848509844875b0d07","sha1":"d9fda532610893f9d8c940a23e3dafd8482d3232","sha256":"cc5ad77d44a9fbf24d2482a8fab95da971c207d5d403f9bfb2b4fd6caa5f65b6","sha512":"b19f6ca182101b798f7cc80409264c8e43885b86f6e3094baa67c37c4739d20e3fc3f557a3f547ee21246d1aa160f515497e0a0fd340b30bd536800b3bbdb358","ssdeep":"","tlshash":"b9f07dceb5bd20f87c278c28c037126b9238b9129056b1f0a167962125387b89357a27","first_seen":"2026-08-10T18:28:18.160736Z","last_seen":"2026-08-10T18:48:38.747007Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/NavLanding-CpSFom99.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.621Z","timestamp":1786387668621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/NavLanding-CpSFom99.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1667\r\ncf-ray: a28f8669c96ed278-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: dQWwpWgslw:48,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3658,"size_decoded":2532,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2211)","md5":"e0506acfcee066974ee2e1daf34e13c8","sha1":"8db76088a051ae059eb2ea1470429f7d5288347e","sha256":"7e97d4383da2e19eb7c347afb0dcac67cbf0c4e3bd00c64110c3d38cd950c18f","sha512":"fcf6e5508fc51bb7f59aaed2d9d1b4dc6ac482748d329b1ccb55fdb8d487554c049b074f79f582fc7d1827d7d3d45806ebb59d749166205da15c4026bba12ebf","ssdeep":"","tlshash":"40715009905057bcb66e5ce9d05610ea0be943a98704d8adbdbb1df822e1d50e017ffb","first_seen":"2026-08-10T18:28:17.922896Z","last_seen":"2026-08-10T18:48:38.748622Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ellipsis-DKwxQUh6.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.754Z","timestamp":1786387668754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ellipsis-DKwxQUh6.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/icons-CBF0S1-q.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 201\r\ncf-ray: a28f2d1ffa464d7c-FRA\r\ncf-cache-status: HIT\r\nage: 6398\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:49999,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":272,"size_decoded":1048,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"e236ece2f2147ba8a45eff6c29cf6641","sha1":"b70dae9b6719bfcd0f6052d9a07f4f74056919d3","sha256":"00a13b8b5f0e8ac1dc7de22dfd2d3e396c51ce9ff153daeceb4ef65046e6d5cf","sha512":"a974ce87bf20f2c17d7942f4e97db612b65be4f1b24b92db4b23020fda93b84dc2477f57c44259cffb12f7102c1e9888fdba506c9ac1fcdb6c064e96ea014d0d","ssdeep":"","tlshash":"12d05b2d6ced5cf04f081ee036668512ed19d0b5a3250dc8b1d5033b4f52c67a5d5f55","first_seen":"2026-08-10T18:28:17.939315Z","last_seen":"2026-08-10T18:48:38.74985Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Connector-Dz9cFlRR.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.916Z","timestamp":1786387668916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Connector-Dz9cFlRR.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 267\r\ncf-ray: a28f3405fc01d2e4-FRA\r\ncf-cache-status: HIT\r\nage: 2801344\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 08 Jul 2026 13:10:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tSLwrpdTXI:42,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":368,"size_decoded":1107,"mime_type":"text/css","magic":"ASCII text, with very long lines (367)","md5":"6c2c1f361d3ad5ef1dd25313edcdbbaf","sha1":"1e689e3b613f1b783ea535eddaeddbf25fc43e10","sha256":"36c133b63c127743cd7e20575c18ecc6185a0558275efa9f9ff5043d285916a3","sha512":"3377966bf475c13a0be72e9399ef1edd4a9683a7a43d7d73fd3c96e46ae723df9973f042a90ff5ddc06162de680332860de02d2149b7261b9b8746f25c53ef8b","ssdeep":"","tlshash":"75e068e9db11663ce896a15df5b4d085d5c08942c4030e8bf9aaf269c2c6dc3103518c","first_seen":"2026-07-16T00:57:04.845654Z","last_seen":"2026-08-10T18:48:38.750956Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:54.689Z","timestamp":1786387674689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-Bi0sWe3u.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.804Z","timestamp":1786387664804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-Bi0sWe3u.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 221\r\ncf-ray: a28e93909fa29736-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47381,t38\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":293,"size_decoded":1057,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"cad7c27aaffebd0f407658dc2f052508","sha1":"f3904f45c2ce47d29c3345d8efce8895f9529a76","sha256":"7f1232ee93475776c12ebb0b54cad274603ec9f52c2f1b8274733425c3e90821","sha512":"0928ebaa288aa89d90ff111c4b69544ed6c4c06dbf49730b22a856a13537ec5e3b29d8044b89ad110cda185849430b99488ba844d4af6a4fde30b9a3224affaa","ssdeep":"","tlshash":"dbe0c256bce89db1e326186cd01e80edfb75b364b00442a4e01875896269d56d0e9e3a","first_seen":"2026-08-10T18:28:18.355185Z","last_seen":"2026-08-10T18:48:38.752314Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/invoice-D2GxQfAn.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.907Z","timestamp":1786387664907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/invoice-D2GxQfAn.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2912\r\ncf-ray: a28f8634ad366eeb-CDG\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:59 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tWZjNIthpZ:45964,t19\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7473,"size_decoded":3771,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5537)","md5":"cede050425f19a32784f840f8f0d3dda","sha1":"ed2694ffa12a31a4df1b73c3630e9728d938c06d","sha256":"44843351de8d944f12b92e636ebe76aea6e8fe251f401d10a336d72cbaf84114","sha512":"5b76e0c9f9082172a834ac59ea1b1bd8ed53a666705a34a92f9b01da2aac963b9af01ff9535261d5e7189445528a62cc231dd2e24f3559f0e34a8a59d4e63676","ssdeep":"192:eAdcURomorCX/toTo6CT2TzdUDGntLWNlxyJGyipZPUQTX:eIkCQvCsUDjl97ZUS","tlshash":"8df13dcd77f1b37245d6d752e0bf9343f23c9404e839a050b51558e87b90c6795abe28","first_seen":"2026-08-10T18:28:18.066978Z","last_seen":"2026-08-10T18:48:38.753783Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Text-vb1tRuSj.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.150Z","timestamp":1786387668150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Text-vb1tRuSj.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Text-vb1tRuSj.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/ImageLanding-CXj66i5N.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.219Z","timestamp":1786387668219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ImageLanding-CXj66i5N.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/ImageLanding-CXj66i5N.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/heart-mTfQqbiS.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.752Z","timestamp":1786387668752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/heart-mTfQqbiS.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/icons-CBF0S1-q.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 336\r\ncf-ray: a28f2d200f799274-FRA\r\ncf-cache-status: HIT\r\nage: 6398\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:866,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":467,"size_decoded":1204,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (424)","md5":"8f40f4a96778ab9ae93f9ead59b13114","sha1":"6ecb2a03b3348005c84ac3c5e3654601c0a34df0","sha256":"7131a934d2ccbd073dce8e72adce567610e585b05ab535bdd68c89a882bc4c5d","sha512":"e60c393b10a6b28e17d98f26ea23b3ea4d63bb814d915c5fa95f2b73f4cccc7a454073475c357f3effa9e2e97ee001a23d0a342bc9d17b6d64c627b1e758368c","ssdeep":"","tlshash":"0ff09ebf9ed605ac2a1a09996215a8a1d74f40fdb3865460a00cc1ba16834d2d86bd90","first_seen":"2026-08-10T18:28:17.930069Z","last_seen":"2026-08-10T18:48:38.755047Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/PreferencesModal-CtoqIVMh.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.007Z","timestamp":1786387669007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/PreferencesModal-CtoqIVMh.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/PreferencesModal-CtoqIVMh.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/EsimGridSection-CzYKQ_C7.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.699Z","timestamp":1786387664699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/EsimGridSection-CzYKQ_C7.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 1043\r\ncf-ray: a28f3405fa1e9274-FRA\r\ncf-cache-status: HIT\r\nage: 5101600\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:893,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4319,"size_decoded":1883,"mime_type":"text/css","magic":"ASCII text, with very long lines (4318)","md5":"18c87e55802b17e3888fbc03011f5bc2","sha1":"d53a43497b69807fb035d99391e10d20aac267c4","sha256":"c9470ce1ae42555c31e49af353f2b9a70ce2dd8b0dd90737db257f0ab50cffd8","sha512":"1d698628a37b29b824a8a0d24034604d8532ca78ea41d86a0c3b8186adadba41086d51c77855f362e9bd6adc98bd26533bad57c42eebd5cd4fc6aebb3f0acc78","ssdeep":"48:dWJ8gqlB4mVQ+5ZrCFNih+mkcAAZXTJCptzXTeXW1DcM/tYqvdFd4AjrV:dWAjVd5ttkc/hTgptzKXW1DcMyq1fXrV","tlshash":"659142956a21b67dbc6be45cc36a668c5e542816af1350e6f830302a89c6fe04b3351f","first_seen":"2026-05-31T11:11:55.965186Z","last_seen":"2026-08-10T18:48:38.756236Z","times_seen":7,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/PreferencesButton-Dc4iKX03.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.851Z","timestamp":1786387664851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/PreferencesButton-Dc4iKX03.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 565\r\ncf-ray: a28f86342fa0dcc4-FRA\r\ncf-cache-status: HIT\r\nage: 154\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:2453,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":963,"size_decoded":1433,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (908)","md5":"5c4476e0abbbecca55ea13da1f7d94b9","sha1":"4a9ccddbfb28a24539abf7b86bd3189d6fb1d10c","sha256":"be0803719370262cc82c82a739c9c5e2d7c08f5abb345747457914795a1d69d1","sha512":"b57254566f4eaa315c677de5938f2c35d878ec3a7e8cac3951d2f7dfa93711a86802ea79be40b8a67daed349211925624d560cf031ba0c4703661fd518562a23","ssdeep":"","tlshash":"e111548be03011fc603d4cddd24f12276b1ee1b6d342ee90c49db39417508a98d11e4b","first_seen":"2026-08-10T18:28:18.065339Z","last_seen":"2026-08-10T18:48:38.757287Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/URLStructureRouter-B1PtNMUc.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.455Z","timestamp":1786387665455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/URLStructureRouter-B1PtNMUc.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/website-D58EQLmP.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 132875\r\ncf-ray: a28f8630cab26eeb-CDG\r\ncf-cache-status: HIT\r\nage: 155\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:58:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tWZjNIthpZ:45959,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":406935,"size_decoded":133745,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (62445)","md5":"a16f6fa8c4edd69dc401f2bd984b4108","sha1":"1a954c442a9f4cfe33ddde05c685cc68a02067f4","sha256":"4a70ba161f40c2df2ac2d02c08dad6813a27c089c01257a287fd0ea085f2503d","sha512":"3487805c9be7116817cc26eaed538a7173763b930c02a348a05f5045fabe3737656b02021876112fa51c9b9670d23f0cafa9c302bdf7e0e085fae3a30de190f7","ssdeep":"6144:goO3ht0eVsjYfHWsaPxdHA3K+q/onCxjmp:VORP5Jnpp","tlshash":"0a845bdc72a9b562679746b2503f110bb33928525c0d4460b220fdee3ab5489a1fbffd","first_seen":"2026-08-10T18:28:18.076139Z","last_seen":"2026-08-10T18:48:38.758505Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ImageColumnsLanding-D3G8A6sy.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.619Z","timestamp":1786387668619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ImageColumnsLanding-D3G8A6sy.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 735\r\ncf-ray: a28f8669c908cb3f-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:65,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1486,"size_decoded":1575,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1429)","md5":"5f0426baf6f0d58ca38717507e26f727","sha1":"8fbc84a9f3add9838a1d2ced131fc560e8c3f5e1","sha256":"0d84f02e806c895584c0de5d639c31a0085cc2452f51ca9644691245e58d6aa1","sha512":"58b94a22928f4813a09f5d11479ba6289362754dad09fe3c7b0295d5df474e52414dd6172714d1a26cefae3c42ae282f2515e3b48df5e8e022808ecb0dff7ff2","ssdeep":"","tlshash":"ff31424ac0587a79ad2a28d8f16f242f732dd058d394a3f0e10d00d4179a5d6681ffdb","first_seen":"2026-08-10T18:28:18.403335Z","last_seen":"2026-08-10T18:48:38.759582Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/EmptyState-DPn2i2ZH.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.697Z","timestamp":1786387669697,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/EmptyState-DPn2i2ZH.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/EmptyState-DPn2i2ZH.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu.i.posthog.com/i/v0/e/","fqdn":"eu.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"18.158.90.132","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:54.771Z","timestamp":1786387674771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:B5:42:B0:EF:B1:77:97:C3:FF:B8:89:87:B5:A3:F4:32:08:FE:27","sha256":"BF:C3:D3:B1:0B:53:D4:58:C2:A8:1F:37:4C:D0:F6:A2:F8:E0:1E:BB:05:FA:53:84:BA:CC:BF:1D:78:D1:F7:A5"}}},"request":{"raw":"POST /i/v0/e/ HTTP/1.1\r\nHost: eu.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: text/plain\r\nContent-Length: 1431\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2141,"data":"\u001f‹\b\u0000\u0000\u0000\u0000\u0000\u0000\u0003íWmoÛ6\u0010þ+\u000f\u001bPÙzI?m\u001d²aÊ\u0002K[ A!PÔIæ\"‰\nIù-Èߑ²c¹Q[·\u0018úÉA`ÃÇ;Þñx÷ÜÃ\u0007‹t,»ƒueu\u000bš­›?~ùu»}\u0017-ßä¥LÓß'××\u001fÞ¾†w՛Åû?åë\u003eÝüÕlþnÞm¤õÂʉ¢\u000bëêöÁê{Và\u001eŽ›–P8ŽûNbǤ,íÔs\u0002ÛË!ÏóÀMBJÑ\u000e–Ð*T¿¼\\\u0000Q\réPÖ\tށP\f¤uõ`]rü²Þ³¶à+í\tgK\u0010’ñ\u0016宣E¹À5\u0010øûš\t(ùZ\u000b\u000bX2\n™Út€\u000b¿¼S\\o©X\u0003[ÞjéۛWcIÆËR\u0002Æ㠐öB`pY/jÔ\\(ÕÉ«ù\u003cg\nD¹QÞÌ[\u003e‡v®7Xp©O1ZÔҎ¨EK\u001aíh¤+È*ë1ڌTÃÙÿæ[V×d\u001eΜ‹Ÿv\u0007½x}sá:3çå\u0005\n¢àåÅZˆå•ë\u00073çç‹ßÞñ¹ç¸\u000eþ»\u0017»cÏÍê(#‡LáÊH\\“¶êÑ?z‡Ö~û5±–u¸'[\u001b\u0015½.©\u0000h³\u0005°ja»Ž\u0017\u001c¤+V(¼×Ktê–\fV\u001d\u0017êI9ý±øX»f9:YAn\r?Æ×;\u000bÜpæê\u0005Öbp*3ÅÅWUG+æÜ{ÉýÒ»÷wˆ[ÆIä'q\u0014û³$2ñ\u0015wYÁ¤Ê肴-諤E;lÈ\u0014#5Û\u0012…βÁÞò\u001c/²±b]çÆM®‚ø*Hf±ã}Ð\u0016”·%«z\u0001E\u0026Aʽ\u0015ïUÖ`‘º‰£ÿ^XÚ\u001fké.اNH¡(í8*¨æ\tØ.Mœ8N\u001e\u0017tT¯ßdCzÅ)é\u0014ƤOIòÚÄ\u00260ƒ™d\u0005\u001e¨$µ\u0004ÔÄôfK¦ðW\u0006턞\u0012ý'j¤®ù\nÕ\u001aP‚Q\u003c_Û×5ªÀšBgR¶÷\u003c¹áÞq\u0001¤ÈhÍèÝg\u003c\u001f\u0014ó¾ÊJ\u0026ð²Jt•É–trÁ•I²T¤é\u000e÷\u001b¥n\u001aí¯×\u0018\nèj²Á¯†+ìzÁª\n]4\u001a—X[eÃÝ=\u001d♝\u0001¢'3ô¦z;{Á\u003e¹Ö”-\"ÄwZÖ¬½Ã|”5©NÜaWw\u0002(\u0017…\u003e\u0018ªc[\b ÒtÌa᩾\u0007Klf@@\u0013ÇX\u0026HY×µA³ƒ’¶.xCX;`ÚAÉ`Ý\u0000ÔYA\u0014Ñ\u0000ý\u0005dÔó`mÐtc\u003e1Ô\nðvÙ\u001acڕÜ\u000eŸM…X\u001f\u001fQÂï ý¾1´kQLrIúZɧ†\u000emß\u0019çïÓ.ƒt貄z¾í\u0016aäƞë\u0006@´ÑÊ`òWmâ€\u0004!Mi0v„U%tUžü)“/_űÅ)ƒêØbzl\u001dë|fˆëo(WB\u0015[Âd™³\u0016\u001d´¤Îò¾,õˆ¶Ò\u0003À9EYb\u0005ªºŸÍûP‹^\u0018\u0014Ÿèｊé“\u0011€$±ëM¹/ë^.4F\u0019·\u003eN‘`2Ì#ˆÂóßޞXOG\u0010öñ£Þ{\u000ft\rY£“N-2\r²Pè.ÙÃã³\u0000¤†çgXi\u0006‘“žn Õ¦\u0006\u003c1\f¶ž{ºiË\u000bÍѼÈû\u0006TÊLôµ6\f1\u0007S†ÅÐ-Å(6ù™bÙûhz5ŒqCDwãxr\u003e\b=âp{.\u0026sk–‰R„.\u000e\u0018õLa\u0000]Tƒ¦SÓz ›ç¾‡\u001eF\u0015Ü!¯Ò,è9– G†8±ó öì4\n£Â¡e^–¾a*\u0012õ±ÜYÉÆ\u0015\u003c™bqgH–\u0011û‘®ñ’Õ£ª©\u0014¶\u0005à”i˜\u001e\u0011\u001aFtË\u001a€Å\f¥)¢ížò\u0026‘óøb‚¾\u0007%رïº6\tÈvƒ\u001c ŽK\u000fòpLß\u000f¼áLàÏ\u0004þë\u0004~›l\u0003ج–j)W¹\u0013L\u0010ø`æGñ™ÀŸ\tü™ÀÿÏ\u0004~T\"ׯÞd;\f°vH‡2ÔZ’º7í\u0018 KÒäªÅÜ[\u0015ç:–\u0002jÍý‡EM\u0013\rÔß\u003e\u003c\"›1å¿\fíÃEûQ`\u0007I\u0010\u0006ŽŸ Ž¤ú¹Þ’%«LßÞ\fð¾\u0013\u0018þø\rÀ=YY~\u0014ý0ªÿø\u003c¡G©;?fΏ™ócæü˜9?f~äcÆ\u000f\u0013=‹¤n+¢¦Xa\u0018Ìb/ø`=þ\u0007‹nyXù\u0018\u0000\u0000"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 18:47:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://biterfz.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 23\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":420,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-08-11T01:03:22.2501Z","times_seen":44155,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useQuery-DgsZ6GG3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.765Z","timestamp":1786387664765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useQuery-DgsZ6GG3.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 8578\r\ncf-ray: a265b1b3a95fdc5c-FRA\r\ncf-cache-status: HIT\r\nage: 331\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 05 Aug 2026 11:57:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: MxxrtAbxvE:68,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27269,"size_decoded":9419,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (27223)","md5":"0186478f45fa3b104a467681e714bc70","sha1":"8fa556d229eba37ceb5284b95f6d75ac59b2881d","sha256":"ec8e856cd05c629e63bc53cace2e6bc5e6131c08d388721bea34fd59abfad77d","sha512":"c8a99f698aaf9d7490d7efc2eb29e2da9937f884acfdffe511d2c9d24fdac02bec46546da922d82971e4fea979a7c31587b526c44e69d9c27339a1d5423f45cf","ssdeep":"768:c9aWx42UkV9EFtbSlc/QwLNoYJCdmsD8MHzA373Q3:c9F424G9wy+QPzkrQ3","tlshash":"c4c2c6ddb743b17629f6c181406f4027e2246a166c1a402c71aedee676b0d4ef6faf31","first_seen":"2026-08-10T18:28:18.17225Z","last_seen":"2026-08-10T18:48:38.760448Z","times_seen":2,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/auth-DkVjbugX.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.893Z","timestamp":1786387664893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/auth-DkVjbugX.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 436\r\ncf-ray: a28f8634dbd34d7a-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:51733,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":631,"size_decoded":1306,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (589)","md5":"980ebe9514ce0a0cf4ad8aa516f137ff","sha1":"f03ebb5eae452de96d3385678cb5603755e32c1f","sha256":"3aa061f706a8942dbfae46a0384d65d3a83c38d45f1d524a080669c7c998ecba","sha512":"ffaba2a177d805e6bb00ba4a5847c515bd043d5814a28a7b825270fdecd8eaf2e844737e1a3be2e8f9d919f3633e051208a1957b5a3f604f0643e0ae76aa1d60","ssdeep":"","tlshash":"71f02dafb161b136054818e690045ca39222e4e8c3581c4d80bf03d80baa843eb3bf07","first_seen":"2026-08-10T18:28:17.772784Z","last_seen":"2026-08-10T18:48:38.761221Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/invoice-DVXDdiGL.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.920Z","timestamp":1786387664920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/invoice-DVXDdiGL.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 276\r\ncf-ray: a28f86352bd24d95-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:51735,t18\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":1122,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (375)","md5":"2aebe99c3759aae86c568db2219da339","sha1":"6db0745033e6be2aa48c138e7493bf0f4767f8cf","sha256":"55b7ba668fb283095b7bb09fe63e510f7166111b37619985802c87a6466d5be6","sha512":"6546e308b792dd454e544a65db320044c0150870714510957b3e29f7f07e1865e2665bdd59c5a214a8f122f2157fb0af1c8a7116bad396bbdf748600dc1a5797","ssdeep":"","tlshash":"1ae0ab8bdeb494fee01c9a80c4b247895512f094b390230af98a46e0333401a603bc25","first_seen":"2026-08-10T18:28:17.898595Z","last_seen":"2026-08-10T18:48:38.762176Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/utils-BquWt6fk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.934Z","timestamp":1786387664934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/utils-BquWt6fk.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1711\r\ncf-ray: a2750d2fdd0b7185-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AGbklTsBFU:7791,t32\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4486,"size_decoded":2545,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4443)","md5":"6459c358c8377bc5192dd0945b5e9b46","sha1":"c8fa2336e36db96e937aa675a894a56b09b837e7","sha256":"d719a96613c9ba3f98aa7fde4511cea6340731ca711b7ff66336601fdb41bdf8","sha512":"bdde61755bc9de26fe201c846485fb114cff6805b1aec34019b5d622614557b23523a5dae3e86c032e63693d04fc55c36ce294b08c24f870c9d695673006c841","ssdeep":"96:zE9NXTq+mse/huLo7Do458CUh8hz4NKyz+x5kCV:QnWxhuLo78458G4N8l","tlshash":"7f91529d3796f073c35b19b2846fc40be13a8876046d0d28e155585371babbc85ebe3e","first_seen":"2026-08-10T18:28:18.310756Z","last_seen":"2026-08-10T18:48:38.763117Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Skeleton-B0PvOGCy.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.360Z","timestamp":1786387668360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Skeleton-B0PvOGCy.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 262\r\ncf-ray: a28f34055fbc9a0e-AMS\r\ncf-cache-status: HIT\r\nage: 846616\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: BjSokvcnAX:10,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":416,"size_decoded":1101,"mime_type":"text/css","magic":"ASCII text, with very long lines (415)","md5":"faac15860e641ac4595d2b8f961e0dbc","sha1":"538ca31a64704bfcc8daa6ebb47c4c1f308088e3","sha256":"dc9055a7efa195af7a1fb25c43591fe8a9162d49f2a0dfc527ad3493ab25104a","sha512":"0498ea6497d2969963ae9c67df8b5ec046967ce880f87a7237a049990923bd8f4fbad0b1f7811235ef6378f46fd970b6d90548e74b6acf2327f319fdce79438f","ssdeep":"","tlshash":"8be0a3ec5a4523f46cc343636895948b08ba45519d7350eae2b530dc52d3a6c5463f24","first_seen":"2026-04-30T03:12:06.07683Z","last_seen":"2026-08-10T18:48:38.479026Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/AcceptedPaymentMethods-BdIQ9c3j.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.890Z","timestamp":1786387668890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/AcceptedPaymentMethods-BdIQ9c3j.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 329\r\ncf-ray: a28f3405ae1f5db9-VIE\r\ncf-cache-status: HIT\r\nage: 2866679\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 08 Jul 2026 08:01:37 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1342,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":610,"size_decoded":1170,"mime_type":"text/css","magic":"ASCII text, with very long lines (609)","md5":"8e783bc8cf1104ea6fcabba86050f517","sha1":"789e202b2e1614f31929025159c6b851fd082076","sha256":"3c62bbb4b3bc30b22ad1b9ce4d105cfb7b5f570860726255bb88b1cef183a771","sha512":"d26536ce1c51d3d7276bcc59fc1c38f640020424a9ed84040085a2bf75225164cb6aedd8588a65bc7e032cbbbf08e2677ef4aaae6923535300977798ccfe38ff","ssdeep":"","tlshash":"c8f07da59e01593cde2be3192eae920d608861028a6358d2f4466215c8cbbef0c6118d","first_seen":"2026-04-30T03:12:06.039991Z","last_seen":"2026-08-10T18:48:38.434403Z","times_seen":14,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Image-CJw0Bk60.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.844Z","timestamp":1786387664844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Image-CJw0Bk60.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2056\r\ncf-ray: a28f86343b6ed9d8-FRA\r\ncf-cache-status: HIT\r\nage: 154\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:3088,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4814,"size_decoded":2923,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4771)","md5":"30568af0ca4bf5f7552b6760c67b6be6","sha1":"d36b58aa8b8ecfee7f114d6c2f05b4b4e53977e4","sha256":"1e4588220cab6ffc66a988394bcd9b3dc60fc7bdc3ad3d0d11c6b195e032d749","sha512":"11b4ed5bcdf3226c77172073c4d7bac41e2d819d5e5318b3169b67fee8f9d234b4b67ed9fb0f804fe27e30f04f5a30a19bcb277ec989d3a01df88d4a7838408d","ssdeep":"96:Rntku7XHzeWhFhbvbWV2QSCbJ7bE+T2Nb9Strwcr9GbUCVFVuJrKVk0RZuH3:RnWSqw/fS2QB9E+T2F9SVwMuUCZuxKVm","tlshash":"44a1d759737d347df30659ead0db042e6135a3059b1b4d2cb3f5782742a04612bf2f66","first_seen":"2026-08-10T18:28:17.8898Z","last_seen":"2026-08-10T18:48:38.764324Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Roobert-Bold-B25Z_PdD.woff2","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.424Z","timestamp":1786387665424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Roobert-Bold-B25Z_PdD.woff2 HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cdn.biterfz.com/assets/URLStructureRouter-UQLD4QC1.css\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 79616\r\ncf-ray: a28f93ed9cc277d1-FRA\r\ncf-cache-status: HIT\r\nage: 2800488\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Wed, 08 Jul 2026 13:10:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: oyFXnYSKhH:9,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79616,"size_decoded":80457,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 79616, version 1.0","md5":"5f33d8d4691bc66ba8277864202f453d","sha1":"2cea3eee058bddc2bf61fc89aa59bce92efddfc4","sha256":"7343399f355d89e4f8b9952f810783de2d437df724522edaae5d8e937fee528c","sha512":"cb699bf79142964d2d05b0b64cf7d2edde00e3e1cc9d560b9a60f6785a830c451908e3403cdfc37c787827e98f2ddad660efbceedc607afdfdb9a901c1ae20f9","ssdeep":"1536:PRGwPnqPlPD96SWOLLs4j92CxIRSQdmhNqlSMxqYJ+HHUdx+NRh1B08:P0jdPD9phV92QAdmhMSqR2UdxerD","tlshash":"7373021eb25a8e2fb3155bf913bf936fd0331641874263d646d8240d5bbe0f3a5790a2","first_seen":"2025-06-25T06:00:02.188948Z","last_seen":"2026-08-10T18:48:38.765367Z","times_seen":121,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/HtmlContainer-g7_oCS3Z.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.192Z","timestamp":1786387668192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/HtmlContainer-g7_oCS3Z.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/HtmlContainer-g7_oCS3Z.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/EsimGridSection-CzYKQ_C7.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.370Z","timestamp":1786387668370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/EsimGridSection-CzYKQ_C7.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 1043\r\ncf-ray: a28f3405fa1e9274-FRA\r\ncf-cache-status: HIT\r\nage: 5101600\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:893,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4319,"size_decoded":1883,"mime_type":"text/css","magic":"ASCII text, with very long lines (4318)","md5":"18c87e55802b17e3888fbc03011f5bc2","sha1":"d53a43497b69807fb035d99391e10d20aac267c4","sha256":"c9470ce1ae42555c31e49af353f2b9a70ce2dd8b0dd90737db257f0ab50cffd8","sha512":"1d698628a37b29b824a8a0d24034604d8532ca78ea41d86a0c3b8186adadba41086d51c77855f362e9bd6adc98bd26533bad57c42eebd5cd4fc6aebb3f0acc78","ssdeep":"48:dWJ8gqlB4mVQ+5ZrCFNih+mkcAAZXTJCptzXTeXW1DcM/tYqvdFd4AjrV:dWAjVd5ttkc/hTgptzKXW1DcMyq1fXrV","tlshash":"659142956a21b67dbc6be45cc36a668c5e542816af1350e6f830302a89c6fe04b3351f","first_seen":"2026-05-31T11:11:55.965186Z","last_seen":"2026-08-10T18:48:38.756236Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Connector-Dz9cFlRR.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.669Z","timestamp":1786387664669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Connector-Dz9cFlRR.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 267\r\ncf-ray: a28f3405fc01d2e4-FRA\r\ncf-cache-status: HIT\r\nage: 2801344\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 08 Jul 2026 13:10:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tSLwrpdTXI:42,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368,"size_decoded":1107,"mime_type":"text/css","magic":"ASCII text, with very long lines (367)","md5":"6c2c1f361d3ad5ef1dd25313edcdbbaf","sha1":"1e689e3b613f1b783ea535eddaeddbf25fc43e10","sha256":"36c133b63c127743cd7e20575c18ecc6185a0558275efa9f9ff5043d285916a3","sha512":"3377966bf475c13a0be72e9399ef1edd4a9683a7a43d7d73fd3c96e46ae723df9973f042a90ff5ddc06162de680332860de02d2149b7261b9b8746f25c53ef8b","ssdeep":"","tlshash":"75e068e9db11663ce896a15df5b4d085d5c08942c4030e8bf9aaf269c2c6dc3103518c","first_seen":"2026-07-16T00:57:04.845654Z","last_seen":"2026-08-10T18:48:38.750956Z","times_seen":4,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/url-Caz6rh2n.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.403Z","timestamp":1786387665403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/url-Caz6rh2n.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/jsx-runtime-DS4W9P0j.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 50452\r\ncf-ray: a265b1b00a2f8aa8-FRA\r\ncf-cache-status: HIT\r\nage: 365\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 05 Aug 2026 12:03:33 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: RSspwaEfSI:8177,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":165569,"size_decoded":51321,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41881)","md5":"2a8933247112662ade7324f2804ba99a","sha1":"648ff9d23f7e25cae8d03d9d2be4a9a054a91f95","sha256":"0f0f869e31c594fbd5c88cbc8097b21479899925fc4407a37aaf93cae5755a32","sha512":"9fa1171cbf28cb55b3596eb5137cfbc4bf5b1bbf8c6eba247cc825d57aa082432a0fd7487e2833dda5996bbdadf358c266b0e5c34fe593ca2023e5765afe05b0","ssdeep":"1536:xK8nPn6YhOjaluztpOz35miPG+QpVe0UMCn7gD3qzqoINYr4AGsQM:HnPn6YhOjRIE+eVYMwaNKGsQM","tlshash":"67f34cff7252b022179b235990bb4046f3355d97141e9864b3a8e8ae3971c4cb2b7f39","first_seen":"2026-08-10T18:28:17.931563Z","last_seen":"2026-08-10T18:48:38.477341Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/loader-module-core-B6zgqOLb.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.683Z","timestamp":1786387665683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/loader-module-core-B6zgqOLb.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/api-client-BCvJLI2Y.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 19578\r\ncf-ray: a2750d3368d9155c-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lyytAWfgNq:216,t28\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68321,"size_decoded":20412,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (58104)","md5":"5bfebf06ee6190a758cb0b3f58e8b062","sha1":"36663cbd508ed8b252abfc4b2c4a5b93f8650169","sha256":"fefea1ce6c98c454eb19133e85d7b56adcaaf40a94930af138bba55cbe399088","sha512":"0fdd292cc30951b55dc476bbbe218c3748f6463ff115239485b96201fa5c500e462e169ab29e337fc65ccff78318bfdeae49b9a947ced8d35944dcec19f76a70","ssdeep":"1536:qVjQHvM+K0XKkocRPy2lNytjjhOqyoJhWTI:qGLSWvNyd0qyoJkTI","tlshash":"c463c797f5ada07242d3b8b4612f210aa33f515da40d807cb152e5e97cbd94a8b33f78","first_seen":"2026-08-10T18:28:18.211546Z","last_seen":"2026-08-10T18:48:38.766406Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu.i.posthog.com/e/","fqdn":"eu.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"18.158.90.132","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.733Z","timestamp":1786387668733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:B5:42:B0:EF:B1:77:97:C3:FF:B8:89:87:B5:A3:F4:32:08:FE:27","sha256":"BF:C3:D3:B1:0B:53:D4:58:C2:A8:1F:37:4C:D0:F6:A2:F8:E0:1E:BB:05:FA:53:84:BA:CC:BF:1D:78:D1:F7:A5"}}},"request":{"raw":"POST /e/ HTTP/1.1\r\nHost: eu.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: text/plain\r\nContent-Length: 909\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1352,"data":"\u001f‹\b\u0000\u0000\u0000\u0000\u0000\u0000\u0003UioÛ8\u0010ý+‚\u0010,Z ²)[¶$÷S“Eº\u0007\u0012\u0014h\u000e EAPäÈâZ\"U’ò\u0015ô¿ïЎ\u0013y›d»k\u001868盙Çá}ÈZI\u0017°\tga[qºn~{¶ÝÞN—\u001f‹Òæù_wÙÅÅç›+¸¬îþ°W]¾ù³Ù\\6·\u001b\u001bž†\u0005s¼\ng_îî“\u0002c8/A\u0010\u0012å\u0000Y”BšEE’Ž¢|:™\nÂË¢,Çè\u0007KP\u000eÍOZ6‡¥„\u0015ÊZ£[0N‚\rg÷á‰Æ¿ðN*¡W\u003e\u0013žé\u0012Œ•Z¡\u003c\u0026^T\u0018ԁÁó…4Pêµ\u0017\nŒÇºM\u000b¨ø\u0015ìÂéÖ+œl`«•—Þ\\Ÿ÷%T—¥\u0005ÄCPÈ;c\u0010\u001cíL–•s­\r‡…t`Êí€ëf¨ô\u0010ÔÐ\u0007¨´õUô”^Ú2W)ÖøD=[ÃV´C´\u0014+ÞÕ~©·²®Ùp2 Á›‡Bƒ«ë \u0026\u0003ò.@Á4y\u0017¬ýYÎâq2 oƒ\u000fÀ\u0017z8\"1Áo\u001c\u003c”=Üi{\u001dyê\u0014jz⚩y‡ù1;¨èæSøŒŽ¶\u0018S®w\u0026^o¹\u0001P´\u00029¯\u0010vLFɓt%…Ãùǣ̷Î\u000f²ÕÆ=\u001açé¸/\u003e¶®eIVP„ûC¼ƒ$ž\fb¯\nÁ9º#ג|k¹ÄŽ˜à\u0015T‡\u0019bÈ4›Ž³t:Í\u0006iìsZ± BZGyŔ\u0002?J.Ô\u003e t’ÕrË\u001c\u0026£{ÿpDFӈdQL®ãl–¤³\u0004#‘ÑgïÁµ*å¼3 ¨\u0005k\u000f^ºs´A’Æ\u0019ñŸÓÐ瓊?€íÝ\u0004QFéTð(/2ˆbžM\nFH‘\nÞãëòÙU\u0007E7§°v \u003c$K}a´\u0001Wi\u001fÊn\u0014¯ŒVº³¯{øRöux’B\tHsÌ|Ãʺ®wÜ\u000f\u001f¤šS¡\u001b\u0026Õþ\u0006\u003c\u0019¡“®öm=C9²©®ƒ7WÚ¬Øæm\u0010\u0005gÝ\u0026ø K\u0017œ3#ìi\u0000Ÿ~¿\f~\tÞKã±\u0004+éª\u0000\u001d¹–*Ð\u002687›Öiïw\bæ\u0013è\u0005¨ÿ·³\u001eæ‰í(YW;û8ýI4Þ]¢ÃXhù~$\u0019\u001f£XL¦q:Šã\u0004˜wZí.ð¿ú¤\tK\u0026\u003cçI?\u0011î\u0003³¡?Õûç\\^Ä?\u003c~f«\u001d{\u003c¿ãŽm^ØxÀµ\u0011\u001euÌu¾ÑxEXQƒ8¦¤\u0001\u001fä[\u0007\u001dP+·°_ć§áǞ¾ò°œH¤µ@T²”˜fV²Ú‚\u000ff4GÈ\u0014_\u0018‹°ñˆD‚'½ß?†9 µlðR\u0018ðíôÐwDCèyþÝÓº\u0001¬¥i_Ú\u00181nŒï_OCë_\u0010æ^4KÐìo-åܾ{\u0007\u0000\u0000"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://biterfz.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 23\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":420,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-08-11T01:03:22.2501Z","times_seen":44155,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":47,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-DN3HBoQv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.796Z","timestamp":1786387664796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-DN3HBoQv.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 226\r\ncf-ray: a28e93903f351e57-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CmAkpebaOs:28329,t27\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":271,"size_decoded":1062,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"2c59f51893d07b47115cdd19c93d0c41","sha1":"8da9ecdb9af5fe54680a5549864915f5759ef84c","sha256":"40f65d704a7773c565a1ca12368dabb14bcd16bb45b7ea10ea208d9de70e5559","sha512":"436b02863d4e40528de979c835941e621e2fff673d504282b776a13f7cad76ad8d06d72288607c3a7ac26caecf943fbfb344845a14ffcf4643f31da5172db443","ssdeep":"","tlshash":"8bd02bcff4e16c31e60d1d49802fc5e16a7c734a61056161d0376a99336d9b0d4b4e26","first_seen":"2026-08-10T18:28:18.146024Z","last_seen":"2026-08-10T18:48:38.767375Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/translations-ns/widget.en.25076159430a4961a2e2180ca2ea53e4.json","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.755Z","timestamp":1786387665755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /translations-ns/widget.en.25076159430a4961a2e2180ca2ea53e4.json HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 19061\r\nage: 867255\r\ncf-cache-status: HIT\r\ncf-ray: a2912bcddd8f8824-PRG\r\ncontent-language: en\r\netag: W/\"4a75-FB08iV38yPO1tP9Ze9pCVQL+3xY\"\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-cfw: CQtlVnuAEs:84,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19061,"size_decoded":19771,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d7a1b03c665df2cd08ee68f06661bb7b","sha1":"141d3c895dfcc8f3b5b4ff597bda425502fedf16","sha256":"184f768004496fd3ef61eec33ffa16e8e87484d107955af720fefb8cb18e41be","sha512":"b0640ebea3c42f96f92c247797065fcb3ca462253d9936c8e7593bac48dc833dbad5b85e5ded324a37105f38c1a5c21fbe60b6fd2b3f321f56a69e13100906ae","ssdeep":"384:WRDmPH7qxVzOVZg6s7L9Q+zIN07uBW++/8tJ:WRy4zOTgPa26Rj","tlshash":"5682928fb26d1a22828893a578ef2e4e73ac815d03a118a75c46c13c16a1f7778df5c9","first_seen":"2026-08-10T18:28:17.723641Z","last_seen":"2026-08-10T18:48:38.768174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2499,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Skeleton-B0PvOGCy.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.220Z","timestamp":1786387668220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Skeleton-B0PvOGCy.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Skeleton-B0PvOGCy.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Shelf-BgyBos5-.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.679Z","timestamp":1786387664679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Shelf-BgyBos5-.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 1097\r\ncf-ray: a28f3405c890371d-FRA\r\ncf-cache-status: HIT\r\nage: 5101601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: cMPZAnjOru:51,t14\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3770,"size_decoded":1936,"mime_type":"text/css","magic":"ASCII text, with very long lines (3769)","md5":"820202fb8298d2a657ac7a2ca39c46d7","sha1":"4deb0c576442bb631b27cacddbd40f892f343430","sha256":"c79cc3777e028f126151f6f60edc7c7736bfb5e9ba1b59247c3dd5c4a4b19ff4","sha512":"461041cd7bab354cbebf1a4edd4c4a08c8c9e1a5bff605ded19e5cdab6191ab063bd75cbc7c3338d1cab133e26c5fa910f145e9feafe2a0b303b7fb6c60036dc","ssdeep":"","tlshash":"ca7173d70e71523ecc9bdd24d6ad590c6248c5cdab4b20ca291ec51a89c9ff6187f748","first_seen":"2026-05-31T11:11:55.723514Z","last_seen":"2026-08-10T18:48:38.769111Z","times_seen":7,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Search-CJDvivX5.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.685Z","timestamp":1786387664685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Search-CJDvivX5.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 1762\r\ncf-ray: a28f3405dc290ecf-FRA\r\ncf-cache-status: HIT\r\nage: 5101601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VjFWdNxVXU:233,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7788,"size_decoded":2601,"mime_type":"text/css","magic":"ASCII text, with very long lines (7787)","md5":"5c602abb57c77a1184da697f8856d605","sha1":"d7fa6589bab8281c9c2ef90177dca164474279d5","sha256":"ef7e7203a0fb832ab85e1b5101c9f07ec2c98711496ecf4d5a441aef9489343b","sha512":"80e00b27517602967022ea504a96c379716730140360067f62f86a59b2fd006b67cfaf62015fff37891d0f70a7ddfc36d3b82f13982cde573fda67ac36b27cb7","ssdeep":"192:2MkJjTt1N9NrE4zMTPkk1UqYrNTMyH2ied8VScDiC7aNMBUT0tDoZZ:0/2CuYGADDBUT4W","tlshash":"c6f155a99295b23ebc37a5353eecae8c11189851df7307ebe8547119c2d7bf50a33809","first_seen":"2026-05-31T11:11:56.097428Z","last_seen":"2026-08-10T18:48:38.769851Z","times_seen":7,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/SuggestedCountryPopover-CB--Yj8E.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.227Z","timestamp":1786387668227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SuggestedCountryPopover-CB--Yj8E.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/SuggestedCountryPopover-CB--Yj8E.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Notice-DC98bN0r.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.331Z","timestamp":1786387668331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Notice-DC98bN0r.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 284\r\ncf-ray: a28f34058c549c23-VIE\r\ncf-cache-status: HIT\r\nage: 2783888\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 05:33:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1341,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":535,"size_decoded":1125,"mime_type":"text/css","magic":"ASCII text, with very long lines (534)","md5":"d70e212802dc300ed0015de45e662b27","sha1":"abcf5d74e21d86428e59aa2cd585f48ca157cddd","sha256":"686f6a2f78f8fcea2223e271cba3f62f12b0440196d2832a88e58d35ea7d2f84","sha512":"7ddfae8dd26c0981efc87fdcf20af60592fa1e812413f3ef6b2a9e5ed7519d720e72974d350617d1c7c1c0bf0fc78c53f9b21da39ef30fa3555686697773e7b8","ssdeep":"","tlshash":"d4f0f68b9320e7399c77e12e530cf04a03615448495143b6f252691edfc6bb6e312243","first_seen":"2026-04-30T03:12:05.991886Z","last_seen":"2026-08-10T18:48:38.743109Z","times_seen":14,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/_patched_static/checkout-redirect-flow.js?v=checkout-wallet-test-pop-20260804","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.711Z","timestamp":1786387664711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /_patched_static/checkout-redirect-flow.js?v=checkout-wallet-test-pop-20260804 HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 6495\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6495,"size_decoded":6784,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"0304e3aa9853d2f1a9e18343907e337b","sha1":"04b7a776178ba179ec25abaca2d3b3c287df2df0","sha256":"e4726258c96c56ef7d8cf1cf2325c44dfa63f83f510ee550b6553f34290e4451","sha512":"9fe08223ec3b0f6f59e7110997aa109ed30cbb86ec7705cad50d37e3749b1f5f61f6f6ed5be9a6caeb0e127cee0c349d69d532a967c8103b7ed76c038810a6ea","ssdeep":"192:bgFSQ+c3UNaigN8dXepqRQUWyHbP9cSDZ4:0ACvrpYX4","tlshash":"fcd140ae15f705200aa3609e97afa101703394176687dd493bcc83585fa1d7ecebbe9c","first_seen":"2026-08-10T18:28:18.219717Z","last_seen":"2026-08-10T18:48:38.770973Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ThemeToggle-C4axI8RR.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.953Z","timestamp":1786387664953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ThemeToggle-C4axI8RR.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 699\r\ncf-ray: a28f8635689ff4e5-FRA\r\ncf-cache-status: HIT\r\nage: 149\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:60,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1332,"size_decoded":1563,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1268)","md5":"265086c6cf38a5f2b245cf5399e29141","sha1":"5d89200fb91b107a0b07ed99e02e768f67d03a98","sha256":"3daf8ae9987b3bbe248ddabd4c9984a080f5a76e44bedfb63da6a89458e08699","sha512":"bd670d46142f6a2abe63c30102d637ec81b3457d9121a4f583b13b51996e0e18e674c3254b1087af27a2b7c5d831531868aa9011ebb1ee00e0f1019592db2243","ssdeep":"","tlshash":"8c210b1eba407978a40fc9d4e8660a230332a97c671555e1f06b9e880b29d49edddf1b","first_seen":"2026-08-10T18:28:17.765348Z","last_seen":"2026-08-10T18:48:38.772065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/arrow-left-PCfYj2GM.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.377Z","timestamp":1786387669377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/arrow-left-PCfYj2GM.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/PreferencesModal-Bl8q8E4o.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 179\r\ncf-ray: a28f2d1a3d3b360c-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 6390\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47823,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213,"size_decoded":1024,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"da9ceaa34d9ddf8cad7ce329bd32a6b1","sha1":"0eb7dbb9473abb8f7675ea1724579ec8d9a8f152","sha256":"bd3f562d09333b7831d1731a6871e388e925839866a6f8c2d080802eaab5a19d","sha512":"cede116856599208cb0245fbe562172af8368dcd6902f66c1b7d37e452c322d49eff811395a28959df02c91ef232f6cecf4d69a02784c787ccb5de4d7052cfe5","ssdeep":"","tlshash":"ffd0235bccf60d71091519f1400ed501854465ecd3b6c6917101e2fd02b5c652ddcf32","first_seen":"2026-08-10T18:28:18.369832Z","last_seen":"2026-08-10T18:48:38.772915Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bitraflll.com/","date":"2026-08-10T18:47:43.779Z","timestamp":1786387663779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitraflll.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:43 GMT\r\ncontent-length: 0\r\nlocation: /no/en/\r\nvary: Accept-Language, User-Agent, DPR, Viewport-Width, Width\r\naccept-ch: DPR, Viewport-Width, Width, Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Mobile\r\ncritical-ch: DPR, Viewport-Width\r\ncache-control: no-store, private, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":9,"connect":34,"send":0,"wait":83,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Image-Bbbl7GSj.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.640Z","timestamp":1786387664640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Image-Bbbl7GSj.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 264\r\ncf-ray: a28f34055d03d406-FRA\r\ncf-cache-status: HIT\r\nage: 5036676\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 12 Jun 2026 12:35:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:890,t38\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":495,"size_decoded":1105,"mime_type":"text/css","magic":"ASCII text, with very long lines (494)","md5":"70b05de0dd0eb54ae7da2a69947ae2eb","sha1":"04765184c015e6612e115281198c194f6b5ceb2c","sha256":"2136c6b9e33e97e166ee34eb0eabf023c8cd94263d36eae3db89b9b7ce70e380","sha512":"4a5ee3620d84046286fb2521426093530be0ddbd02443c7793730fcd29d2211a689169192981075cb857f8f8de8b64dc0590a3dba85e563d989a8f1352449c24","ssdeep":"","tlshash":"dff0e9a0d50cb2bc8937f3897040d499fbd94455db7121e9acc9f2d4d905cc4649d0a2","first_seen":"2026-04-30T03:12:06.158162Z","last_seen":"2026-08-10T18:48:38.676453Z","times_seen":14,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/HtmlContainer-g7_oCS3Z.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.682Z","timestamp":1786387664682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/HtmlContainer-g7_oCS3Z.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 370\r\ncf-ray: a28f3405d88e4d4f-FRA\r\ncf-cache-status: HIT\r\nage: 2909141\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 10:36:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50074,t19\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":651,"size_decoded":1213,"mime_type":"text/css","magic":"ASCII text, with very long lines (650)","md5":"142d540cc5de9225a32341fdb5eaa0f7","sha1":"e2249c3f6b1eb5675929df6b6246a4b9c7ce78a2","sha256":"f756f4b4ef38bab073099041d038aa8c4240190b3485843f8dc90a0d3af56ce4","sha512":"790e68103b86a8eb59438549cc95cf07e7d90ee308224bf902d73e6f0b4a7ac80106fd9959c844b887c96f232e973e28b13a9ecfc6b006fb361a910644c1cb58","ssdeep":"","tlshash":"bcf0c074ab20d37cdd36942e7798ba8964805807c40769e3d492724182c7b631a15205","first_seen":"2026-05-10T06:59:24.609589Z","last_seen":"2026-08-10T18:48:38.77363Z","times_seen":9,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/canonicals-CUbrJ7Wp.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.863Z","timestamp":1786387664863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/canonicals-CUbrJ7Wp.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 547\r\ncf-ray: a28e93d20c39e537-FRA\r\ncf-cache-status: HIT\r\nage: 123\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: HcKxlISubs:2249,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1213,"size_decoded":1389,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1165)","md5":"4c64b25b6d58548c29590264c51a8a58","sha1":"b6c5e50f1ceca72388e2b256a0729c43de0b7632","sha256":"7929543e26b262e601cec5b8412b3409e4d7ab9eb77399645191f5303c8035e8","sha512":"8ddd5590293714d8147fa4f6ba8ba939fa31be190422fdce28de4befffc38db4e8a085586e184ad9fb4a54dd77a0fb7f513166cbccb19a28cc6d985156d1e8af","ssdeep":"","tlshash":"f621e19f04be21e52b2109bc92958e4e75ef85cc0156ecb8ec91d4a0f16dd9230e6bd5","first_seen":"2026-08-10T18:28:17.786555Z","last_seen":"2026-08-10T18:48:38.775395Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/new-to-crypto-BpFQOjmv.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.155Z","timestamp":1786387668155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/new-to-crypto-BpFQOjmv.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/new-to-crypto-BpFQOjmv.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Link-qwEkNCla.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.625Z","timestamp":1786387668625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Link-qwEkNCla.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 346\r\ncf-ray: a28f2d21fca09a0e-AMS\r\ncf-cache-status: HIT\r\nage: 6399\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zVqkiAenNG:129,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":601,"size_decoded":1191,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (559)","md5":"d602086c09890e57f4f0a7a096911044","sha1":"f457a1d6a690d90e86d3519db87509e0cd4b8b15","sha256":"c9f413332db8b9ad82ba090a29552fd3acf4ce9d9b676158ddb55857eaddde6d","sha512":"2194cd1def048768abf71b65c63c50f59b587b5b85a155e58efc83122af9dd34f27f4c2cbeccaf2f6fd85b88e22e3e02b1f38636669f057bedde258f7ecd5acd","ssdeep":"","tlshash":"38f0a2c8c86874fdd42a079d904623ccf793d050d74f4a3c817012789655b05f371f56","first_seen":"2026-08-10T18:28:17.715041Z","last_seen":"2026-08-10T18:48:38.77629Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Popover-C6488GXa.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.170Z","timestamp":1786387668170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Popover-C6488GXa.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Popover-C6488GXa.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.525Z","timestamp":1786387668525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingSections-P_DxiMJ3.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/landing-EzeWBxTg.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 30414\r\ncf-ray: a28f86684ee035e5-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zqyodxIUSG:75,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95752,"size_decoded":31280,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (55302)","md5":"4ce5aff4a9d070856aa58563375a23e7","sha1":"df7f672367e4e1a3221a5857882b75435b05e39f","sha256":"9ac6200b11e08a5ddd7aae4c92f487f505f407e7cacab3791880f8068cdd6af5","sha512":"82c97f80fc50331ac1fa16669aae95b43937ef75b627b30d6d0076d022590be2510f9eff11056f6cb5752f710b5e8c7b3f102abac0a51865985f85daa3d57627","ssdeep":"1536:TpBY7SOLSdEbCRnRJ0AKs9joJ4F7oxSSlUogpoRCsDKJLDKKY23Ol00H0qikdSC9:T6HWX9KstRFkES2ogp0ULGKY2E00H0qX","tlshash":"ac93198df0a139e8ba1b49e4807f454cb23e6404db8d09a8f47564e82dde1d477a7fca","first_seen":"2026-08-10T18:28:17.9924Z","last_seen":"2026-08-10T18:48:38.777647Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/new-to-crypto-BpFQOjmv.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.282Z","timestamp":1786387668282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/new-to-crypto-BpFQOjmv.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 370\r\ncf-ray: a28f3405fbfa4d7c-FRA\r\ncf-cache-status: HIT\r\nage: 1121066\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Tue, 28 Jul 2026 11:54:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50076,t22\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1108,"size_decoded":1211,"mime_type":"text/css","magic":"ASCII text, with very long lines (1107)","md5":"d79881cf725e92d804ed69a0c6c40366","sha1":"216937c46ebbbf5fbc54bd7a8d2a9f8f1016d3f5","sha256":"216b5e4a5a98848ec90257d1d1e7b92693585f20ed44fc81c9fbbc945327f050","sha512":"49ebe1b2f8a39c3fffd3b9d6d5d338016cc6e334feaff65cf8aa7d73ed4a567510b876f6552f6d029f570a39b9323a42decfe937ef631af07a71f4b9c5b53a90","ssdeep":"","tlshash":"11118e95447ab3bc312fe020a1e1b28c21258401cb4b3ee5b257f559e5e93c5367ed5a","first_seen":"2026-05-10T06:59:24.39877Z","last_seen":"2026-08-10T18:48:38.778484Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Search-CJDvivX5.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.324Z","timestamp":1786387668324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Search-CJDvivX5.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 1762\r\ncf-ray: a28f3405dc290ecf-FRA\r\ncf-cache-status: HIT\r\nage: 5101601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VjFWdNxVXU:233,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7788,"size_decoded":2601,"mime_type":"text/css","magic":"ASCII text, with very long lines (7787)","md5":"5c602abb57c77a1184da697f8856d605","sha1":"d7fa6589bab8281c9c2ef90177dca164474279d5","sha256":"ef7e7203a0fb832ab85e1b5101c9f07ec2c98711496ecf4d5a441aef9489343b","sha512":"80e00b27517602967022ea504a96c379716730140360067f62f86a59b2fd006b67cfaf62015fff37891d0f70a7ddfc36d3b82f13982cde573fda67ac36b27cb7","ssdeep":"192:2MkJjTt1N9NrE4zMTPkk1UqYrNTMyH2ied8VScDiC7aNMBUT0tDoZZ:0/2CuYGADDBUT4W","tlshash":"c6f155a99295b23ebc37a5353eecae8c11189851df7307ebe8547119c2d7bf50a33809","first_seen":"2026-05-31T11:11:56.097428Z","last_seen":"2026-08-10T18:48:38.769851Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-assets.i.posthog.com/static/surveys.js?v=1.415.1","fqdn":"eu-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.878Z","timestamp":1786387668878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:16:21 GMT","end":"Wed, 14 Oct 2026 23:16:05 GMT"},"fingerprint":{"sha1":"A4:C7:89:02:89:1E:87:A4:0F:B1:DE:E2:A8:19:4F:7B:D5:1D:6A:BC","sha256":"36:85:BF:C1:16:3A:49:C9:98:16:2F:48:3A:FD:14:C0:9A:20:E0:C9:AE:CB:8C:72:55:A8:B5:4E:E6:83:5D:5C"}}},"request":{"raw":"GET /static/surveys.js?v=1.415.1 HTTP/1.1\r\nHost: eu-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a2912bd27b86723c-OSL\r\ncf-cache-status: REVALIDATED\r\nx-amz-version-id: KmHzdyrNy6LDRg7eAwv3KJMj9IwtbIEh\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nx-amz-server-side-encryption: AES256\r\nlast-modified: Mon, 10 Aug 2026 09:57:04 GMT\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\naccess-control-allow-methods: POST, GET, DELETE, PUT\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nx-amz-id-2: iEzqAnRVqrLTg84vTWfO75CopFdJ5dhyhvLjCX67Lizxvd6CYkfKW01svIbjVog8yXHVrPV9Yjm7Ro4TkQS/r2V23BYaCGn9\r\nx-amz-request-id: F8388VFQHQZH5Q8Q\r\netag: W/\"5833945f25dbc297c1a2722be62e068e\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99827,"size_decoded":34214,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5833945f25dbc297c1a2722be62e068e","sha1":"2e3433abf068eed7f57b11ec469ff02d937cbd50","sha256":"105ad7b5dc7ff8de1804c9b0950a513fd745d00b0c3f6be55e0e181126298500","sha512":"08c52ff95f12903101a0deb3a84c30d6f6757cac67f7916d7583422420e42b06f3656b33a9327b261b8b112f71505a49bc9726ec8dc68475e836b9f096fce815","ssdeep":"1536:e97wz8HB0wGQM7CF4Bqdb8ZSsDT9E/GSZ19f6BQ:e1w4Bm7CazYVZcQ","tlshash":"22a35dd5fa00e16d51eb847810be5842f33d6b1aea0d4c54b1179cd83cd6988a39ffa6","first_seen":"2026-08-10T08:32:08.470987Z","last_seen":"2026-08-11T00:40:10.583217Z","times_seen":99,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.415.1","fqdn":"eu-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.879Z","timestamp":1786387668879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:16:21 GMT","end":"Wed, 14 Oct 2026 23:16:05 GMT"},"fingerprint":{"sha1":"A4:C7:89:02:89:1E:87:A4:0F:B1:DE:E2:A8:19:4F:7B:D5:1D:6A:BC","sha256":"36:85:BF:C1:16:3A:49:C9:98:16:2F:48:3A:FD:14:C0:9A:20:E0:C9:AE:CB:8C:72:55:A8:B5:4E:E6:83:5D:5C"}}},"request":{"raw":"GET /static/dead-clicks-autocapture.js?v=1.415.1 HTTP/1.1\r\nHost: eu-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a2912bd27b8c723c-OSL\r\ncf-cache-status: REVALIDATED\r\nx-amz-version-id: bAPR5rT3lT._rzUBrFbb8z3JtZ4YhENK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nx-amz-server-side-encryption: AES256\r\nlast-modified: Mon, 10 Aug 2026 09:57:04 GMT\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\naccess-control-allow-methods: POST, GET, DELETE, PUT\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nx-amz-id-2: 8d5epJ1u9kDJ0Vvl5G1yfcSxxxrjQAW4jmyppRet9XgiAwZLj5RO9/irBQFQ5lA58H08Gr+PvKM=\r\nx-amz-request-id: F831V7X6GNE2CPYA\r\netag: W/\"8d6e66a2ad7acdd378d8b4228d69ec68\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17887,"size_decoded":7655,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17834)","md5":"8d6e66a2ad7acdd378d8b4228d69ec68","sha1":"c369ce68f967351371ffd899bbb5424dad2bf8b0","sha256":"dbc0ce15ae6cb7c86bb66c699cc0445accb7e1ec4060cf7f8a384a5481ef8b2f","sha512":"c5dd0d5446bd1794a6e7ccee33b3b36a81ac8491bfb556faa775f2fe88b891117e5fc29010af438a04675b56822bf6678d29c23623f3193b0cf29011c13ae6d8","ssdeep":"384:7XeKaKyE7kg4iE+6u6J8+HHfEVTqkAFqzvYZYhbzO7FgNUb:OE28+H/EVPjvYZYhnO7Fgib","tlshash":"23821b8cb651f37229db495b807f0703e2257918a18a8c24b016ecdd647cb9122bfe7f","first_seen":"2026-08-05T15:03:46.443075Z","last_seen":"2026-08-11T00:40:10.56621Z","times_seen":486,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CurrencyCombobox-FBl24MnR.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.060Z","timestamp":1786387669060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CurrencyCombobox-FBl24MnR.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 102\r\ncf-ray: a204acdc5bf898db-VIE\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Fri, 24 Jul 2026 17:34:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: JMFviQVQhQ:345,t33\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117,"size_decoded":944,"mime_type":"text/css","magic":"ASCII text","md5":"4960f307b274635f3a5d849a1b8f6110","sha1":"613eeebc91f77e747af357f43250e6a540c9ba18","sha256":"9cda794746c85c897f3825fd9ee419f7c6a3eac5b59e493e1379e1222ebf1d20","sha512":"8bea08686c58933cefe7397a84473d7502f10735c6cebb8846dbb930d6d442f8904cc2ee29d10485a5762af2e8a117fe90af5fa44e1e6de4020482bfe976b75f","ssdeep":"","tlshash":"61b092198224a138c5465716b5e2f84fb08194198a4380dafdc23649e289b4ef4962d1","first_seen":"2026-08-10T18:28:17.85341Z","last_seen":"2026-08-10T18:48:38.781056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/EmptyState-DPn2i2ZH.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.644Z","timestamp":1786387664644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/EmptyState-DPn2i2ZH.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 241\r\ncf-ray: a28f34056b704d7c-FRA\r\ncf-cache-status: HIT\r\nage: 846662\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50072,t15\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":1083,"mime_type":"text/css","magic":"ASCII text, with very long lines (385)","md5":"2ea54823270afcb886e1e5636bf11229","sha1":"560bfef13e6d99708aa5dcae63b3f196142d4966","sha256":"1222b2870f92a99713958cf96570f812bbe58a747b8d27a3da686772b71025b8","sha512":"43600815e048c181e528eb70782bb0bdab538e7412df163e9d4c3b10f055c78461fb35e00ef9aa245468f50e5f12ffd8cf5c9a9a29f4061db847aba437cb6f83","ssdeep":"","tlshash":"e8e02b559705c13cbc3ee214639db55cb4847a08ce0380e5fc9a712083dbbf21473461","first_seen":"2026-05-31T11:11:56.022221Z","last_seen":"2026-08-10T18:48:38.664556Z","times_seen":7,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Skeleton-DFqcKaYz.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.852Z","timestamp":1786387664852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Skeleton-DFqcKaYz.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 328\r\ncf-ray: a28e93d10dcbdbb5-FRA\r\ncf-cache-status: HIT\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: wuvSjokemO:9,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":1193,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (406)","md5":"dd2f0dddbca10e41626db6cfe1b4160c","sha1":"95b73f74495195edd3a69f27cf739e8cf72a1106","sha256":"f9e787d197a4281dba6785136478b4dccead863ed469ac83ce8bc0be5807b6a4","sha512":"d94670ff26d42d8761fd0ec0749037152498862f6cb9fcc6db3b682fb4b104cc7481dd8b978d2d64798de4a38011fe8d98066270bff50cb3fe0ea0325d2d1358","ssdeep":"","tlshash":"a7f0dc3eef60acfc68190996e50c4adaa23cd0bb8b89cb08d36079e4160106c4d21e02","first_seen":"2026-08-10T18:28:17.869553Z","last_seen":"2026-08-10T18:48:38.781857Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/u_x-2NvrRvJR.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.949Z","timestamp":1786387664949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/u_x-2NvrRvJR.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 353\r\ncf-ray: a28e938f5c16dc79-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: QtIEGlNvBZ:81,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440,"size_decoded":1196,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (399)","md5":"b421203f9fa3c3a8ed42f1d1b3a9b584","sha1":"0710cc1ce178f28c11fc57ef01e75de2dc8f200d","sha256":"8a07fb656cc0629eee728a65f9fe319fd689fa2a51a24fd76f247b5afeb35821","sha512":"54f87139b2dc9a152e87f0fd7f34cda4db4414781c9805b0a9e0d383d7c1a06bd6a376e03f5ff53c69ceb62d04cdd411396d597e47e7830411664dd7ac2c84db","ssdeep":"","tlshash":"2af0dc3ed5b02cb89d0b4ba965770ba9a32b80a8a7810364a1880190b2120c481b9fe9","first_seen":"2026-08-10T18:28:17.789562Z","last_seen":"2026-08-10T18:48:38.782706Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/metrics/","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.273Z","timestamp":1786387665273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /metrics/ HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 564298\r\naccess-control-allow-headers: Cache-Control\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2912bbc7b8e8824-PRG\r\ncross-origin-resource-policy: cross-origin\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npragma: no-cache\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":564298,"size_decoded":564870,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (34089)","md5":"975d954161138e5e216258adb2a1f893","sha1":"a243635690124c6244340106087a80ed0c51db3f","sha256":"99b09ba39ac05867b77bf5036ed56a489103791ae87a32654e805609b7e289ef","sha512":"d913b9162c289a69145c9012faab543dbfa721a88986e24955b2244d9c1e2158d2a6c7a7bbc6c01476a5ba66dc70caac63b3d27ee4d21a8358a8ccced7fac7fa","ssdeep":"6144:6NVeuWT05OMX6Z7i+Q+o/FWDEsoGz4ZOl0fcPbvTEaI3sI6jkd8TS1LQMwkwr:6NVeuWT0Qb2+o/5uUZmc8ewr","tlshash":"f6c419ceb3c674659392f478903f018ba97e28e2b44cd895f189cce42e7465a5223f7d","first_seen":"2026-08-10T18:48:38.783474Z","last_seen":"2026-08-10T18:48:38.783474Z","times_seen":1,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/ImageColumnsLanding-CTesZ2wj.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.218Z","timestamp":1786387668218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ImageColumnsLanding-CTesZ2wj.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/ImageColumnsLanding-CTesZ2wj.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Card-B5veHcdd.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.650Z","timestamp":1786387664650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Card-B5veHcdd.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 425\r\ncf-ray: a28f340579be9274-FRA\r\ncf-cache-status: HIT\r\nage: 1751408\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 20 Jul 2026 17:20:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:891,t25\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1255,"size_decoded":1264,"mime_type":"text/css","magic":"ASCII text, with very long lines (1254)","md5":"c03df6c0a5630bc73742869b308f1f1b","sha1":"1ddac06343f73c45d16809f73618c09704001084","sha256":"012105e7bfddd5b636e8bd11195625c91cafbd09d3cffe557f2080a64aa759e6","sha512":"1c57c624473b7303a9b81fd7f3ebbbea61c5e7a23c345e651d843ee27b9703c68a730a68e04f897399f8bcd4fc066a63dbd65693b7397307b01d21e1bd8b1633","ssdeep":"","tlshash":"29216be5594bd33c9ca78a156b9f45ac124b3563bfc224dff892329551cafd100a215c","first_seen":"2026-05-31T11:11:55.878072Z","last_seen":"2026-08-10T18:48:38.56196Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/MarketingValues-D2Kml6bQ.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.316Z","timestamp":1786387668316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/MarketingValues-D2Kml6bQ.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 263\r\ncf-ray: a28f3405c8978c0d-FRA\r\ncf-cache-status: HIT\r\nage: 5101601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lrHSCqsVfP:21048,t18\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":458,"size_decoded":1106,"mime_type":"text/css","magic":"ASCII text, with very long lines (457)","md5":"66bb8891991e05b2e2ff348f7e76d747","sha1":"c5edbd6fc44c9db772018cbb734602ccb22b8081","sha256":"b21802008bf6fe3cec0edd4d7cd206d330cc8f9c3d40652516d3ae3151160cc0","sha512":"32bf87fdc95b982d8fdd8c0462351a0318c1b3189cc4c5b3cb46f224fc3bebd93b489e7c58629146229c8175157fca2333e9f9352e536ec4494369f403bc5302","ssdeep":"","tlshash":"62f02e559201467cce36e4241778a209d441d4149a4750d59447331785cbbf30af2646","first_seen":"2026-05-31T11:11:55.724716Z","last_seen":"2026-08-10T18:48:38.744736Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:57.694Z","timestamp":1786387677694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/classnames-cAi7vm4R.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.770Z","timestamp":1786387664770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/classnames-cAi7vm4R.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 508\r\ncf-ray: a28e9390a9f32757-FRA\r\ncf-cache-status: HIT\r\nage: 131\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CCmZTzPoOp:8,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":868,"size_decoded":1349,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (820)","md5":"b54f383315b4682fed0f7bf7b1f79e67","sha1":"00b5d2ee4ac3e48f691888c9697b9cc9868d8aed","sha256":"c1e8ee7280c498dae66d90a5af7c832c79ff4a7dba26b7b88eb983db622ac89a","sha512":"5177764b6f1ea8aafcdad9b9da6f720e58532b7ad68a0401785fd6a6921ebc8beb006b87b575d4c0f578ee692186be79315cb3bf7bc647b908381bb034c9a505","ssdeep":"","tlshash":"2e1100d535c7706513530421403fce06f2387dd789deb481c295d5e07daacaa9613f3a","first_seen":"2026-08-10T18:28:17.937799Z","last_seen":"2026-08-10T18:48:38.784619Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/chevron-left-CXwi7oK9.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.810Z","timestamp":1786387664810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/chevron-left-CXwi7oK9.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 158\r\ncf-ray: a28e9390ca32bb7a-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CmAkpebaOs:28331,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180,"size_decoded":1001,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"1a4ee00daf18895e7fa5257c47ebd05f","sha1":"0a03ab511b143b6bf5db747f52f7ee2bd633ba4a","sha256":"65528ce3b3653cc3a03c6a0752aa20975a68b212643fded8880e54c96be79639","sha512":"2b9602372f004df9523a90bba70265ee23f51163deee594ff619a7533eb18a9b2abf8b3d7a56b6d8217b11330b18c6932cc9d731cec0425e4e89844d0d1f261b","ssdeep":"","tlshash":"2dc080af7df52d750e490e7750594255890db09ce3b34844f241275d0291d857dece30","first_seen":"2026-08-10T18:28:18.27878Z","last_seen":"2026-08-10T18:48:38.785224Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/cart-xOdlHfEt.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.853Z","timestamp":1786387664853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/cart-xOdlHfEt.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4363\r\ncf-ray: a28f86342afae7ba-FRA\r\ncf-cache-status: HIT\r\nage: 154\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:261,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14072,"size_decoded":5230,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14016)","md5":"688b2ad61549c04a9f758af5a2ae7f20","sha1":"4e07c96e5751c3ff28a68e43c471ba8628fd4c6e","sha256":"485008c1cf6933688ecbd37c52dbe45f65ed585ce1e6bd15a2976ec9ce076221","sha512":"971c47453bb9d0f043f38dad1cd2c8872cb2dba471c35846027c40a89c93aa87a85b3957c3fb29b73d5d23e18c14116a003adf8a23f53b30a4f3d78eb2fccb12","ssdeep":"384:+886tlDasjRBrvoBFlrCcsKr+A8GPkuqsL4WQb230KANpkgWScL1p2wRq:ZbbpKHxqsL47230KANXcL6wRq","tlshash":"6b52d98de0a760123e8c87e5d0f31657638ce051c6255cf0b06d816b77a7aa782f7a77","first_seen":"2026-08-10T18:28:18.384019Z","last_seen":"2026-08-10T18:48:38.785869Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/abis-fDvBU7Ib.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.911Z","timestamp":1786387664911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/abis-fDvBU7Ib.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 989\r\ncf-ray: a2750d31de320388-VIE\r\ncf-cache-status: HIT\r\nage: 138\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: detpTGPkFl:4592,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4983,"size_decoded":1831,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (4941)","md5":"d54d87c6ca6f8b30570588a3f1b1ecba","sha1":"5f5d1ada33f3a111320d5236d407c3a62f61ac6c","sha256":"9dbf9faf0370c7b43eacf0b4a9b89aad6bff983ba2074098dfaea3967ed70f44","sha512":"ae3fcfab837c20c2f97a63d9eb903345000bb003bf8400cfdf195eab8a6e6486d41e8e7737ceef15bbfb52462be9db7b70fe6c0fb7eeee74e137f7e4b4389bc1","ssdeep":"96:GBnoHDPe8nMFMjN6pU0EdV2SqKluAR9y9RbmbY:Gue8MFMjfY","tlshash":"b3a12a89c81470c71d3124e5d4d32e19d05ee3a3dce5d903f399a8b62be961e9a2cf4b","first_seen":"2026-08-10T18:28:17.726213Z","last_seen":"2026-08-10T18:48:38.786529Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/AcceptedPaymentMethods-B6xTuugc.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.942Z","timestamp":1786387664942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/AcceptedPaymentMethods-B6xTuugc.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1780\r\ncf-ray: a28f86355b89dca4-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:2456,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6533,"size_decoded":2624,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (6473)","md5":"fc125b3471d8cef83fa769623cb49e2a","sha1":"e5398928cfd46a769178192fe81a3897657d35eb","sha256":"cbfe2f71c7a876ada6871b7c67b18612e25a729a48691ce3436d7aa8c23bd126","sha512":"393ce7d9f65db5722b60028cb3212e078697df294a047ce523c63511cf1b6657eaa48f756f2d73bde384abe4ee294ee3c189e3415d01a3cf67eb1c652b9b04da","ssdeep":"96:TqtWMJfAbfRXKHJtQf9k+Gh4dSW8QYTCx6AcP1zqAQ16fWBxdRu:WtWIfaKHJtCZK","tlshash":"25d1721e11c4358ca0418caed623242fba1af39e1f5b0d44cad1b858abd46ab7b11f6c","first_seen":"2026-08-10T18:28:17.837568Z","last_seen":"2026-08-10T18:48:38.787473Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/PageContainer-C9Sx0q1c.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.196Z","timestamp":1786387668196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/PageContainer-C9Sx0q1c.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/PageContainer-C9Sx0q1c.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/landmark-D5kQJgru.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.615Z","timestamp":1786387668615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/landmark-D5kQJgru.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 399\r\ncf-ray: a28f2d225e7ddbea-FRA\r\ncf-cache-status: HIT\r\nage: 6394\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:1323,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":661,"size_decoded":1245,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (615)","md5":"f7104051029f8dec6232ab2461cfba6a","sha1":"7fc06e0bac23132615e53480c9901664c433ba75","sha256":"ba3fcbe2defada50a65e7a6699556332d69bc5d2d48067c1b468508df6525322","sha512":"7dff5afd597ad4ff4ea0ba21397cfd1434def89e43ea9f1f1c8a5d6a89905a1197a3704da2e5cfb7584a0f42551cc61e00df21c22e385506b4148afff7d7ceec","ssdeep":"","tlshash":"220176acce942dbff4220988ba22994fff6783979f076404b99c64a092415c08335fc5","first_seen":"2026-08-10T18:28:17.936179Z","last_seen":"2026-08-10T18:48:38.788168Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Switch-DeGAUvCb.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:50.244Z","timestamp":1786387670244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Switch-DeGAUvCb.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 574\r\ncf-ray: a28f2d262f49db07-FRA\r\ncf-cache-status: HIT\r\nage: 2783197\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 05:33:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nserver-timing: ttfb;dur=2.353038, ttfb-cpu;dur=0.991\r\nx-cfw: ikYHbMnBIW:800,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1717,"size_decoded":1466,"mime_type":"text/css","magic":"ASCII text, with very long lines (1716)","md5":"6669f08c173d6cb543068d42d4ac1fe3","sha1":"68c9b56731c7c8acb13838e9e0ea13a82de79c06","sha256":"7f2e75f8d903fad973429b8ae073588714ff3b110861720ac792d502775c5d52","sha512":"534b228a2a6cefd41f14c24c164de36c0169df127a1d97bc3ec2002af638cbe2e60161f346904b4ba7755eff30ff7ae886f8ce31856d67f9a1ef09e227bf6b27","ssdeep":"","tlshash":"4c31535501d8e53ddc13971b07cc698b4224813accfe4aea7e863809c6f6afb0e3b581","first_seen":"2026-04-30T03:12:06.123117Z","last_seen":"2026-08-10T18:48:38.788732Z","times_seen":13,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/website-D58EQLmP.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.710Z","timestamp":1786387664710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/website-D58EQLmP.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 8987\r\ncf-ray: a28fa6231e547e47-AMS\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: it\r\nlast-modified: Mon, 10 Aug 2026 14:18:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: SOkdGMPUOQ:319,t24\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48408,"size_decoded":9820,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (40851)","md5":"0fc13d1d742352269a8a4ddb62fdcdc3","sha1":"0486a06a327568d48e077a813a91c3176b3e5439","sha256":"7291212b24ec1d1245420bea8eadd3d188f841bcc6b5e15c8a05a202ff56771f","sha512":"3704a384f618bdba4deb41327d1904b984dde6afbe98e024d2454a6faefb78505f4f17a1ddf3af91f5ff174b85ddea0c3ffca0f0981ca6557beb45b25152a0a9","ssdeep":"768:EdDUAWga+kND9lRD0JAsbNvQN02jLTDPJAJZ+RacOhhzBLywz:pAWr+kND9lRD0JAoNvQN02jvbJAJZ+RK","tlshash":"7623dc030f8407ac63e90fd9a766241d02f1da4d621ac03ffb9279e9653dbe551b1bb2","first_seen":"2026-08-10T18:28:17.809576Z","last_seen":"2026-08-10T18:48:38.789376Z","times_seen":2,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/RoobertUprightsVF-Rw1l4Sqq.woff2","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.425Z","timestamp":1786387665425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/RoobertUprightsVF-Rw1l4Sqq.woff2 HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cdn.biterfz.com/assets/URLStructureRouter-UQLD4QC1.css\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 115140\r\ncf-ray: a28f93ed9e9ddbdb-FRA\r\ncf-cache-status: HIT\r\nage: 2958557\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 06:58:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:3150,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115140,"size_decoded":115985,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 115140, version 1.0","md5":"3ba27eb7e977e21166219783f10c5c91","sha1":"4da9af3d90a4afdfe24ef51616e542c98e4a1750","sha256":"fa9d7f2ad2b2149d3ae0a4e219fd450877954d4fd0bb139e830a4e262d9de023","sha512":"5e1b1a18613fc55b6dc1c18c48489f7a4012b91a6a9ce0260ff982d600ce8a30ee6f99471bab61fdf52b9fdd81396f1ba5e0ea4c3cacf2486d1e4d6d59c5ecf2","ssdeep":"3072:UlpsRgwMdFUWXcTXWNcTID92f9qLmjZvw0p1MpF9Ja/:0sRghdZ2TIDA0mBZ1qF9Ja/","tlshash":"fbb312029e3c85aabed117502866de4eb399486fcedb26d41cd878a1f170ced40f51bd","first_seen":"2026-01-08T23:49:37.139966Z","last_seen":"2026-08-10T18:48:38.790021Z","times_seen":21,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/PageContainer-C9Sx0q1c.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.325Z","timestamp":1786387668325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/PageContainer-C9Sx0q1c.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 300\r\ncf-ray: a28f34056d57360c-FRA\r\ncf-cache-status: HIT\r\nage: 2724388\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 14:58:39 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NUSuistqZq:3,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":698,"size_decoded":1139,"mime_type":"text/css","magic":"ASCII text, with very long lines (697)","md5":"193be1f3fffb8eafad4fb312d43ff444","sha1":"44d748cc6a48ac59741382f22f06466be0e25839","sha256":"e6ea861134697a89b998a390b58dba4c51fae0eeabf729a292ebdb4b9599e075","sha512":"6ccfb74629c76d7bb2c1f6af9a9c2c2683f6150e2b89405594838cc56469df9b6873583d4f85579ec05424aa008c122d3dc873afe2f8a6c9c76f88c223227dc7","ssdeep":"","tlshash":"bd01f788bb14f679dd0fc298a99a59ad52487315fb4a15e5f620532881c83e1d43e8a8","first_seen":"2026-05-31T11:11:55.613389Z","last_seen":"2026-08-10T18:48:38.791177Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/landing-hero-footer-BisnBQzS.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.373Z","timestamp":1786387668373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/landing-hero-footer-BisnBQzS.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 516\r\ncf-ray: a28f3405fe735d94-FRA\r\ncf-cache-status: HIT\r\nage: 2801922\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 08 Jul 2026 13:10:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50077,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1570,"size_decoded":1357,"mime_type":"text/css","magic":"ASCII text, with very long lines (1569)","md5":"e9e348c9421328c0cd257ea6dc3a6e71","sha1":"33ec665924a920a07d36d62214a8c0fe06811d2e","sha256":"cba379002edc4111a102552638ccc4dcb2638ce2467f88db905ecb59e0a255f0","sha512":"3fd291f0e7fd14680eac67bcad8d7ac76b4eb88dc9acf84b7f75536111ae19af08e8fbc4345979fc4a3f58f2bd60b384938c047170eb813a399cf12aa0be7f69","ssdeep":"","tlshash":"cf3120f122828a3c2c37d63106ded10972983014fe0b2fa7acb56399aec93412423085","first_seen":"2026-05-10T06:59:24.776563Z","last_seen":"2026-08-10T18:48:38.791901Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/trustpilot-C_-lMdc3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.721Z","timestamp":1786387668721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/trustpilot-C_-lMdc3.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/TrustpilotWidget-fscOIxCD.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4094\r\ncf-ray: a28f2d1f4ffa248e-CDG\r\ncf-cache-status: HIT\r\nage: 6398\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: oLTMcizddB:259,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10124,"size_decoded":4937,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (10076)","md5":"aeda2563a81cecdf05335b105ba5bb90","sha1":"5415c59da1a74d8b1d1298578ae4ba3c0b1e757e","sha256":"5b834887e93cfb2f75e275346b90cdc7b47ebe09c53ebd0dd6a8c4a10252f7d2","sha512":"658fd0665a7366bc2090ce2214a4a8fb85a14b2eceeb5f621b500c7fa9d9efe591c5ea150547b741c9ee05c573357e82b28a5ff18a8a0f0d660968229f5da68e","ssdeep":"192:++xvmnELjM7PN/EE+sq9kqPKtKeXFkw3Wv/hfbLlt0FDT:TxvmnEvMLSE2kqPkpkfnqF","tlshash":"3e22c7df8b304cc85dc80bd6bf56486cbe8f61ba8d76491cf0885af41141cacd64aec6","first_seen":"2026-08-10T18:28:18.329043Z","last_seen":"2026-08-10T18:48:38.792633Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Counter-DFNSvKxZ.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.695Z","timestamp":1786387669695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Counter-DFNSvKxZ.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Counter-DFNSvKxZ.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/website-D58EQLmP.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.605Z","timestamp":1786387664605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/website-D58EQLmP.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 8987\r\ncf-ray: a28fa6231e547e47-AMS\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: it\r\nlast-modified: Mon, 10 Aug 2026 14:18:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: SOkdGMPUOQ:319,t24\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48408,"size_decoded":9820,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (40851)","md5":"0fc13d1d742352269a8a4ddb62fdcdc3","sha1":"0486a06a327568d48e077a813a91c3176b3e5439","sha256":"7291212b24ec1d1245420bea8eadd3d188f841bcc6b5e15c8a05a202ff56771f","sha512":"3704a384f618bdba4deb41327d1904b984dde6afbe98e024d2454a6faefb78505f4f17a1ddf3af91f5ff174b85ddea0c3ffca0f0981ca6557beb45b25152a0a9","ssdeep":"768:EdDUAWga+kND9lRD0JAsbNvQN02jLTDPJAJZ+RacOhhzBLywz:pAWr+kND9lRD0JAoNvQN02jvbJAJZ+RK","tlshash":"7623dc030f8407ac63e90fd9a766241d02f1da4d621ac03ffb9279e9653dbe551b1bb2","first_seen":"2026-08-10T18:28:17.809576Z","last_seen":"2026-08-10T18:48:38.789376Z","times_seen":2,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":2,"connect":34,"send":0,"wait":95,"receive":57,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Spinner-DtVXxDc6.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.636Z","timestamp":1786387664636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Spinner-DtVXxDc6.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 463\r\ncf-ray: a28f34054b329b98-FRA\r\ncf-cache-status: HIT\r\nage: 5101600\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: ko\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:9283,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1461,"size_decoded":1302,"mime_type":"text/css","magic":"ASCII text, with very long lines (1460)","md5":"ed7eea1c7889ba338f0d86a547f4544c","sha1":"96e4cfc3e46a6f65f9a8db1c4d35e8a370b9991b","sha256":"d9d8224bc06681460d1a432c2bdf313c196702628e97b7d338bf0372cdd3e79a","sha512":"edc1aa034ef5fc6b1696e4f2d9d977bb0cd9deca586f59e96764064ad06c1ee5ed09792ce36b950a0e26aff6c3343dca5c715033177e0febc6c6ec1101ff8163","ssdeep":"","tlshash":"2931d0f8c94069255a231b3312cacc549c70cd43a9320cbdb278356f41a97452377b2f","first_seen":"2026-04-30T03:12:06.027267Z","last_seen":"2026-08-10T18:48:38.39655Z","times_seen":14,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/isAddress-CgqOLFlT.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.931Z","timestamp":1786387664931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/isAddress-CgqOLFlT.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3051\r\ncf-ray: a2750d2f2a57dcda-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lyytAWfgNq:201,t28\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8362,"size_decoded":3884,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7487)","md5":"fb88c1d2176aec44cb7b8b939336a43e","sha1":"964a66d02199ec8905dbcc1706a6c365bf11c804","sha256":"90aa6c5b6b81fe566d5e8f140b5f6bb9349e7b678fe4e9462c1adc3b7a1e6171","sha512":"d563205078dc371ed9eea68d9804200c77ef97ef8aad9e1199575ac147c625ac2ab9b909414f9004f8915d649d67b07926809b3d7d3ef76f710d88ccd2f7c292","ssdeep":"192:ZRNoDv3/rA/QDu4pSCfW6NG7SsEPMsSqSSQjJyQdFkR4R2:HYvvrkQDuVCfWeGOTPMFq/5QdF64R2","tlshash":"8302cad77b40b1b2afbe4553d01a1640f13894f4845da46cb2a8a8b236e54b847faf34","first_seen":"2026-08-10T18:28:18.148289Z","last_seen":"2026-08-10T18:48:38.793725Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Command-q5BsoKZZ.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.327Z","timestamp":1786387668327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Command-q5BsoKZZ.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 601\r\ncf-ray: a28f34059f9b248e-CDG\r\ncf-cache-status: HIT\r\nage: 1176004\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 27 Jul 2026 17:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: oLTMcizddB:423,t4\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1646,"size_decoded":1439,"mime_type":"text/css","magic":"ASCII text, with very long lines (1645)","md5":"a5d251fcc0bc151769cee5ae6713982f","sha1":"666761a7b118f516962776ce70d85f54c5ee2fb7","sha256":"19719672f3514807e8c8201138ac64a98f5a909439c2269cffa421f6958decc5","sha512":"4be633e1e5a96770128ee1afd09069377f5e538bf7292691a46274734cb524dd87b23f68b2f3a68092c12d217b4e24098e8baa1f40e4274f5b084c3f5315ddfd","ssdeep":"","tlshash":"d331efa99790f63cac3be2315bdcb2ae6200d6559d6246ebe550b12943c7ff20e31494","first_seen":"2026-05-31T11:11:55.674574Z","last_seen":"2026-08-10T18:48:38.480836Z","times_seen":7,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Badge-1_WZ-wEr.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.369Z","timestamp":1786387668369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Badge-1_WZ-wEr.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 462\r\ncf-ray: a28f3405bd3999ed-CDG\r\ncf-cache-status: HIT\r\nage: 983876\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: BcQSMchFFj:37667,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1657,"size_decoded":1301,"mime_type":"text/css","magic":"ASCII text, with very long lines (1656)","md5":"30556f2f344e989f825c71b04dc38155","sha1":"36a80e6595bc5f154e0e563f6ecde35df56eae62","sha256":"d972f65cd7e7b313a6084170719673a56cf2f65ccaf1c5ccd3c5e6a8969c806b","sha512":"0531322766003fbd9bfb57eb6dea781986901b173270adc25e0410f87d99d0e6ba19244904aa7731f9adfcec5b91d0ada61a8840177e49997141e583b63f3233","ssdeep":"","tlshash":"3f31795dbbe0f53cb817973996c8959d5605e843cf110fe9f606e3b0c1c2ef22152601","first_seen":"2026-05-10T06:59:24.564418Z","last_seen":"2026-08-10T18:48:38.600683Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Faq-By_4Sa_k.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.595Z","timestamp":1786387668595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Faq-By_4Sa_k.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 793\r\ncf-ray: a28f8669bbb0dcb5-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:2463,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2094,"size_decoded":1660,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2053)","md5":"eed87b293b7607e901ae7f929fb882aa","sha1":"7ea10fdfab52ccb216cb33a551563da7ee3d1e4d","sha256":"4360be6b1c111e224fdfe9b6e3be67c42507b9d11a98f88b2cfac2498bb54ddb","sha512":"e1dce39077a42975138abffc1d1f7fad2c627d39682f48a60f0d7ba013a3dea7be9488de4631e2f321950e8b639b6c3f25f5e0b5f290472cd9d237728f35b765","ssdeep":"","tlshash":"6641020780906ea4790b9ca88069821ef93fd11cdb4e14e4658b517c1b41aeb323ffc7","first_seen":"2026-08-10T18:28:17.806471Z","last_seen":"2026-08-10T18:48:38.794994Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/TrustpilotWidget-fscOIxCD.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.611Z","timestamp":1786387668611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/TrustpilotWidget-fscOIxCD.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 806\r\ncf-ray: a28f8669dc00a93b-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:10088,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2442,"size_decoded":1649,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2388)","md5":"63e6b394ff92a8de200e48aef1be7973","sha1":"a7e7bf1c266353f368ac1bfd003685f2dda01cab","sha256":"b7b7bd2b37860be2dc50ed49eeca3e759a3d2853d8a9c06ea85bb4fc459ea93e","sha512":"460f0dd5d6ee0aeb853632fd424e63b2f3e189d3205612755ed0bced90e63e6b0aa113080c2117af2e95e92000160baeea2ed2d2267aa528e7012783abbc1b0e","ssdeep":"","tlshash":"68514387908db4fe99071b788017811d763bc048cf2f49b5b96724241401fd6b67bfc9","first_seen":"2026-08-10T18:28:18.325574Z","last_seen":"2026-08-10T18:48:38.7958Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingFooter--k-TzgBV.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.939Z","timestamp":1786387664939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingFooter--k-TzgBV.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7439\r\ncf-ray: a28f863518784b37-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: dLVCuztXcx:933,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21930,"size_decoded":8306,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (20622)","md5":"f54f79d88b3d7c7f104e3f624409bb04","sha1":"610fe0ff2e40502186331e860df0747cb3a1e5e4","sha256":"4efc0bc029c100c6905cfacc933b7c4d1e7fb6ce925cfdcfcee06c38c9d12a67","sha512":"921e08ab095f9823c220bf5b367bdcbbf92ee5e231a15e80641d95cc99b9e22e84a84f2680e3cd41b82546f68ef9dce442b98f80e6c0a139fc12d7b1525f59f6","ssdeep":"192:EdLsmGkCxYnmST+PDpX9wJbW3BDQtp+xSisskNc3B6Zsa42hL5JkO8RziMQqE3yt:EdLs06tt4WBDa+xSNDszpWMjIyt","tlshash":"e9a2da1fb5541bfcf4ca0ee9906b911d772f91589a8d84a8bf19243022c69dcf11bfd2","first_seen":"2026-08-10T18:28:17.782151Z","last_seen":"2026-08-10T18:48:38.796717Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/SupportedCountriesModal-DCJdmF7S.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.189Z","timestamp":1786387668189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SupportedCountriesModal-DCJdmF7S.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/SupportedCountriesModal-DCJdmF7S.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/datetime-Bya9A8jG.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.581Z","timestamp":1786387668581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/datetime-Bya9A8jG.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 679\r\ncf-ray: a28f86698f72f4e5-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:64,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1698,"size_decoded":1520,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1652)","md5":"9c597ff61a3559831ab1337286bb5b33","sha1":"bb31f33df76271fc1044f369f63c35692fd08384","sha256":"c83b4785c69a7ba1ea7287710fc57a4d1fd6264e7cc3f582fe0ad87f8f64b8de","sha512":"096a8e4aefaf74724ac8b34663cdb058cd88ce506320945a1793ca01614f2fac8d3d25d7176e2495ccadf5caaa0b7c98b28570726e7b62a2266034532e76f513","ssdeep":"","tlshash":"2331f0cb32cdf1195b262779c1ef851ae75999e504890768d047b1a13d2483c83bbfee","first_seen":"2026-08-10T18:28:18.050717Z","last_seen":"2026-08-10T18:48:38.797748Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SkipNavContent-DogOaaDH.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.909Z","timestamp":1786387668909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SkipNavContent-DogOaaDH.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 320\r\ncf-ray: a28f3405ad96360c-FRA\r\ncf-cache-status: HIT\r\nage: 5101600\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: ko\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NUSuistqZq:4,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":667,"size_decoded":1158,"mime_type":"text/css","magic":"ASCII text, with very long lines (666)","md5":"53626f6f30d95ea08969a3f3acb1718d","sha1":"f4fbf2b94ef3ddab7cb16a23922dc4282a4eaa35","sha256":"600a21001830b485ef20b6f56306597d6efad9dfd25c7a560a16d2c8fe24e708","sha512":"4cd8444e405650b8232ba452e1cce7ceecf658d51771019a3c5f477eda5c15bf248823b348f12466dda7e146afc5b5ce53c182b4fd044e6f2cff9e799e28fa3d","ssdeep":"","tlshash":"c6019e810202973ecc2b942817f7814e72dcfa05dbcf30f75d52a2128adea425937847","first_seen":"2026-05-31T11:11:55.660565Z","last_seen":"2026-08-10T18:48:38.798733Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/new-to-crypto-BpFQOjmv.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.674Z","timestamp":1786387664674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/new-to-crypto-BpFQOjmv.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 370\r\ncf-ray: a28f3405fbfa4d7c-FRA\r\ncf-cache-status: HIT\r\nage: 1121066\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Tue, 28 Jul 2026 11:54:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50076,t22\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1108,"size_decoded":1211,"mime_type":"text/css","magic":"ASCII text, with very long lines (1107)","md5":"d79881cf725e92d804ed69a0c6c40366","sha1":"216937c46ebbbf5fbc54bd7a8d2a9f8f1016d3f5","sha256":"216b5e4a5a98848ec90257d1d1e7b92693585f20ed44fc81c9fbbc945327f050","sha512":"49ebe1b2f8a39c3fffd3b9d6d5d338016cc6e334feaff65cf8aa7d73ed4a567510b876f6552f6d029f570a39b9323a42decfe937ef631af07a71f4b9c5b53a90","ssdeep":"","tlshash":"11118e95447ab3bc312fe020a1e1b28c21258401cb4b3ee5b257f559e5e93c5367ed5a","first_seen":"2026-05-10T06:59:24.39877Z","last_seen":"2026-08-10T18:48:38.778484Z","times_seen":9,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ProductTag-CTbPgjx_.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.675Z","timestamp":1786387664675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ProductTag-CTbPgjx_.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 180\r\ncf-ray: a28f3405c8fb9a0e-AMS\r\ncf-cache-status: HIT\r\nage: 983876\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: BjSokvcnAX:11,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257,"size_decoded":1018,"mime_type":"text/css","magic":"ASCII text","md5":"4bcd1ab922c9a5da3deb8463a9e4d4d7","sha1":"5e9104f3a63a04318ae60e043cfee6f2d7564c44","sha256":"39af1c2b53eca7fb284c92a5b65aa357eb0e67f00458b44a691caf715e25d39d","sha512":"dcf27c143dddb7dc4974fa5704cf33997ebc28b65cd986f8d2d5902b92429122df7d11da3cab935e3de87ae3825ca5683da7b4819ae528e375b2779bd85e462b","ssdeep":"","tlshash":"7ed05e44a730803d987d6662969ca8cefe41d3c8698bc8f5ea90731493812d2a5d65d9","first_seen":"2026-05-31T11:11:55.793013Z","last_seen":"2026-08-10T18:48:38.347413Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/base-BSiJIwdG.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.834Z","timestamp":1786387664834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/base-BSiJIwdG.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 380\r\ncf-ray: a2750d2dfc890054-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: YmdVlemlyZ:17,t22\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":615,"size_decoded":1213,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (573)","md5":"6c5405c68f0508f83b2999c4c5f0e99b","sha1":"322eb6595ffcce28fe395bbca525bfe7977db682","sha256":"b0fb2390eb16752dddf2510424e6760ac04f34eed6cccc8273c51b77b9a5713a","sha512":"26851bf2b1d7d77445f03ccefa427e04e7215d2647f0ebd22b8bfda0a6f522fb1fd7dd54f08b54aa04ff246c77a6505744592431164bee0aca0fcde60cee8cc7","ssdeep":"","tlshash":"b4f081ad408fcac97d388b3b5652349cc20076ffbf48684bf2413454abe415a6794eb8","first_seen":"2026-08-10T18:28:17.858891Z","last_seen":"2026-08-10T18:48:38.799558Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/PageContainer-B60QppIv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.850Z","timestamp":1786387664850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/PageContainer-B60QppIv.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 349\r\ncf-ray: a28e93d0f9123a52-FRA\r\ncf-cache-status: HIT\r\nage: 141\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:22579,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":532,"size_decoded":1219,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (481)","md5":"195e86890491bd5c8738fb77d6404dc3","sha1":"92af9b1b6959fe7e0bb533a8fa0e7dcfb0541216","sha256":"1e5c9f97babb9457dea55542c49c6587e9b5bc63302128484d4ec25c3dcbfe8e","sha512":"ceb0ce088717127bca213845523ce0800ca6cb3894ddcde2376006bfab32e09f5d68b986316d1a0cbd703feb5dbda15c8318a113d52b9541537ee720560f4a41","ssdeep":"","tlshash":"d2f08b5dff131676e45bccdd800d00f76a22b2579b060942e024c07596621a0a621e8a","first_seen":"2026-08-10T18:28:17.951495Z","last_seen":"2026-08-10T18:48:38.8006Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/parseISO-BSKXNGMC.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.906Z","timestamp":1786387664906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/parseISO-BSKXNGMC.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1179\r\ncf-ray: a28f8634ede5e7ba-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:264,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2703,"size_decoded":2022,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2657)","md5":"21aba8736106215c8a049a0e0e38c5c9","sha1":"377107a56f7ed97b5c0259c73c55ab30aab6be10","sha256":"6b15b2e11a80dcd6c23dd77d8da8bae539bc6043d308ee3670ec78cb3f2b86e9","sha512":"f9e2f6031d56dd79cbad5a2ee78a334def7398bdfaae37f594d5f0d1ad0fe0bc86b06b279276fce4606564118b1bf83d0e28d79a34406169bedc47b765088d3e","ssdeep":"","tlshash":"5a5151da30b2f411a35a25a080af8005f77fcdf98cdd4578e159ea867c25419ea79f33","first_seen":"2026-08-10T18:28:17.901852Z","last_seen":"2026-08-10T18:48:38.801551Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dot-prop-C58NUlnW.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.940Z","timestamp":1786387664940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dot-prop-C58NUlnW.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 576\r\ncf-ray: a28e948b2e613616-FRA\r\ncf-cache-status: HIT\r\nage: 152\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47392,t16\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1239,"size_decoded":1444,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1193)","md5":"046adf125d64f186842ca1751a8782f9","sha1":"135d15d2249643a0e020917771b8b4364e3a146d","sha256":"e5ca3eb3e57fed89dfce438f3395ef57e52e23c76887b35a75facd9191d1c016","sha512":"a6a6b8fda2c27bc685c9dc6107c114b2c500f0b8bde1825fe9a55aba3102ae25f79c8bafeabefb075182128dbb37899ac7709c715b9581c208f135101c8706f1","ssdeep":"","tlshash":"9a21dde2b3eb783f869d4e560065d405f1396da09d1e6928d292e0631e73f6390e9f18","first_seen":"2026-08-10T18:28:18.060694Z","last_seen":"2026-08-10T18:48:38.80267Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/FormControlWrapper-BVV8wBEt.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.653Z","timestamp":1786387664653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/FormControlWrapper-BVV8wBEt.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 546\r\ncf-ray: a28f3405fce6368b-FRA\r\ncf-cache-status: HIT\r\nage: 3310202\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Thu, 02 Jul 2026 14:35:26 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47874,t17\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1747,"size_decoded":1387,"mime_type":"text/css","magic":"ASCII text, with very long lines (1746)","md5":"a5e27355f2ca7a89375564cafb8ed2c6","sha1":"6203dca81573ceaec8838d4fc2b98244108f1cc8","sha256":"01cf831179d5d6949731b5ee854218a665b66dd1d51b76917f6ddb0d23c5e67e","sha512":"9c962c9a8af8c0cc4aef394cf4e07a8941e1d0e3de2d50480f661a6e05a6331c409e221d2185d16e1af395a9f04042738226647143ecdb9eeac3011ff70f8c77","ssdeep":"","tlshash":"2231224fb260c63df93ba66a07dad26b02091926e74206d7f807b02187c73f24633685","first_seen":"2026-05-31T11:11:56.075405Z","last_seen":"2026-08-10T18:48:38.80405Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-DmJ8RDku.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.798Z","timestamp":1786387664798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-DmJ8RDku.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 629\r\ncf-ray: a28e938fbf913608-FRA\r\ncf-cache-status: HIT\r\nage: 131\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jdmkUBpFoT:6,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1204,"size_decoded":1492,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1162)","md5":"97c7ea37b93623e110225c3ba1a21927","sha1":"6ab40c6e14a2d153919f4c85e508fe7a92e2540d","sha256":"94425d5773b515cae386dee7084f3bf4ff55d22c8e298e5245ece72ef0fb8e2a","sha512":"05f3f96d23dd9de668ac3e237b49d1d1bc10091de83f9d74327315ff61beb99997e01f130d5217babcc8dea36e821b44691af8ab542a5bff5606495cf0c86091","ssdeep":"","tlshash":"532174c8b0f43c34d7ce4459d1af407a3731ba89994a464621372c56bbb046490b7f9a","first_seen":"2026-08-10T18:28:18.368508Z","last_seen":"2026-08-10T18:48:38.805081Z","times_seen":2,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/chevron-right-B5y89ei9.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.837Z","timestamp":1786387664837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/chevron-right-B5y89ei9.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 329\r\ncf-ray: a28e938ff84be537-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: HcKxlISubs:2243,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":443,"size_decoded":1197,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (392)","md5":"c7bc168d7f98baace47d71349ff3db5e","sha1":"9c27ba9e7e43ab4f72692eb3891c0c2b98a9335f","sha256":"9a107b906a3ff986cb81c99867dbea63ff0301f8ecd4309583da31bd80d25273","sha512":"a6e8191a20757ef50414e404281474fbf89f6d1b1ed57c54f5224d0a22e6b95440e27b084a4bd07ea27bfc0eaaf12e0a39cc55e9a67bdbdcc17c8a266dc2d1ab","ssdeep":"","tlshash":"51f05c5eeeb41c3ca01e4c9eaa79b54ff9a592a1af462518b29c107443005c05339fc1","first_seen":"2026-08-10T18:28:17.813662Z","last_seen":"2026-08-10T18:48:38.806077Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LiveDataSubscription-BNiK7lJp.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.914Z","timestamp":1786387664914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LiveDataSubscription-BNiK7lJp.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1703\r\ncf-ray: a28e938f3f3414c6-CDG\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:13:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tNeegAMkVR:74,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5044,"size_decoded":2568,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4986)","md5":"b50100a701aac880086fb4438210af31","sha1":"2107f8d618020a0e56474262cd87818a375fcffe","sha256":"30a36cb8b9c05f843fc1baae0c62bf458b0ef93650b49e75f366c11c014136f7","sha512":"ff2e78163421f6932f5521d59ea9d324c5a0ad33fcc9b6e3ade90efadb0aaef38acbceb4ab885307a91033f37253181d61696a692be383e904a88ccdf9a9469f","ssdeep":"96:QUZRikM9RMhhJAPZ+dijMTvTSUgWIHOjUjsmx1VYepQYpUZrqTvfaTi:xzI1+dija7SbWRjUjsm3ieyYpUZrsci","tlshash":"0ba194c9e59424226bc2b9a408b60e0b023c6b960557901cf67ecff67e25384b17bdf2","first_seen":"2026-08-10T18:28:18.038041Z","last_seen":"2026-08-10T18:48:38.807116Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Roobert-Heavy-CfPMTfIh.woff2","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.431Z","timestamp":1786387665431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Roobert-Heavy-CfPMTfIh.woff2 HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cdn.biterfz.com/assets/URLStructureRouter-UQLD4QC1.css\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77420\r\ncf-ray: a28f93edac8b973d-FRA\r\ncf-cache-status: HIT\r\nage: 2878811\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 10:36:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zqyodxIUSG:417,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77420,"size_decoded":78263,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 77420, version 1.0","md5":"a630bdbbb5556ca01733abcc9f4128e7","sha1":"2191e6d2e9b7322929452cb4e26ff29cfeb59760","sha256":"7af2c31ea55b021588dc85b0d8f0113d0c84ce5edabb931e12cedd4bce6418d1","sha512":"09e787c87077ef20583f9d77e8b42d9f9479e2e048fa00eaca87c1feee4c8c49e62166278e06f30a38855d557da6053b4503b9425a0956e51a968e584293edd3","ssdeep":"1536:vQ4j51oTZ/YpdM+NGp4+h744Ejb0w0plrrMlcPlZgQPZU61E5z3CsVb4uAHWt:vj1oTZ/Ypa+NGKNRjbp0rztNE57V4uAk","tlshash":"c4731279220c06318c8858e170ebca7de0f3d9a9eade8f0a458f4e59c750add117d4b9","first_seen":"2025-07-23T21:46:04.765335Z","last_seen":"2026-08-10T18:48:38.80799Z","times_seen":13,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/json-ld-DgyWTjJP.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.527Z","timestamp":1786387668527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/json-ld-DgyWTjJP.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/landing-EzeWBxTg.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1912\r\ncf-ray: a28f86696eba4d7a-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:51739,t15\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4815,"size_decoded":2781,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4770)","md5":"6bc3523265d9ab768acfd94991aae4e9","sha1":"08924a72367ce050471b49cf2d06d14b1c652caf","sha256":"84e647fd5f5327a0ecf4a9880b9eb10a5a0807dc007a4f75acabdceeb9f57a01","sha512":"57341fa507e96513cf6bff7dd5b55a1cd4927bb875f7296b2852d769f673cd22a6ef70b046943ddf4fe869244e3cddb7049457084b354f04c55f308567ba3007","ssdeep":"96:23z/jmcPPNQVLcZuhxiR3gffEKN3CsuUAqi4vBmf:Uz/FPFQVLcZWxO3gffEg3CBJqi4Js","tlshash":"a9a11ad7a054f2ed275755f0f0f2220ea237e214dc3a04d8f707e37a22a32a91626f18","first_seen":"2026-08-10T18:28:18.170195Z","last_seen":"2026-08-10T18:48:38.809054Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/no/en/","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bitraflll.com/","date":"2026-08-10T18:47:43.989Z","timestamp":1786387663989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /no/en/ HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitraflll.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 72846\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2912bb46f2d8824-PRG\r\ncontent-language: en\r\ncross-origin-opener-policy: same-origin-allow-popups;report-to=\"default\"\r\nlink: \u003chttps://cdn.biterfz.com\u003e; rel=preconnect, \u003chttps://cdn.biterfz.com/assets/polyfills-CZmxIG97.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://cdn.biterfz.com/assets/website-D58EQLmP.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://cdn.biterfz.com/assets/url-Caz6rh2n.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://cdn.biterfz.com/assets/api-client-BCvJLI2Y.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://cdn.biterfz.com/assets/Text-fkry7N_q.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://cdn.biterfz.com/assets/parse-DAKSBcq5.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://cdn.biterfz.com/assets/URLStructureRouter-B1PtNMUc.js\u003e; rel=preload; as=script; crossorigin=anonymous\r\nnel: {\"report_to\":\"default\",\"max_age\":86400,\"failure_fraction\":0.1}\r\npermissions-policy-report-only: camera=(self), microphone=(self), clipboard-write=(self), clipboard-read=(self), publickey-credentials-get=(self), publickey-credentials-create=(self), payment=(self), web-share=(self), browsing-topics=(), attribution-reporting=(), join-ad-interest-group=(), run-ad-auction=(), sync-xhr=(), document-domain=();report-to=default\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nreport-to: {\"group\":\"default\",\"max_age\":86400,\"endpoints\":[{\"url\":\"/reporting-endpoint?version=0\"}]}\r\nreporting-endpoints: default=\"/reporting-endpoint?version=0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Language, User-Agent, DPR, Viewport-Width, Width\r\nx-cfw: mMamnrwzVJ:50,t115\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: br\r\naccept-ch: ECT, DPR, Viewport-Width, Width, Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Mobile\r\ncritical-ch: DPR, Viewport-Width\r\nset-cookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; Path=/; Max-Age=604800; HttpOnly; Secure; SameSite=None; Partitioned\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":482544,"size_decoded":75269,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (38609)","md5":"a5ad9612654d35741e7530a535bd676e","sha1":"7992d8d0c02ee38690281e7b78e80e5e8a26a21b","sha256":"08292bd69e1aba4d1b24fdcf68f853f99113d1c9f05671f35a6bed43cb4b53a1","sha512":"32f3b0d8c5b937d25c020d91779eaf4b9ac2531765af1f68c9bb65db71e3c51f6f0e62bc7b93b4f58a107618e9903f4a20398348a4d84f99f654f6a392bb1d94","ssdeep":"12288:7VZIKwI0mNxmXVmcIGbBceguWnIwpljoHVkzeteI7UIS7KwISKwIR:7VZIKwI0mNxmX4bGbBzguWnIwpRoHOzy","tlshash":"27a45c5c94a6283ee77302e579b27f193dbd1177c2118888f0bc1fa562fad271d1286b","first_seen":"2026-08-10T18:48:38.809993Z","last_seen":"2026-08-10T18:48:38.809993Z","times_seen":1,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/translations-ns/website.en.ad070adb46c8c6a258b737acec38cd22.json","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.754Z","timestamp":1786387665754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /translations-ns/website.en.ad070adb46c8c6a258b737acec38cd22.json HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 104698\r\nage: 360453\r\ncf-cache-status: HIT\r\ncf-ray: a2912bcbec9c8824-PRG\r\ncontent-language: en\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-cfw: qwTCmTVwEC:40,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":418126,"size_decoded":105388,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f92fec0504baaf0da4a198a1203d267","sha1":"4eb5824a7c7b6bd81284476e0ffde66301572681","sha256":"22b1ae52e982f73c73f5b418489c347933a6f451d6512f22b0eacbc00a2f2e3b","sha512":"c6f1e1d3255b53817af7f6ebed4669533ef4b0928970a16c4d7c0581335d40063e6c2d719b337418cb4d93fb0379de36b4624216b6272a1d7d22599523f5ba52","ssdeep":"6144:rcSKkKmyBm551Zh33ehmoWoGsPrvds96l:olWehcsPrvj","tlshash":"70942a8f913416324bc503f4bc5dabce3ab8515443e045e59edea13c23acbe6a23766d","first_seen":"2026-08-10T18:28:17.802165Z","last_seen":"2026-08-10T18:48:38.81174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2356,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/DrawerSearchableList-DB8YGajy.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.005Z","timestamp":1786387669005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/DrawerSearchableList-DB8YGajy.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/DrawerSearchableList-DB8YGajy.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/wallet-DDbO7IeU.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.677Z","timestamp":1786387664677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/wallet-DDbO7IeU.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 511\r\ncf-ray: a28f34057f678c0d-FRA\r\ncf-cache-status: HIT\r\nage: 2951026\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 06:58:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lrHSCqsVfP:21047,t15\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1456,"size_decoded":1352,"mime_type":"text/css","magic":"ASCII text, with very long lines (1455)","md5":"ec531092f6b7c33b85642a557d97e4c9","sha1":"e1d51fe668fbb289c32a24ed391f3238ca0dc442","sha256":"9a28967efbbb1763a3fa0acbba8410c78f8ea845d3d622965dd0af417321424b","sha512":"2f2ed599b3df119c38f2833ead3f3057260e63c969420628135488dfc000db8e7bfab0498ab18d7ba67e093ee8e016d8f39914c7e5bd9ef9f20aec05ee89bb93","ssdeep":"","tlshash":"5f31deda45a1b23f6f6abd3953ba34eee0045502df4308e6cd532250a6eaff20873204","first_seen":"2026-05-31T11:11:55.913011Z","last_seen":"2026-08-10T18:48:38.361635Z","times_seen":7,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Notice-DC98bN0r.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.205Z","timestamp":1786387668205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Notice-DC98bN0r.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Notice-DC98bN0r.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Badge-CqUZj7j3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.732Z","timestamp":1786387668732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Badge-CqUZj7j3.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/EsimGridSection-D9XAxDtp.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 402\r\ncf-ray: a28f2d231a00db07-FRA\r\ncf-cache-status: HIT\r\nage: 6394\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:799,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":594,"size_decoded":1247,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (551)","md5":"8b6f3e06b45347b369d3d3fc2bf25d6e","sha1":"b6b2b6699896eccf894483b82f9ac14449e1f526","sha256":"8de77f55463b7f35c12d6d0bba6a745c8aa90b6579a591f8a82f623f3089cf50","sha512":"8327fdeddbb28491ff191c784770e08ac10dad6f0b9b1443f608bb202b06f7505b206eaaae1eb0d3616d1672da799fabebec1db23dea4bf0ed6f1d4098378895","ssdeep":"","tlshash":"47f0ac0bada068b8f41b4fdd15cd8b99132be05bdf0c0a51fa54a370a9115e47a12f46","first_seen":"2026-08-10T18:28:18.315331Z","last_seen":"2026-08-10T18:48:38.812588Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Alert-CKpIhxt6.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.165Z","timestamp":1786387668165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Alert-CKpIhxt6.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Alert-CKpIhxt6.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/testimonials-DJDhwiLi.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.210Z","timestamp":1786387668210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/testimonials-DJDhwiLi.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/testimonials-DJDhwiLi.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/utils-CXobsKCU.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.530Z","timestamp":1786387668530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/utils-CXobsKCU.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/landing-EzeWBxTg.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 318\r\ncf-ray: a28f2d664ef44db8-FRA\r\ncf-cache-status: HIT\r\nage: 6404\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50033,t15\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":467,"size_decoded":1165,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (424)","md5":"f42111ff39551c590ef41d02b6617d29","sha1":"701ae71ffa8e50cc830dd490322c9a2c12836915","sha256":"4a12dcecc245f53a8c0f058808198b9a1945c75000b3bc253faced4dd44682e3","sha512":"bd0ba9787d1736cc6f5a58590ddc4ad36e849a594e382bb3bbabde58a9203c32527caf729d93a969847d1f3ad86703d4fa7ba588515157e30d67aece1750bb82","ssdeep":"","tlshash":"46f0d4cf39f825b41a4032f0905a9a85b22cf5c982cd0b84938aa4c45a20465f2fba7c","first_seen":"2026-08-10T18:28:17.958707Z","last_seen":"2026-08-10T18:48:38.813741Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/house-Dq3t1_yG.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.756Z","timestamp":1786387668756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/house-Dq3t1_yG.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/icons-CBF0S1-q.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 253\r\ncf-ray: a28f2d201a22360c-FRA\r\ncf-cache-status: HIT\r\nage: 6398\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47831,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324,"size_decoded":1124,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"03bbd1fb154a3ab8a19dd6edfef00b3e","sha1":"e25a77cf0bb46ebe4f1e7f3deb0e2bb4f3ceecbe","sha256":"b0637247eba21f7776b34cc071d9a9e4772e3983f9427b1fd3d2c209ecb69801","sha512":"39284a0eba5427efdac82d4c93d9cf8378bbf26efb63120cc5628423b0b0de72941f7a6852c8f2764ea75769f5f9d74f02d8abe6c5d81986901a33783e0bdad6","ssdeep":"","tlshash":"d7e07d3fcfad8efc0c0b0760256ee004431e68a4b1798164b22c41ba0683e42d83be42","first_seen":"2026-08-10T18:28:17.91298Z","last_seen":"2026-08-10T18:48:38.814881Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/translation-Cdb9DzQD.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.784Z","timestamp":1786387664784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/translation-Cdb9DzQD.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 240\r\ncf-ray: a2750d2c09a9155c-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lyytAWfgNq:193,t27\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":385,"size_decoded":1074,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (336)","md5":"46a14433f04095cf584ee2409c88202e","sha1":"14e294b6843d781c5498f3b63f89f489670c7830","sha256":"b2004b3d44dd369a04b7044646c4439b50f802b35482985b67c5a1d196f92d2f","sha512":"a8461b71ac3fcfe1c7571a216818e9a3db52beb5ef143cdfb7be3e7ed94714960e9a1a75bd3eee791c5c5ce2b8fe60e88ffb63a452dcd66f0a63512a4c058c76","ssdeep":"","tlshash":"55e022cf3dd6f370a68b462490b3948bf26946c8003e2c5843849061b82086833a7ea4","first_seen":"2026-08-10T18:28:17.735739Z","last_seen":"2026-08-10T18:48:38.815882Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/fetchUserData-DcfDOPZI.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.912Z","timestamp":1786387664912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/fetchUserData-DcfDOPZI.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 440\r\ncf-ray: a28f86352ae85010-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: foOMOfbvjK:187,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":668,"size_decoded":1308,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (617)","md5":"db1c30616459abbfba79c13d8c7bef46","sha1":"a8591666da32814145449afc28c654688a098936","sha256":"2c280ea99386dee9c3fe2b733675356f3c2432d8a50f5a81eb6ad9f89d44897b","sha512":"9a92af6f0f7abbb5a109dc472e6ec8681a1d02c90db9ecc3958b25afcb8c33fe3e7d2a6526597f6048b9d04fcd42b58201c03cb845864c1326ac527f2c36f0b0","ssdeep":"","tlshash":"c60123acacf472700e6c4d34883c49079132edb6ef1096c97704322c29d6d98af15f34","first_seen":"2026-08-10T18:28:17.93306Z","last_seen":"2026-08-10T18:48:38.817186Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/StatusText-TkeKxQzu.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.951Z","timestamp":1786387664951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/StatusText-TkeKxQzu.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 655\r\ncf-ray: a28f86350d706eeb-CDG\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:59 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tWZjNIthpZ:45965,t21\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1424,"size_decoded":1513,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1376)","md5":"39a18bfde44ea8c82bc4364fb85f70a5","sha1":"c816fe8d6ac4734ffbff81aeccefce9acca2dc03","sha256":"029f6453d17f22484316e648a477a524950b6fe2e116b743ff451afc91aa6896","sha512":"b4c2d7dc3c862f81d00461f8391d74f373989bf872b42f4417c1e739432251e11c07c9d148a49b7b9069bfa81f085eec953d4362c4c7d90b089f0692902b6ed6","ssdeep":"","tlshash":"7221350e9850e9f6960b8dbc111d147ffe24d056d90659abfcc4977043628e13653f95","first_seen":"2026-08-10T18:28:18.203682Z","last_seen":"2026-08-10T18:48:38.818454Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/PreferencesButton-CoKjCmYv.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.223Z","timestamp":1786387668223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/PreferencesButton-CoKjCmYv.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/PreferencesButton-CoKjCmYv.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingReviews-Br_su98X.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.335Z","timestamp":1786387668335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingReviews-Br_su98X.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 449\r\ncf-ray: a28f3405df2fd406-FRA\r\ncf-cache-status: HIT\r\nage: 2711660\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 14:58:39 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:892,t24\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1127,"size_decoded":1288,"mime_type":"text/css","magic":"ASCII text, with very long lines (1126)","md5":"03b57007be8189fe0cd97b8d27f0fe17","sha1":"e5723095bf5bc5aa3adcabfc85486ec9ddd7efd5","sha256":"6e4be5a0d99c6b00f579bc5bf435b1b0cf65b7cad25d44767deeb6682ff5a395","sha512":"508dc531a5246199ffe05afdcf3d70c3a1292062565e081670ac6e9ccc28d7a2a3d859ecafc164a19612e7f7a50b6069407993182a1a033b7df912f3b9a70654","ssdeep":"","tlshash":"0221c8514220112977cbb03be76b970a499cb963ea9b40ab3000983c82823f79f690e0","first_seen":"2026-05-10T06:59:24.552962Z","last_seen":"2026-08-10T18:48:38.819947Z","times_seen":9,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/HeroLanding-ChnVGYSg.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.694Z","timestamp":1786387664694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/HeroLanding-ChnVGYSg.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 593\r\ncf-ray: a28f34063aed4d3a-FRA\r\ncf-cache-status: HIT\r\nage: 2616741\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 10 Jul 2026 14:05:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50079,t20\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2589,"size_decoded":1434,"mime_type":"text/css","magic":"ASCII text, with very long lines (2588)","md5":"ea4317e0a9d2e9846d482ed05ee3e631","sha1":"a04020575898105811669f24a554321bdcd6f8e7","sha256":"982ad9022066d2c0a8beff18243ef698274c50380cfe011dcbc61b170dc89963","sha512":"2d57e46cbd951959305c58c2bb3250f5f39ec00646982a22445234b2da6cb96db3d9f8f3fdbb0ec427879ae555c3bffefaf52f5812c566f551525e79a22a71d1","ssdeep":"","tlshash":"b9515c5eb102a138ad17dc3c52de318cc64b620edf8b6dd6a871b66853c72d18872ec5","first_seen":"2026-07-16T00:57:04.875341Z","last_seen":"2026-08-10T18:48:38.596578Z","times_seen":4,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/_baseSlice-C29wH1Xv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.590Z","timestamp":1786387668590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/_baseSlice-C29wH1Xv.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 424\r\ncf-ray: a2750d463c4ef46f-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: YmdVlemlyZ:37,t30\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":622,"size_decoded":1257,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (574)","md5":"795c15bc34e5a8ceb7b07142f605a1bd","sha1":"61274187f9884446ecbb3c84ef92b9fdba498a90","sha256":"c2c163f1844807c411495604563a94c55285e42098bf3a948868425f241b3bd5","sha512":"af44f244a2e59fff79d0751cd3e603b5cba1a4708fe5557b45c4d2ee94b82dd0dd603c9bb8a958c3cd45f86f5f0900fec4c6e490d6c08a3673f5e818af3d8c47","ssdeep":"","tlshash":"0cf00cc834ea7565e7ab2a60c01f4a8cf13c6c79ae6c8048c062d886b7635b8c56ed1c","first_seen":"2026-08-10T18:28:18.019041Z","last_seen":"2026-08-10T18:48:38.820962Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ImageLanding-De9aeWZd.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.620Z","timestamp":1786387668620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ImageLanding-De9aeWZd.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 494\r\ncf-ray: a28f8669ef14d9d8-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:3094,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":787,"size_decoded":1363,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (737)","md5":"c8425f0c07c570b0480da0a9bc9bed76","sha1":"f04d791c0c00c49030b576579fe1194b9bc6fc5f","sha256":"951870a01e305efa9673c4e539abf7d41127193289d0b771b6552ac5c672b537","sha512":"b5660f95d4ff4b9a500d7798074298c8c1177c32a4634c543dcde46a16810e65b4644d6624827979a9d6d7729342d65c076c62d7857e725966df1e6b89465404","ssdeep":"","tlshash":"9e01126fd932319e88324d9ce05e0d1d922cf09cd35a8b1cfbd558ee17141943521fc1","first_seen":"2026-08-10T18:28:18.387722Z","last_seen":"2026-08-10T18:48:38.821827Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/DrawerSearchableList-DB8YGajy.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.059Z","timestamp":1786387669059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/DrawerSearchableList-DB8YGajy.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 711\r\ncf-ray: a204acdacca8dbce-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 24 Jul 2026 17:29:35 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VmFkCUnFDa:97,t28\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2524,"size_decoded":1535,"mime_type":"text/css","magic":"ASCII text, with very long lines (2523)","md5":"21411cb0444014f4a34bd0d82932629d","sha1":"4b9dfe1ff0ad4577fa461254affd52536883412e","sha256":"4fcf25724c99b49c3894d4b817363fc79a3efc9b94a461a53cc6a981c0570d55","sha512":"efc17ce6be6ed890b09311ddf66521e6a5ce95d3b53f3ca3b6bab31012ae6257b3a71dc72d7df28e3d54dfe74ecf45e2cc42ba31604527269e3bf767dfb3a9d8","ssdeep":"","tlshash":"0551cf6947f4a73df83e70af72aa949a824563123a4d0af6ee293ca643c52d52c33104","first_seen":"2026-08-10T18:28:18.00491Z","last_seen":"2026-08-10T18:48:38.822753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Popover-C6488GXa.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.654Z","timestamp":1786387664654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Popover-C6488GXa.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 314\r\ncf-ray: a28f340579b1db07-FRA\r\ncf-cache-status: HIT\r\nage: 2397932\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 13 Jul 2026 10:25:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:916,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":558,"size_decoded":1155,"mime_type":"text/css","magic":"ASCII text, with very long lines (557)","md5":"cadea627c3efba038d9d296edd3af1a6","sha1":"cb72603b121361bffd1dab5008a7e6e3ddd2529a","sha256":"ba638d978f434ef899bb950f74e4a98214087832a2c4189aee97ae910c80af63","sha512":"316b6b6edb8034bfea079d5ebb770ccef79032e8d2196b23fa217c4075ef7f7dc952a5214446f63cdf8ac6413744a4fc2e514507d5ec886214b87b2f9d4689fd","ssdeep":"","tlshash":"8bf04cb9e711a5bfad1d642c6b4cb5ca1556b1b08c4301f3fc82a12882c67e45952609","first_seen":"2026-04-30T03:12:06.138792Z","last_seen":"2026-08-10T18:48:38.82366Z","times_seen":14,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/URLStructureRouter-UQLD4QC1.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.661Z","timestamp":1786387664661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/URLStructureRouter-UQLD4QC1.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 12331\r\ncf-ray: a26ecfd67adc9291-FRA\r\ncf-cache-status: HIT\r\nage: 146\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: pl\r\nlast-modified: Thu, 06 Aug 2026 14:37:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZUfsnGjFkD:1589,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71406,"size_decoded":13169,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"f31fec1a86c440689852f529d216a819","sha1":"b324dc92a1d191731c077b690e33346e99b9cdfd","sha256":"9cc141d138c30b437f5c05e6f03b49f98e71a0a8477582e701ec0b6aa11e5313","sha512":"e3ef9822dc8bfc42c5ec6ba278cac2c7fa239927a7503e30066d5ee68ab63d49056cb1905559880647dd9cb342f0eed38be1651e0e3b4544f2feb78481354786","ssdeep":"768:i5WStiJmSme6pTBhNNHj6slqiuHoj0craurzCrnlf:BSti0NNns9frnd","tlshash":"4b6351bce563f63f7c7f94b693e8b3ad5104a602dd770be9fa01a02121c76f10166a25","first_seen":"2026-08-10T18:28:18.271899Z","last_seen":"2026-08-10T18:48:38.308174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SupportedCountriesModal-CWtZYhz-.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.746Z","timestamp":1786387668746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SupportedCountriesModal-CWtZYhz-.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/HtmlContainer-DsvY5hA2.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 691\r\ncf-ray: a28f86684bf7f4e5-FRA\r\ncf-cache-status: HIT\r\nage: 149\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:62,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1433,"size_decoded":1555,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1372)","md5":"f8698a7fe17a8b1a2d2b109bea1632fe","sha1":"edcbd985b483dfdb29095990cbe53fb74af30dc9","sha256":"56cfb2e366a3965214bf1b1b91751a7f7e0af8797acf4d0dd1e99427768e8be5","sha512":"31150e43b80f340cdec8edb115fdd8383ba36f8393b7abf0c6ff0156a6c0ab4f7ab24b06987ca4da92c74273dabb09f17bb8a87fd4d5320652853da095a43bc1","ssdeep":"","tlshash":"7c21106dc0f46bb9b83a4cdaf04c103f372e80a8cb441794a48e238423564d5f5b7f96","first_seen":"2026-08-10T18:28:18.164344Z","last_seen":"2026-08-10T18:48:38.824689Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/checkout-com-visa-DTXr0IvV.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.943Z","timestamp":1786387664943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/checkout-com-visa-DTXr0IvV.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1956\r\ncf-ray: a2750d2f8e499f11-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bcBdKSbwcw:6656,t31\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6255,"size_decoded":2790,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (6200)","md5":"66ed70abc9cdf87e8c738d861f0d0aad","sha1":"9dbebccae2eed137a350132ff8acff4df6b0aaff","sha256":"4b3c99ac2aa0622a6d2db6e1d0d9188a88c4a878e978af08f9f296d361b22fcd","sha512":"dbd10057c5d939c3232be59d136eb771900eeca268072e465616a32258ec513694c56b2b3412df711032c40ddaf83fabb3c4c8dddbd7f3d30f78200d5d2d4a90","ssdeep":"96:qgl+WpI8ycJMOavvPUZDm0fUNPCj3+6qhdA5Mq4Vjb:qG+WpJ5dfUNU+6qhdA/4d","tlshash":"3cd1897c8192668dbd798a231b5b7606e00127d2ef7a500eef527120d7d84eed6ec0ac","first_seen":"2026-08-10T18:28:17.871981Z","last_seen":"2026-08-10T18:48:38.825952Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Connector-DhjvnMXv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.964Z","timestamp":1786387664964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Connector-DhjvnMXv.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6513\r\ncf-ray: a28f86351c264d7a-FRA\r\ncf-cache-status: HIT\r\nage: 149\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:51734,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12452,"size_decoded":7382,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (12405)","md5":"3ade327f69db148a18270a30aa3dd293","sha1":"2b0859b4dd80f65b8042e11eb7d1a000af3eae4a","sha256":"71c61fd8b97e2b8559aaefe2f24044873cb49c0d5b0aeae22ca935aaf0e37c33","sha512":"6a97d2e1c5c6d5beaabdcd312d070d2d9e99698b0eb682619bc2d2f57e642f9ea2bbaffa19f4c299e94f4db41066397eed0840ff25ddf27db150e8566bbb80e0","ssdeep":"384:6HGok0wCj44SvIoOR/MfC37T0XSuIip0oZP6v5:4XtjdSQt0C37T0XSuIip0oa","tlshash":"ea424ca9d93811bc5e0a5fec853910ab1b2df0eaf712d264f7594f319420746ee00bbc","first_seen":"2026-08-10T18:28:17.749817Z","last_seen":"2026-08-10T18:48:38.82689Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/_patched_static/logout-guard.js?v=logout-guard-20260724","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.972Z","timestamp":1786387664972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /_patched_static/logout-guard.js?v=logout-guard-20260724 HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 6120\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6120,"size_decoded":6409,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"61ba0987854657265e48c2e314e93cf6","sha1":"d4f57ab9dad3072863a83874a2656967146fc1dd","sha256":"a07b5f6f8c6940cb68fabca606434bd20d5962dc923eba0d72bbce8b0e222e97","sha512":"6a48ded690145fc9613f5428b9ee3937fed1c07dc25ac5e917847bd865c15e9e76e3a4460b39d4d9d752982d9c15de0923a18371f7f5a11eab52af088b55fc84","ssdeep":"96:9rwfXkwkliGig36bgv52wocprfZeGHUM8NWlKInj1V3RZ32d4gc8SeIbhtdR5Ys5:K/aliGig36bgEKprf8GHUZN6JZfQdirL","tlshash":"bbc194abb6db31b54277607c476f7986b13aa897018ac8607d8c4e005f2507e43f3b6c","first_seen":"2026-08-10T18:28:18.378508Z","last_seen":"2026-08-10T18:48:38.82817Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Stack-DwHNhaFJ.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.164Z","timestamp":1786387668164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Stack-DwHNhaFJ.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Stack-DwHNhaFJ.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Text-vb1tRuSj.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.278Z","timestamp":1786387668278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Text-vb1tRuSj.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 902\r\ncf-ray: a28f34054b7d9c23-VIE\r\ncf-cache-status: HIT\r\nage: 5101600\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: ko\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1339,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3406,"size_decoded":1741,"mime_type":"text/css","magic":"ASCII text, with very long lines (3405)","md5":"2b1f93651fb0a657552f9150c976a45c","sha1":"0b7ebe68ea0ab712a90d498602347d797dc77ca8","sha256":"97dc1e6b2606e27987d29346ada6c49c3642aa74c53d03699f09b9ce67e2cfd9","sha512":"6c222cc232656ef971ccdb5442df78082825f5e2e86752b2f7a6b264ed183ee342cfdc1b1a694e2c542f9c6c21cc68f4ec7f4f33c3d33e3d520346deccca32e7","ssdeep":"","tlshash":"e361c09d37a3e135ad359c333b09a9487246e8955e1343baef72584487c3ab36b11f0e","first_seen":"2026-04-30T03:12:05.990722Z","last_seen":"2026-08-10T18:48:38.450546Z","times_seen":14,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Tag-CzFiEk0D.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.306Z","timestamp":1786387668306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Tag-CzFiEk0D.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 327\r\ncf-ray: a28f34055d3d5db9-VIE\r\ncf-cache-status: HIT\r\nage: 2955744\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 06:58:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: fDyQmPAVbm:1340,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":570,"size_decoded":1168,"mime_type":"text/css","magic":"ASCII text, with very long lines (569)","md5":"1aca56ab081b657b9ec1829fe84f6853","sha1":"3ae5ac31c753badcec0a50c71e69fc24d785ed7a","sha256":"0d7a15f9d5b5ce0b488de1d3feaf015b3241176bbdbe0f3d8c83cea7e1cafba6","sha512":"afbc918582976031669aa33cc74eb77cd8b8063cfadb1ac2128c74e92bb9051a312f47f0fe431065b7138a10acf068a1b16072e3ed02f114706b5718c001df30","ssdeep":"","tlshash":"73f04c5137147174e066892af43528dda03a831bcdb759a4f5a0760ac2caf572616a84","first_seen":"2026-04-30T03:12:06.008364Z","last_seen":"2026-08-10T18:48:38.286665Z","times_seen":14,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SkipNavContent-DogOaaDH.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.666Z","timestamp":1786387664666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SkipNavContent-DogOaaDH.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 320\r\ncf-ray: a28f3405ad96360c-FRA\r\ncf-cache-status: HIT\r\nage: 5101600\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: ko\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NUSuistqZq:4,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":667,"size_decoded":1158,"mime_type":"text/css","magic":"ASCII text, with very long lines (666)","md5":"53626f6f30d95ea08969a3f3acb1718d","sha1":"f4fbf2b94ef3ddab7cb16a23922dc4282a4eaa35","sha256":"600a21001830b485ef20b6f56306597d6efad9dfd25c7a560a16d2c8fe24e708","sha512":"4cd8444e405650b8232ba452e1cce7ceecf658d51771019a3c5f477eda5c15bf248823b348f12466dda7e146afc5b5ce53c182b4fd044e6f2cff9e799e28fa3d","ssdeep":"","tlshash":"c6019e810202973ecc2b942817f7814e72dcfa05dbcf30f75d52a2128adea425937847","first_seen":"2026-05-31T11:11:55.660565Z","last_seen":"2026-08-10T18:48:38.798733Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/createLucideIcon-CFh3KSiU.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.808Z","timestamp":1786387664808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/createLucideIcon-CFh3KSiU.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 668\r\ncf-ray: a28e93909f593410-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CCmZTzPoOp:7,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1234,"size_decoded":1507,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1180)","md5":"14c8b117e3d8105db08e7e3762bbcef1","sha1":"09e28b261110a1b14d5116e153e0f8b9c2c6fc05","sha256":"912c085745589d3db7ed5a32f59c68990e18a752dcd76a8a64e52b97e1c1615c","sha512":"969d9bbd9a192f79d226c5dfae15ced995509d4aaf96fb0033e55bf4c42bc64a933ea067e2786a31a5905058b761e9b0c4af33c8f44a419001f553ed87d7b78a","ssdeep":"","tlshash":"6f216244f7a93d3a632a848d871c1109d497c314be831a18b1bd092db63b58077b7ac4","first_seen":"2026-08-10T18:28:17.737932Z","last_seen":"2026-08-10T18:48:38.829129Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P5SL845","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.756Z","timestamp":1786387665756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:06:08 GMT","end":"Mon, 12 Oct 2026 18:06:07 GMT"},"fingerprint":{"sha1":"BA:95:90:2D:24:46:69:E3:91:01:2E:0F:2E:73:5C:7A:52:38:4B:B4","sha256":"13:70:D8:3E:0B:A2:B9:38:B9:CE:9E:5B:8E:2D:0D:92:96:C6:06:EF:29:36:F4:A7:7D:E3:34:75:6A:A0:E8:08"}}},"request":{"raw":"GET /gtm.js?id=GTM-P5SL845 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\nexpires: Mon, 10 Aug 2026 18:47:45 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 10 Aug 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 173094\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":534979,"size_decoded":173744,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (34089)","md5":"acb6349b7c04ebc2c836fe9d1222bc6a","sha1":"a7ced6d5ce1edd981bda0942c93729342c2fe91d","sha256":"c58921a82cda68c09c616bbd11f5710894c5199164d31302513abcf8b79af392","sha512":"e7aa196aabfef0bc60aa9bc0f44d2b5324a5207615d8dbf171366d7f513495efc3319160f714cd9d856e4fa4be050ec6ce87ab812f027ac5638ff8f74e81477f","ssdeep":"6144:6NVeuW2X5iZ7iTQ+o/FWDEsoGQ4xOx0fcPbvTEaI3sI6jkd8TS1LQMwkwr:6NVeuW2XY9+o/5urxac8ewr","tlshash":"60b408ceb3ca74659396f478903f018ba97e24e2b44cd895f089cce42e7465a5223f7d","first_seen":"2026-08-10T18:48:38.83019Z","last_seen":"2026-08-10T18:48:38.83019Z","times_seen":1,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":38,"receive":46,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Image-BeX-OFZZ.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.206Z","timestamp":1786387668206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Image-BeX-OFZZ.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Image-BeX-OFZZ.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/landing-BOVSBFrY.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.399Z","timestamp":1786387668399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/landing-BOVSBFrY.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 257\r\ncf-ray: a28f34057d0c99ed-CDG\r\ncf-cache-status: HIT\r\nage: 1175938\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 27 Jul 2026 17:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: BcQSMchFFj:37666,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":395,"size_decoded":1099,"mime_type":"text/css","magic":"ASCII text, with very long lines (394)","md5":"9090dfb997e073d715e261dfc94af786","sha1":"72fcf53c1536508e722732da92aca8434edecee3","sha256":"6cd481271460a7758fdf3dadfebdb16cc2756b62b4886bd1a8be87d4cc8a0ab2","sha512":"a9e040cc8891ac9bff32a62ffdba65e9606fdf5120b8eeacaa2ca3e0537fad01cb8e9514f754bca91162b63104f3fc23ffc06244e44740bafbc75e5dadecdb0c","ssdeep":"","tlshash":"a2e0a385c3040535dcffdb5097ed772f61605121898700fdd182331cdac67a395e105b","first_seen":"2026-05-10T06:59:24.298577Z","last_seen":"2026-08-10T18:48:38.831641Z","times_seen":7,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/NoIndex-DolUzx-O.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.526Z","timestamp":1786387668526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/NoIndex-DolUzx-O.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/landing-EzeWBxTg.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 287\r\ncf-ray: a28f2d1f2eb5d5a8-CDG\r\ncf-cache-status: HIT\r\nage: 6394\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: iliVLMVHfv:31057,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":358,"size_decoded":1133,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (313)","md5":"d6131c7d310fea4e89de029c43999e2b","sha1":"1a6eed26d0f734496fbe2f406d3d0bbf7a69eb8f","sha256":"82bb1c8838ed28d7184e54c19c2e8dd632235f076a7a3d396adc02963b391e00","sha512":"e559fc7449f9e1b2ca2c0da455c96e890b345247eca453cfb93772214eb4fcc6f786db304b33b2bb3fa7f61c0514107cd6c10e1cfb8a51ac9cd91187c5c0850f","ssdeep":"","tlshash":"11e0c00fdca491f516185cdcd01b1d8feb78f0c0c7410a44d00832f473b55e4852af21","first_seen":"2026-08-10T18:28:17.93477Z","last_seen":"2026-08-10T18:48:38.832535Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/wallet-D7-79KR7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.609Z","timestamp":1786387668609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/wallet-D7-79KR7.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 966\r\ncf-ray: a28f8669cae54b37-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: dLVCuztXcx:934,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2682,"size_decoded":1832,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2638)","md5":"7bb420b1e9da983c49f9058c99ba6a27","sha1":"8241b73b23ac26b4ce33f4bf83e3fa3af58cfd12","sha256":"3041dfc815c5dac30e2cce658a634ab94a593fafb8a9a9ea67903bcae2dce412","sha512":"931c58636a864f945d10c847cac6734f7c6d33f42636d5d31d2862b6d9dec1dd31948d2a1cb3090ffc2db2daf1b311434b648904c60319c60885ae58a53dff8b","ssdeep":"","tlshash":"91510157944069beac2b5c60c66a511ff369c25ceb5949a4b9df113022119e1f63ff40","first_seen":"2026-08-10T18:28:17.844716Z","last_seen":"2026-08-10T18:48:38.833608Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/EsimGridSection-D9XAxDtp.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.626Z","timestamp":1786387668626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/EsimGridSection-D9XAxDtp.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2406\r\ncf-ray: a28f8669edb06eeb-CDG\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tWZjNIthpZ:45967,t22\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6935,"size_decoded":3241,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (6882)","md5":"8773dacfc50616a4153adea62eb5f1ad","sha1":"84c1965030f568c5bb0c2e82ae668ae9500f2d50","sha256":"2388da4c57ae880e06d8c1be20113a09c1296fcd4c8e32b5c6b06fe43ff7e1fe","sha512":"d4dd4fbdb3072611a75d98d4fc082ecc4b6b54ec8bea89e1d4b119ea66414462d30d44d70244331829a921df2642c3a6a32f76dd8a1ba2f2d512f6cc36530e71","ssdeep":"192:dNoXfPABBZwokSbauOohsbBIYGLRFVdlPyGfw:wUddJF7LZKOw","tlshash":"0de1744de1a06db4f22f8d8cc16f813a373e74aacb4099d4f47a29621704a945786f7b","first_seen":"2026-08-10T18:28:18.265289Z","last_seen":"2026-08-10T18:48:38.834536Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/cloudinary2-uZHkAarz.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.845Z","timestamp":1786387664845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/cloudinary2-uZHkAarz.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 635\r\ncf-ray: a28e93d0fdd93616-FRA\r\ncf-cache-status: HIT\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47386,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":1480,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (904)","md5":"9019cd19d7ce56932e2f8e497330ac85","sha1":"675b047350ebc702d7167d752b91ea73031d951c","sha256":"9f04591d33b742e031e0fae926e3a27c34782b4170fb57a2d101f1ce909e9cac","sha512":"48df0659139d30cc9c877ca4eb9c858c7a6411d47d8520952ca177e50f43410b1a528c7a7d3e209818d387f70d482e6aff44e27ca2e65208ec2abc8795c3ac83","ssdeep":"","tlshash":"9a1165bb31cc7533230ac660d33f046af26faf40ac69404c705420ae1520a2862f2fbc","first_seen":"2026-08-10T18:28:18.121371Z","last_seen":"2026-08-10T18:48:38.835931Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P5SL845\u0026gtg_health=1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:46.941Z","timestamp":1786387666941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:06:08 GMT","end":"Mon, 12 Oct 2026 18:06:07 GMT"},"fingerprint":{"sha1":"BA:95:90:2D:24:46:69:E3:91:01:2E:0F:2E:73:5C:7A:52:38:4B:B4","sha256":"13:70:D8:3E:0B:A2:B9:38:B9:CE:9E:5B:8E:2D:0D:92:96:C6:06:EF:29:36:F4:A7:7D:E3:34:75:6A:A0:E8:08"}}},"request":{"raw":"GET /gtm.js?id=GTM-P5SL845\u0026gtg_health=1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 10 Aug 2026 18:47:46 GMT\r\nexpires: Mon, 10 Aug 2026 18:47:46 GMT\r\ncache-control: private, max-age=900\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 137\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":216,"size_decoded":535,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"ffbb935556b923eee5ff8477b0756493","sha1":"308b9226bf682ba28a92a743b4ddf4e9a96157f1","sha256":"c24c8a68f1ffcf9b37963dfdf26c4874c307feceac1245180f85db1da436416a","sha512":"9a3af3a979c26255bc27b508e7226859f22a732b120360763f70a5fe2c59f422b816c07905ddfa76f151b993f72dd0f50dd4a540e4bf572aba5afe1fdfe7c8d3","ssdeep":"","tlshash":"e4d023cdb1cc31502497f530b19fc1271013d25d4ec0d1843514ecbb0d622cb42137ab","first_seen":"2026-03-17T00:15:22.957568Z","last_seen":"2026-08-11T00:14:59.102364Z","times_seen":35995,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/PreferencesButton-CoKjCmYv.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.361Z","timestamp":1786387668361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/PreferencesButton-CoKjCmYv.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 216\r\ncf-ray: a28f34055e2cd5a8-CDG\r\ncf-cache-status: HIT\r\nage: 1175944\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 27 Jul 2026 17:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: iliVLMVHfv:31082,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306,"size_decoded":1058,"mime_type":"text/css","magic":"ASCII text, with very long lines (305)","md5":"fa2bd872b3cc89a64c9a01e76212ae43","sha1":"989398bd634b294a8cd28dff8706a716fc5de254","sha256":"3fcd6cfcca9bb2f69dd369de0142bbeef998aff0eac750fe8341b76b380c0c88","sha512":"1e5531acb615e96e477940a22632dd0d74e8a754dbdac4090bf7975d24f6eb3ec2470dd268457883eb38db7d09155d9037473f5e080c9b3ceb2edfea30d9bb66","ssdeep":"","tlshash":"b2e072c70200333ccca2fa06221c308fb4cf08460393a0c2a883b128c2c8f9aa9e21c1","first_seen":"2026-04-30T03:12:05.859914Z","last_seen":"2026-08-10T18:48:38.584449Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/NavLanding-BxRMYITu.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.366Z","timestamp":1786387668366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/NavLanding-BxRMYITu.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 322\r\ncf-ray: a28f34063af9d285-FRA\r\ncf-cache-status: HIT\r\nage: 2975356\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 06 Jul 2026 14:38:42 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jIdbbblaYA:6,t19\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":634,"size_decoded":1161,"mime_type":"text/css","magic":"ASCII text, with very long lines (633)","md5":"ace40dd84d2accdddf3479c27abde8d0","sha1":"3333855c23c88bfc5aa98b087cf2b75a06115b63","sha256":"a3410d099b41048a823161e1ed57eaa6110babce30fbeb51a1624b13aec025bc","sha512":"80ed34830ce2e3c62d3a869d1419edaa5357f39257e5247f8e1116571e03bc00a4a2298b89525f4ae3cb50dfdda82dd1e18b48f7b347a8b250957646c5b1c781","ssdeep":"","tlshash":"c2f0dd607314427ccc3bb20447f9808ae15c5a661b8321f25a2a324481cdbb35473e2e","first_seen":"2026-05-31T11:11:55.729531Z","last_seen":"2026-08-10T18:48:38.837837Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/TrustLanding-LVRL5-gA.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.624Z","timestamp":1786387668624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/TrustLanding-LVRL5-gA.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3501\r\ncf-ray: a28f8669cb829b98-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:10087,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8811,"size_decoded":4369,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8761)","md5":"2538101b455120920d2a3aa41925148a","sha1":"76ebf72298d3cf7fe7d4b27645ec5d3f5047c0c7","sha256":"bc702093826c43e17712e56979fb5c2e15ac7b75c63df136910b90a261166e5d","sha512":"43b599a4fb3d89e92ba61394437d3834c9d72029b34b996fdb8cf0b0021a3329e9ff2a96b24f46476512f64250ec2db4636b74659c4ccf2daaacde962b7d23cd","ssdeep":"96:JKfXPUgkjgxwSyqZo4kbNgZ6On120MgKQnB1RnIpqAw4vYAN+ghS+zINvNcnRv32:qi0xwq/bns0MgKMBLnIpWEKN0mt","tlshash":"aa02877cd76093fca429d6bcc6260d29300e80985e7bc765d29abe6811d34cce70fad5","first_seen":"2026-08-10T18:28:18.011038Z","last_seen":"2026-08-10T18:48:38.838722Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/circle-question-mark-D6Mj6Lg4.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.810Z","timestamp":1786387664810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/circle-question-mark-D6Mj6Lg4.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 247\r\ncf-ray: a28e9390da84371f-FRA\r\ncf-cache-status: HIT\r\nage: 131\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47383,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":306,"size_decoded":1093,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"f34011c2abd0d68398eb4c4d2c45aa84","sha1":"ba3aa5291ef46c290e10ca5cf9edb09a0e537db1","sha256":"3193e6789922ace3b8edad349ebd6cb8efb2b01505726ec14511d308c5ba63f0","sha512":"3cd89cbdd1f62018da78a03db5618c558328ef21f8a457a40c0388d1e7d58a30be7552f609fe47cbfe0484a10780fa1ada355c501b4bb953292932b4546c7b61","ssdeep":"","tlshash":"e0e07d3e9def0f7444025864054d5981e92785d472a60d81b184817e07a2943bcebe62","first_seen":"2026-08-10T18:28:18.101002Z","last_seen":"2026-08-10T18:48:38.839739Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/object.omit-6Pujqf_j.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.825Z","timestamp":1786387664825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/object.omit-6Pujqf_j.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 473\r\ncf-ray: a28e93903978b240-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lrHSCqsVfP:19197,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":852,"size_decoded":1342,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (803)","md5":"6042a7ad148e7342c8f335c71638109d","sha1":"f929ef097e7310764c8341784ca5e34cca263be4","sha256":"193b5140d0fc9be5d437289e0c2deef1a7bbae981131edc76712966bf7e6042c","sha512":"3d9a136032265272f826d3472b1c44d1fb3addf897b16a49cc7a086be9e59735e69f1f50b71acd0cb953081f4899a57e905950bedb213e57f7929693993bbc09","ssdeep":"","tlshash":"0101abc779e2a4a1222a9995401f8c2ef12691e1788ef144a381d5f0a9fb80ed107f2e","first_seen":"2026-08-10T18:28:18.112081Z","last_seen":"2026-08-10T18:48:38.840602Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Spinner-5-5qWz11.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.827Z","timestamp":1786387664827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Spinner-5-5qWz11.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 769\r\ncf-ray: a28e9390daa62757-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CCmZTzPoOp:10,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2075,"size_decoded":1610,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2030)","md5":"466779b8f500b22350538347ea42bf21","sha1":"4a31be9fea996b8a94566d1b5363f684a5458609","sha256":"8ee1d4649498e168dfee6df13282889bac9b4b565db51beb1553cceaee121d79","sha512":"8176a1191b22cb3f3e7fad7c04c28439e4620d40a39a88e2849b1ab99877d745c549677ee8f2c093a2b2783d19fba7f14fe51db17a816186623236dbbc33d9be","ssdeep":"","tlshash":"99410feaf45079f8e6338a91522d849e362ac169cf0e0db0e970a87c12344f53717fda","first_seen":"2026-08-10T18:28:17.833177Z","last_seen":"2026-08-10T18:48:38.841413Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/FormControlWrapper-BssbelpS.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.861Z","timestamp":1786387664861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/FormControlWrapper-BssbelpS.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 889\r\ncf-ray: a28f86348b8b4d7a-FRA\r\ncf-cache-status: HIT\r\nage: 154\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:51732,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1918,"size_decoded":1733,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1862)","md5":"f012a301fee24b1400dfa9e4ee99126d","sha1":"450c29c591f3de2deafe288b41cda50014ca2a7c","sha256":"5895ec6537b5c8298f4fd92ee99b59e283a90c5cedd8c0262ca17e62e87e6a06","sha512":"0c4903e93fb02ee97c27c4fb0f80ad828b67f668884bb7ec475e6bc995f23cfee160b577ec61aa6a9c3a6ad40e9b2c143f4a77665ab5c08b7ce84bdef2493a3d","ssdeep":"","tlshash":"5241544ee854b4f0e05e4ef9c05f849fb70a9018870e10147a9a7925539609cfa23ff5","first_seen":"2026-08-10T18:28:18.059643Z","last_seen":"2026-08-10T18:48:38.844199Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/URLStructureRouter-B1PtNMUc.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.612Z","timestamp":1786387664612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/URLStructureRouter-B1PtNMUc.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 132875\r\ncf-ray: a28f8630cab26eeb-CDG\r\ncf-cache-status: HIT\r\nage: 155\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:58:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tWZjNIthpZ:45959,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":406935,"size_decoded":133745,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (62445)","md5":"a16f6fa8c4edd69dc401f2bd984b4108","sha1":"1a954c442a9f4cfe33ddde05c685cc68a02067f4","sha256":"4a70ba161f40c2df2ac2d02c08dad6813a27c089c01257a287fd0ea085f2503d","sha512":"3487805c9be7116817cc26eaed538a7173763b930c02a348a05f5045fabe3737656b02021876112fa51c9b9670d23f0cafa9c302bdf7e0e085fae3a30de190f7","ssdeep":"6144:goO3ht0eVsjYfHWsaPxdHA3K+q/onCxjmp:VORP5Jnpp","tlshash":"0a845bdc72a9b562679746b2503f110bb33928525c0d4460b220fdee3ab5489a1fbffd","first_seen":"2026-08-10T18:28:18.076139Z","last_seen":"2026-08-10T18:48:38.758505Z","times_seen":2,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":88,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/DrawerSearchableList-DB8YGajy.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.705Z","timestamp":1786387664705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/DrawerSearchableList-DB8YGajy.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 711\r\ncf-ray: a204acdacca8dbce-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 24 Jul 2026 17:29:35 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VmFkCUnFDa:97,t28\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2524,"size_decoded":1535,"mime_type":"text/css","magic":"ASCII text, with very long lines (2523)","md5":"21411cb0444014f4a34bd0d82932629d","sha1":"4b9dfe1ff0ad4577fa461254affd52536883412e","sha256":"4fcf25724c99b49c3894d4b817363fc79a3efc9b94a461a53cc6a981c0570d55","sha512":"efc17ce6be6ed890b09311ddf66521e6a5ce95d3b53f3ca3b6bab31012ae6257b3a71dc72d7df28e3d54dfe74ecf45e2cc42ba31604527269e3bf767dfb3a9d8","ssdeep":"","tlshash":"0551cf6947f4a73df83e70af72aa949a824563123a4d0af6ee293ca643c52d52c33104","first_seen":"2026-08-10T18:28:18.00491Z","last_seen":"2026-08-10T18:48:38.822753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useWalletEvents-B1EfKZMg.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.929Z","timestamp":1786387664929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useWalletEvents-B1EfKZMg.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 247\r\ncf-ray: a2750d31fba0f46f-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: YmdVlemlyZ:35,t25\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":386,"size_decoded":1080,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (333)","md5":"072b22cfbbd74aa94743ee6b69a12fdb","sha1":"b48b37e3dd11693ef1a702fe3838093915884a24","sha256":"ab0e0cd1d9426ebaee888370196a62eeb2f3919754d0020760d049e5c46c75ae","sha512":"8ae77c1d099f7401ca3ea43ecac4ca4b78b10677302fa9898d3091f931566923e7dfd2f52fcab13b7288daa2d98cf355c2d55ad0ed85857a5e3877fb631404a5","ssdeep":"","tlshash":"73e0d8a975d0355281133974415f105e02b62598b08fc110bca9dfd8ae3d89b65a7c2e","first_seen":"2026-08-10T18:28:18.373402Z","last_seen":"2026-08-10T18:48:38.846484Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/useCard-Nxi6NDI4.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.916Z","timestamp":1786387664916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/useCard-Nxi6NDI4.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 643\r\ncf-ray: a28e9390ec03b240-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lrHSCqsVfP:19199,t5\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1575,"size_decoded":1486,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1530)","md5":"90cf81a22814947bfefceee081f0c0de","sha1":"d050fd02cb235326628beeea2702e6a2a52971db","sha256":"45823d921ce63612b7fffce1c229ab88642e835194fca8c7a779284524d11cdf","sha512":"1e164739e817ab4de3ca229e8eee2d17c9bcb4170b059a45ab51ebe1f163c00ccf6d34a329d174157362cc651797ccfea1628bbd53fe4c239fc03a050f317ab8","ssdeep":"","tlshash":"f1318a9f38e33669594bcd3610b9017a6c7cac62f61ccfa0f708826a071005ad6773a7","first_seen":"2026-08-10T18:28:18.181775Z","last_seen":"2026-08-10T18:48:38.84836Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Button-DUd9V953.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.162Z","timestamp":1786387668162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Button-DUd9V953.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Button-DUd9V953.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/BaseBlock-D8czzRx4.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.214Z","timestamp":1786387668214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/BaseBlock-D8czzRx4.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/BaseBlock-D8czzRx4.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Accordion-B1oUk7ky.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.279Z","timestamp":1786387668279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Accordion-B1oUk7ky.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 404\r\ncf-ray: a28f34061a8365a2-FRA\r\ncf-cache-status: HIT\r\nage: 375845\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 05 Aug 2026 15:02:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50078,t20\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":726,"size_decoded":1246,"mime_type":"text/css","magic":"ASCII text, with very long lines (725)","md5":"22cea38c91b2d0725f6b518b2433880a","sha1":"94fbb498165d7e137a2decbf13886f6cff9a87a2","sha256":"493c6a5259996af0a564bdfc2b10e69ad3fe5dba47c389b1202d5933e0044827","sha512":"85559da2a8c0f76e8e56bd597d63b8aea2a607a293cde06fda2e4ecb6666b0c53745c539990850eeca14b4499e6bf5515484669e5eb3baf668d879c91f31619f","ssdeep":"","tlshash":"6801bdabff80e23cdd3e5450638cf1aae1007584984216e7ea02211546c7ff63be0346","first_seen":"2026-05-31T11:11:56.115711Z","last_seen":"2026-08-10T18:48:38.607109Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Image-DIEZcPp7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.709Z","timestamp":1786387668709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Image-DIEZcPp7.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/Product-DBz4EriG.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 721\r\ncf-ray: a28f86696b8da93b-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:10086,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1398,"size_decoded":1589,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1355)","md5":"97a04a8980a50b22baa24211b7c9865e","sha1":"0c0cbdde5d2bd1d75ce9c5ac9aa6393fd8a8e6c8","sha256":"90188a76ff56ca0931c07413ae87a232e82d120a57974994e683a8cebcc9e4da","sha512":"4734c67f552706f2659aee2990b2fa9026eff9c25048d3c2fd4b204f7fb11fd3e0ea947fc1ab8981bc6aec8d86166658be3b58efa1b7c659c5e9c630aae6396f","ssdeep":"","tlshash":"2021222bf0f4343e610a99e9607f5569b13a70a4cb440744fbdf64f83730095ae3ab65","first_seen":"2026-08-10T18:28:18.000302Z","last_seen":"2026-08-10T18:48:38.849617Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingReviews-Br_su98X.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.690Z","timestamp":1786387664690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingReviews-Br_su98X.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 449\r\ncf-ray: a28f3405df2fd406-FRA\r\ncf-cache-status: HIT\r\nage: 2711660\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 14:58:39 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:892,t24\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":1288,"mime_type":"text/css","magic":"ASCII text, with very long lines (1126)","md5":"03b57007be8189fe0cd97b8d27f0fe17","sha1":"e5723095bf5bc5aa3adcabfc85486ec9ddd7efd5","sha256":"6e4be5a0d99c6b00f579bc5bf435b1b0cf65b7cad25d44767deeb6682ff5a395","sha512":"508dc531a5246199ffe05afdcf3d70c3a1292062565e081670ac6e9ccc28d7a2a3d859ecafc164a19612e7f7a50b6069407993182a1a033b7df912f3b9a70654","ssdeep":"","tlshash":"0221c8514220112977cbb03be76b970a499cb963ea9b40ab3000983c82823f79f690e0","first_seen":"2026-05-10T06:59:24.552962Z","last_seen":"2026-08-10T18:48:38.819947Z","times_seen":9,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/landing-BOVSBFrY.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.670Z","timestamp":1786387664670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/landing-BOVSBFrY.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 257\r\ncf-ray: a28f34057d0c99ed-CDG\r\ncf-cache-status: HIT\r\nage: 1175938\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 27 Jul 2026 17:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: BcQSMchFFj:37666,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":395,"size_decoded":1099,"mime_type":"text/css","magic":"ASCII text, with very long lines (394)","md5":"9090dfb997e073d715e261dfc94af786","sha1":"72fcf53c1536508e722732da92aca8434edecee3","sha256":"6cd481271460a7758fdf3dadfebdb16cc2756b62b4886bd1a8be87d4cc8a0ab2","sha512":"a9e040cc8891ac9bff32a62ffdba65e9606fdf5120b8eeacaa2ca3e0537fad01cb8e9514f754bca91162b63104f3fc23ffc06244e44740bafbc75e5dadecdb0c","ssdeep":"","tlshash":"a2e0a385c3040535dcffdb5097ed772f61605121898700fdd182331cdac67a395e105b","first_seen":"2026-05-10T06:59:24.298577Z","last_seen":"2026-08-10T18:48:38.831641Z","times_seen":7,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Search-CJDvivX5.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.195Z","timestamp":1786387668195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Search-CJDvivX5.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Search-CJDvivX5.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/FormControlWrapper-BVV8wBEt.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.328Z","timestamp":1786387668328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/FormControlWrapper-BVV8wBEt.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 546\r\ncf-ray: a28f3405fce6368b-FRA\r\ncf-cache-status: HIT\r\nage: 3310202\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Thu, 02 Jul 2026 14:35:26 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47874,t17\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1747,"size_decoded":1387,"mime_type":"text/css","magic":"ASCII text, with very long lines (1746)","md5":"a5e27355f2ca7a89375564cafb8ed2c6","sha1":"6203dca81573ceaec8838d4fc2b98244108f1cc8","sha256":"01cf831179d5d6949731b5ee854218a665b66dd1d51b76917f6ddb0d23c5e67e","sha512":"9c962c9a8af8c0cc4aef394cf4e07a8941e1d0e3de2d50480f661a6e05a6331c409e221d2185d16e1af395a9f04042738226647143ecdb9eeac3011ff70f8c77","ssdeep":"","tlshash":"2231224fb260c63df93ba66a07dad26b02091926e74206d7f807b02187c73f24633685","first_seen":"2026-05-31T11:11:56.075405Z","last_seen":"2026-08-10T18:48:38.80405Z","times_seen":7,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/BaseBlock-D8czzRx4.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.336Z","timestamp":1786387668336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/BaseBlock-D8czzRx4.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 487\r\ncf-ray: a28f3405dc1c371c-FRA\r\ncf-cache-status: HIT\r\nage: 2888108\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 10:36:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jeySHQyKxh:16,t17\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1859,"size_decoded":1325,"mime_type":"text/css","magic":"ASCII text, with very long lines (1858)","md5":"638cc0085aba90e1601887adcaaa60a9","sha1":"1bd50a2199dfb6e231a04462692d8cec9a89fc04","sha256":"a868d79cf70d5b8099f85f678b53d0ff5a6c6e5323b47ea99ce399bf0a1e1339","sha512":"5ba2358ef2018ff228f778b79a4cf167081bd9c72359d6b7b9f117b5933637da9117f8a5ba4e6fceb1ceb1c864742afe5ba62e7342628c9ffec6db393a04e5de","ssdeep":"","tlshash":"6c31c38bb129b639f82fd01ac6b8124c61591119864f70e7d451722d03fb3eb2d7326a","first_seen":"2026-05-31T11:11:55.669095Z","last_seen":"2026-08-10T18:48:38.661286Z","times_seen":7,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Popover-BCKbS1wl.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.861Z","timestamp":1786387664861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Popover-BCKbS1wl.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 535\r\ncf-ray: a28e9390ad27090f-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:7747,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":892,"size_decoded":1379,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (847)","md5":"b7e35e3d2f2a69fa39b6e6fe6f611d10","sha1":"9278ac9e8a1f9c770b82cd5f17427c79d56f8f08","sha256":"542f99f4d60e71e8bed6ebc066527c1a0391637d2a966590f175d74688db6ff0","sha512":"351955fc9777b4042dc0d4fe44f261230b5eae49a14c84ac2efa861c33aab08a89d89f7176ef9d1227a1093801251eb321bf225be1430c86adbb599bcbc4c2de","ssdeep":"","tlshash":"7011279dacc052f8181f8df9c06e007f7319e2b9c71e0590d4b650741a67274d527f48","first_seen":"2026-08-10T18:28:18.021574Z","last_seen":"2026-08-10T18:48:38.850772Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/styles-CI18TvcY.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.953Z","timestamp":1786387664953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/styles-CI18TvcY.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 387\r\ncf-ray: a28e948b8947d2c6-FRA\r\ncf-cache-status: HIT\r\nage: 152\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VRZgCclaWe:1538,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":763,"size_decoded":1232,"mime_type":"text/javascript","magic":"ASCII text","md5":"69551faa3025c562fa352813d370de54","sha1":"f1e2ca2ae75efe758bd60da2bd1e52fcd4b8f8de","sha256":"e865cfbf024e43ebef86457c67e077f717de4ef2297c14197e908c3d5f20bba7","sha512":"33432e694320746fde48acc3b5e9450d86d4f278b3658e9243cb8304cb8fd4b1a5126957931261f833b9bab7e8fa913adb177e3a8f56271df16fd327e9c46565","ssdeep":"","tlshash":"05018946e8e3546c36235429002af2fcbd7d184453191d2453e832b03a91ef642a2d5a","first_seen":"2026-08-10T18:28:18.385276Z","last_seen":"2026-08-10T18:48:38.85195Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Spinner-DtVXxDc6.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.159Z","timestamp":1786387668159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Spinner-DtVXxDc6.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Spinner-DtVXxDc6.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Command-q5BsoKZZ.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.200Z","timestamp":1786387668200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Command-q5BsoKZZ.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Command-q5BsoKZZ.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/BaseBlock-l9ZFzsyr.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.605Z","timestamp":1786387668605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/BaseBlock-l9ZFzsyr.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1137\r\ncf-ray: a28f8669fee1dca4-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:2464,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2831,"size_decoded":1980,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2784)","md5":"ce1e3e370d8c407c44ac3439431709b8","sha1":"8f943d471c6e87846a4a4f95248d173a6324d868","sha256":"c61e9b3d1a50dbd150b606f0ce8e91bb85be969d3d9a64ce44e98c7ffd95ec23","sha512":"96fdee9bc759503b38423f1ff19271cd1ac905d0dde64993116d38a823e5db37260ae57fe1b158c8253b7cc7ba3f5e51dcef2b6f58bc8ef33612864efd698e97","ssdeep":"","tlshash":"7f512467e4f438f8741f8cedc0ba523e752da06c870a29e8e466915803a219d7a17fd3","first_seen":"2026-08-10T18:28:17.780817Z","last_seen":"2026-08-10T18:48:38.853332Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/icons-CBF0S1-q.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.708Z","timestamp":1786387668708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/icons-CBF0S1-q.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/MarketingValues-ybT39lQU.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6307\r\ncf-ray: a28f2d1d3e099a0e-AMS\r\ncf-cache-status: HIT\r\nage: 6398\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zVqkiAenNG:121,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17014,"size_decoded":7150,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (16971)","md5":"da32b7d10a62390b837098d6e5e88345","sha1":"a312dc00bd7f57e017256dbbe1e956d465320272","sha256":"5db8e644a76cd05114bc66385f671b81c1ff5a100bb4b4fda894c450b0ab30a8","sha512":"49ee1416ed9ceaf84ba1aa26ef881cf3e1238c5fc25fda299e3f68a24dd58696445e15a0c3923e1c502f9bc86284af1dc7dd42774ae31ec71e66aa08214936d9","ssdeep":"192:mWZnnZI25h4h9iTGNZE85m5/wsn5O+8ombntT4mqU0jR19VFEZ:nZ15h4OTGLEmm5/J5OFoanhMr1LG","tlshash":"a772ad2f8e8e1bfc450287a4190ff801978f99fc71bb4a5272ad517a1ac2095ec6ff15","first_seen":"2026-08-10T18:28:18.312244Z","last_seen":"2026-08-10T18:48:38.854295Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Money-vQzkScfG.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.885Z","timestamp":1786387664885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Money-vQzkScfG.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 415\r\ncf-ray: a28f8634ad0ad9d8-FRA\r\ncf-cache-status: HIT\r\nage: 155\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:3089,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":611,"size_decoded":1259,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (568)","md5":"ef92a357901c1d92d3a2e74c028e356a","sha1":"87428935c3d77e7035a53ac4455c22636caf6479","sha256":"be2dd9f18a21833c8bffd75e83a0d58f018d4cb4ca7130f44e979bfeac34663b","sha512":"e80974bb4d93a44a678d43465b006f11881556766b06fe49cba4267ac939e960d32ef203e720679336708070776c13d8dc46634801489dcc7e0943cce98c55ba","ssdeep":"","tlshash":"3df07d8590a125f5a83b4cc9d06ea187775ee1b89b160aa8999f317823200e4b60afd9","first_seen":"2026-08-10T18:28:18.023894Z","last_seen":"2026-08-10T18:48:38.855606Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Backdrop-CImOsIjY.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.194Z","timestamp":1786387668194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Backdrop-CImOsIjY.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Backdrop-CImOsIjY.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.729Z","timestamp":1786387668729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/emergency-banners.json","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.967Z","timestamp":1786387669967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/emergency-banners.json HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nX-Rel: cbbcd5c33ba171317476fbc5fbe9b33976e00d1e\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 42\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":330,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5bd0a1292b0105c450055d8b693ab8db","sha1":"2aa67c65738e954fbf469f8aa7cd11378eeed953","sha256":"42c2dff536c238c7832735a51e7e648daa077d7711dd8684fcfe8fd3de5001be","sha512":"e7efef5801e2305d261ebb04638849fbfd95fb3269aab4eec1781d96f5c1237e30f955c5a7694acb7ea95f66489b51661d8749942baef048ff3ab1b4b84f4e14","ssdeep":"","tlshash":"ae9004010c031450c4c13414400c075035f15c75c11540d0457c045ccf5454ff4c5d15","first_seen":"2025-07-07T17:44:00.158648Z","last_seen":"2026-08-10T18:48:38.856507Z","times_seen":22,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Spacer-k38gkIPd.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.828Z","timestamp":1786387664828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Spacer-k38gkIPd.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 301\r\ncf-ray: a28e939088b2dc79-FRA\r\ncf-cache-status: HIT\r\nage: 131\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: QtIEGlNvBZ:85,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383,"size_decoded":1167,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (339)","md5":"2c74cd570a7d31fda43afe10d231559e","sha1":"8a36f5be59745491f7a44d90035499f1c07f3ca5","sha256":"4690dd355e4359f97544247ed14ae598f6250cf77462f7c39cd650224e9a8878","sha512":"a53aa71f578721e3f0a544f0b329ed196058797036334ef533a5e1c04b7c597c988f5e5f654ee7e7d68f2f20446279f33931c1ff601fb30caa007907e8cdc657","ssdeep":"","tlshash":"a7e0f10a5cb02e3784366c48e3441fc626a0e7e98306315cd37444640719ae0e630f40","first_seen":"2026-08-10T18:28:18.337665Z","last_seen":"2026-08-10T18:48:38.857248Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/authentication-B8XzAnuX.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.894Z","timestamp":1786387664894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/authentication-B8XzAnuX.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5743\r\ncf-ray: a28f8634ddcbd9d8-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:3090,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18144,"size_decoded":6586,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (18092)","md5":"53e88a76af2dc4a5242ad65df2e6ab21","sha1":"dd093a926bb05e2293fde82a708e328083e866c6","sha256":"18b375edea74df3708cf0cdbab5a96beb585b32e288d6db3de9d65c17f1c6343","sha512":"1f787ab81933e6f7142e6aa68da712555b7980283d05e85cc8239871c3eb63f477716d8ddfb81a46b10a177e2176fd9410ab6a731a94e915e704bbbc8a06d205","ssdeep":"384:+44uub46V136sXEI7J14wBBWJn4NRzvHPwZNhgG:bJub/13tXrQwBoi4ZYG","tlshash":"54822c967256102f1e0c8a29e0bb5255b3f584c9ee1dc6fcb2a64d6c22504c4ff6bfb1","first_seen":"2026-08-10T18:28:17.994046Z","last_seen":"2026-08-10T18:48:38.858386Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/LandingSections-DrshC6nU.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.236Z","timestamp":1786387668236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingSections-DrshC6nU.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/LandingSections-DrshC6nU.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Hero-CKfClY-H.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.314Z","timestamp":1786387668314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Hero-CKfClY-H.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 697\r\ncf-ray: a28f3405cf240a0c-FRA\r\ncf-cache-status: HIT\r\nage: 846662\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lrHSCqsVfP:21049,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2619,"size_decoded":1537,"mime_type":"text/css","magic":"ASCII text, with very long lines (2618)","md5":"39eed5bf8105fae280fd19e17740d9be","sha1":"65febe4721acf2029984dcee7632ca57e6969b34","sha256":"dd3bbe619e783a420fa9f2cb364d61ecb188e7cdaae53eb0cfbafaddf658d8a3","sha512":"1680d36747813400528df69d3196e78399571da675e1280cb77fa676d01f0f2910dc3595a3e7a074aef1ea0312499c450284f98f7323d5769a45cc8b278f42b9","ssdeep":"","tlshash":"76512266de31b33c4d7bd6a867ef91dc31601900de6a2dfeb4c1119d43c6af28227606","first_seen":"2026-05-31T11:11:55.753071Z","last_seen":"2026-08-10T18:48:38.299751Z","times_seen":7,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/account-DLq3jeIf.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.776Z","timestamp":1786387664776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/account-DLq3jeIf.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 491\r\ncf-ray: a28f8633bac14d7a-FRA\r\ncf-cache-status: HIT\r\nage: 155\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:51730,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1191,"size_decoded":1359,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1146)","md5":"0e284fec294ef920f801f98ad4d1e09b","sha1":"db444b38385fc35348b0120f1a35143a59a267f1","sha256":"1e9a503dd3041ce6734c90cd1e3818efb421e7db56f3a10eb7a89b6683a0ee1c","sha512":"6e92fcdaea460ff09735ec76334131afc2ee13e10d71da6c88aec7c054f58c68bdd8c70d8e7d95df93ff433ea3393eadf311abecf68d27f6871ad5ae40c51af8","ssdeep":"","tlshash":"ca21f1def20038a629f9dcb8a03d071d63a068d96e2c4299d05906fd27a0961922bf37","first_seen":"2026-08-10T18:28:18.165968Z","last_seen":"2026-08-10T18:48:38.859157Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Header-DbSriKAi.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.788Z","timestamp":1786387664788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Header-DbSriKAi.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 21579\r\ncf-ray: a28f86324b67cb3f-FRA\r\ncf-cache-status: HIT\r\nage: 155\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:50,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68762,"size_decoded":22445,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (64153)","md5":"4b3bb7c308ae3a15e31df21bc3c74859","sha1":"f1890a8859dd1dfb2b019b0ed3c030f71e064532","sha256":"a9b689aa582492181ec752bfd1acf8ff495061b760b6a0f0842dcc9b7d6bacee","sha512":"1e168ca99dc336961f7f57bccb67091355a5ec41eca51239372f646d721dbfa856c641b5d324d40926b743085b953120a374ed9666f4e2333d987c30a41db311","ssdeep":"1536:xinkdCbddxmjLJ4Spz7gdgrKmFGpekCO/Ps3ow:YkdCbdzmjFrrKmFGpxCO/P9w","tlshash":"9b632c8ed0603af4f91d4cdcd17f931db72fa058da0689a4f5662d282389ac47293fd6","first_seen":"2026-08-10T18:28:18.367211Z","last_seen":"2026-08-10T18:48:38.860277Z","times_seen":2,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Badge-1_WZ-wEr.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.231Z","timestamp":1786387668231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Badge-1_WZ-wEr.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Badge-1_WZ-wEr.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/HtmlContainer-g7_oCS3Z.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.321Z","timestamp":1786387668321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/HtmlContainer-g7_oCS3Z.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 370\r\ncf-ray: a28f3405d88e4d4f-FRA\r\ncf-cache-status: HIT\r\nage: 2909141\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 10:36:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50074,t19\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":651,"size_decoded":1213,"mime_type":"text/css","magic":"ASCII text, with very long lines (650)","md5":"142d540cc5de9225a32341fdb5eaa0f7","sha1":"e2249c3f6b1eb5675929df6b6246a4b9c7ce78a2","sha256":"f756f4b4ef38bab073099041d038aa8c4240190b3485843f8dc90a0d3af56ce4","sha512":"790e68103b86a8eb59438549cc95cf07e7d90ee308224bf902d73e6f0b4a7ac80106fd9959c844b887c96f232e973e28b13a9ecfc6b006fb361a910644c1cb58","ssdeep":"","tlshash":"bcf0c074ab20d37cdd36942e7798ba8964805807c40769e3d492724182c7b631a15205","first_seen":"2026-05-10T06:59:24.609589Z","last_seen":"2026-08-10T18:48:38.77363Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/PreferencesModal-Bl8q8E4o.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.331Z","timestamp":1786387669331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/PreferencesModal-Bl8q8E4o.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/Header-DbSriKAi.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2704\r\ncf-ray: a28f86629c94a93b-FRA\r\ncf-cache-status: HIT\r\nage: 148\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:10079,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8649,"size_decoded":3573,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8595)","md5":"6bb886e47369f4b495c7141ad70c0a5d","sha1":"6e3b34bb62d07194c40eca46f7f7c6ee561e2e2a","sha256":"857f7c785fd7e38bb6fc749b3e103c01eb06756322486cda293c0e0d95d3f4e2","sha512":"af546dd0530f351253ee1fa9fa356146ffbb35a8f7f408bd3ff3417da33b9de038d6c50a673c0c7d23100d6866bd1078732452e9d12a9bee6fe637e67b7a748a","ssdeep":"96:hB7+P4K55hu3qbUQFMyooC1XRmXhGNc9ic9lc9Mgt6lxOjZD+2c7qH+/:43SruftE04a9irNjpuH/","tlshash":"a202c71ee05066f8f23b4888a017a01d2b3bc4c5cb1a64f2f6a92c5817e56e1f55efd3","first_seen":"2026-08-10T18:28:17.826587Z","last_seen":"2026-08-10T18:48:38.86148Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:48:09.701Z","timestamp":1786387689701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:48:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/PageContainer-C9Sx0q1c.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.645Z","timestamp":1786387664645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/PageContainer-C9Sx0q1c.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 300\r\ncf-ray: a28f34056d57360c-FRA\r\ncf-cache-status: HIT\r\nage: 2724388\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 14:58:39 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NUSuistqZq:3,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":698,"size_decoded":1139,"mime_type":"text/css","magic":"ASCII text, with very long lines (697)","md5":"193be1f3fffb8eafad4fb312d43ff444","sha1":"44d748cc6a48ac59741382f22f06466be0e25839","sha256":"e6ea861134697a89b998a390b58dba4c51fae0eeabf729a292ebdb4b9599e075","sha512":"6ccfb74629c76d7bb2c1f6af9a9c2c2683f6150e2b89405594838cc56469df9b6873583d4f85579ec05424aa008c122d3dc873afe2f8a6c9c76f88c223227dc7","ssdeep":"","tlshash":"bd01f788bb14f679dd0fc298a99a59ad52487315fb4a15e5f620532881c83e1d43e8a8","first_seen":"2026-05-31T11:11:55.613389Z","last_seen":"2026-08-10T18:48:38.791177Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Popover-C6488GXa.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.308Z","timestamp":1786387668308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Popover-C6488GXa.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 314\r\ncf-ray: a28f340579b1db07-FRA\r\ncf-cache-status: HIT\r\nage: 2397932\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 13 Jul 2026 10:25:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:916,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":558,"size_decoded":1155,"mime_type":"text/css","magic":"ASCII text, with very long lines (557)","md5":"cadea627c3efba038d9d296edd3af1a6","sha1":"cb72603b121361bffd1dab5008a7e6e3ddd2529a","sha256":"ba638d978f434ef899bb950f74e4a98214087832a2c4189aee97ae910c80af63","sha512":"316b6b6edb8034bfea079d5ebb770ccef79032e8d2196b23fa217c4075ef7f7dc952a5214446f63cdf8ac6413744a4fc2e514507d5ec886214b87b2f9d4689fd","ssdeep":"","tlshash":"8bf04cb9e711a5bfad1d642c6b4cb5ca1556b1b08c4301f3fc82a12882c67e45952609","first_seen":"2026-04-30T03:12:06.138792Z","last_seen":"2026-08-10T18:48:38.82366Z","times_seen":14,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SupportedCountriesModal-DCJdmF7S.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.684Z","timestamp":1786387664684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SupportedCountriesModal-DCJdmF7S.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 277\r\ncf-ray: a28f3405dbc2dbea-FRA\r\ncf-cache-status: HIT\r\nage: 1063533\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Tue, 28 Jul 2026 22:15:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NAQTomTnik:1462,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":421,"size_decoded":1119,"mime_type":"text/css","magic":"ASCII text, with very long lines (420)","md5":"e3a15eccb89ffec5b43898372f759752","sha1":"fcac43debdb7faeb492a55213d48f76229d06367","sha256":"0baf30a6cb3e86b9e8c934cba542e14c2f631b2291fd158b165df78d5553d02e","sha512":"f06838ebbb3f35f82b20499d2620dbbb8c482d4e412ba8d2f79e6ef1c27e1cabd7aea90172cad4c3095b84777ad6895468ec209816101c9084a51a082fa42a8e","ssdeep":"","tlshash":"a9e05c99e14c633d9c7b9316229f989e30408a26ce1300e3fa94121487c6ba15c62058","first_seen":"2026-05-31T11:11:55.922006Z","last_seen":"2026-08-10T18:48:38.413575Z","times_seen":7,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/account-C1ylXwxv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.785Z","timestamp":1786387664785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/account-C1ylXwxv.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 723\r\ncf-ray: a28f8633c988e7ba-FRA\r\ncf-cache-status: HIT\r\nage: 155\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:260,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2689,"size_decoded":1564,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2644)","md5":"52e0a0b09ab5e80989b3e63df39ae03b","sha1":"ca24f7824b71baea22484924e72d15739a9ad740","sha256":"2b34c03a7e87b8a9ab1bd49407c9778b6fed6f2ec944ae8d5589a269919a3402","sha512":"8bc15bff86828a0c14f42dcaac006e249bfd2613a4d4be725fcf7afc002990c64a9068165e6c120050819aaf711ae59965766ad9a184e3a8e80c450d17cbb771","ssdeep":"","tlshash":"94512196e4bd94cb4e4a5b25d6edbb8cadb1801eb2b3852cf6c48f5c1a4c3427601f43","first_seen":"2026-08-10T18:28:18.026335Z","last_seen":"2026-08-10T18:48:38.862569Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/route-helpers-DUf3Vpb-.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.890Z","timestamp":1786387664890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/route-helpers-DUf3Vpb-.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 619\r\ncf-ray: a28e93d228a7b240-FRA\r\ncf-cache-status: HIT\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lrHSCqsVfP:19201,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":972,"size_decoded":1489,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (921)","md5":"67ba098da2b298f99163179f5e4ffe43","sha1":"6390107247ac6273bff2fa7a71906a0be485ea16","sha256":"e43e711bcd0b6d9c4de2338c88db2317ffe52f331b8c794e557af48e64c5d8b1","sha512":"df9ec487d9a53f5c0299f4e27cac1e65bcfb6545befabb91d4a0cdee573fa239628b46669b7f3aeba5d5c36d2bdfb689548be7fba665a6f29fad2370a0370226","ssdeep":"","tlshash":"a911e1daf4a92d3862f40892902b9316a3747959b64c1442b07b58c6633294e4bebf7d","first_seen":"2026-08-10T18:28:18.032688Z","last_seen":"2026-08-10T18:48:38.863276Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/FormControlWrapper-BVV8wBEt.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.202Z","timestamp":1786387668202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/FormControlWrapper-BVV8wBEt.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/FormControlWrapper-BVV8wBEt.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CtaLanding-nL8S_QwI.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.693Z","timestamp":1786387664693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CtaLanding-nL8S_QwI.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 814\r\ncf-ray: a28f3405d81e382c-FRA\r\ncf-cache-status: HIT\r\nage: 846662\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: bjtPbufxKh:24542,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3371,"size_decoded":1654,"mime_type":"text/css","magic":"ASCII text, with very long lines (3370)","md5":"fcb71b0b9bd0cd5df7c4e7567c904b5b","sha1":"236005e9c42a4f87c6d60b912206cf0a454f7521","sha256":"aa8e7842f1f538c69ab904e8a6b09d591daeac0c24d4b5f073ee3393386bfc15","sha512":"c3df221d913f02179e4537a076f22fec5d8c1fb0a759c34e872a3f45d05d8a250169b8a650a1f333eab793911ce1139d50333f0518a2edd66bc35b2f8d7c38e8","ssdeep":"","tlshash":"9e61dd99a1d2e37dac27e02965fe238c43d55129cbcb75deb834b26c43c72e2583b605","first_seen":"2026-05-31T11:11:55.932445Z","last_seen":"2026-08-10T18:48:38.554254Z","times_seen":7,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-CCm45mcO.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.883Z","timestamp":1786387664883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-CCm45mcO.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5094\r\ncf-ray: a28e93d10ce9371f-FRA\r\ncf-cache-status: HIT\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47387,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18058,"size_decoded":5939,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18016)","md5":"31a3bf34ea029d8e738d93f698197e60","sha1":"957a6b9c5bd8e65def7b4d0b49f405c40dde482e","sha256":"7f912f12be747acc649ad553933028e8c1997916000ce99b9e6345c75004dfce","sha512":"4154983b2c0bb0a1809f5e6097c1b447987afd757763eccfcbae3b966bb79913a6232c6bc5291c6d7c5d8f77046d2aed6e37c2295e192c12e50506e6214a7a30","ssdeep":"384:0qu9zKJpTKMAFtKvRlK6ahpd/6YjPVPW8rBMjqne6CBovWtXFW5NMaKPypJ/nrwR:0DcxL6bjnFlnd6laHJ/ECZ/sVJ/ECl","tlshash":"8882b8ee609675f0e79cc455833bd43d6f2a5994300e4620f97a8d2c239e290f2dbfa5","first_seen":"2026-08-10T18:28:18.04662Z","last_seen":"2026-08-10T18:48:38.864222Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/stringify-BbrQf6M6.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.935Z","timestamp":1786387664935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/stringify-BbrQf6M6.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 153\r\ncf-ray: a2750d2fd984eded-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: YmdVlemlyZ:27,t27\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":183,"size_decoded":984,"mime_type":"text/javascript","magic":"ASCII text","md5":"5a73ba90d22b81d6cdf70cc134192874","sha1":"6bf7edcf3311f3e55b989923eada64a2757d77ce","sha256":"b0c29ca610a64939453a13a5a66a94e14828e7ccbbd186ce04a4ab67e96499e2","sha512":"b86b8a9a361ec367a97aa5eec0088c9947c358ec16d0588747f4244d3368fef0677fdca678bd402105400a28534afc24293615edf2d033b11d6c215c5425aa22","ssdeep":"","tlshash":"9dc080d678f0b5e56b7d9b3c00c6c44de43f90dc93750a54f14540727555c455076f25","first_seen":"2026-08-10T18:28:18.162465Z","last_seen":"2026-08-10T18:48:38.86493Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/wallet-DDbO7IeU.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.183Z","timestamp":1786387668183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/wallet-DDbO7IeU.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/wallet-DDbO7IeU.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.560Z","timestamp":1786387669560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SvgImg-Cvbt67L4.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.858Z","timestamp":1786387664858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SvgImg-Cvbt67L4.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 231\r\ncf-ray: a28e93902f359736-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47379,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":265,"size_decoded":1077,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"c312903dbcde154e4f14dc4d415d28d2","sha1":"ee7b05a190fbc8d2f2e5b07448be419470a1e590","sha256":"9ed24125c08fff0088abe7922ff0b2a59b5c8993492be5c2abeaee62c9822cdf","sha512":"e6b2b56e013d12624b6623429953caf252a6e63b5ea76a16ac765318e2a495da8a6d5f4ffc67ff784e57cbaf8c1b183bf8a18b71c69caa4af97f570b0c4ba48b","ssdeep":"","tlshash":"39d02b5aadb8783cc0253c0a902b59af7625e246775255588651aa7d02108c17a71564","first_seen":"2026-08-10T18:28:18.11402Z","last_seen":"2026-08-10T18:48:38.865555Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/anonymous/cio/segments/58f3e67b-2f4a-491c-8713-d85157c996e7","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.694Z","timestamp":1786387665694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/anonymous/cio/segments/58f3e67b-2f4a-491c-8713-d85157c996e7 HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nX-Rel: cbbcd5c33ba171317476fbc5fbe9b33976e00d1e\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15,"size_decoded":303,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"aacff67672cfe324f0154bc959e8a2bb","sha1":"1eb1cafe0d476d52f36dba0269373e7999e8f2ec","sha256":"cf84482b9efdd9291a36643471c6e09c79a69623f87a7b61265b660e54e69eaf","sha512":"247e078f28274a6012204e3fd2bf8b47bc2195caacbe5ad52c36c784037c45e426cff4ef66a645b475f8c1d5f1553df99ab8ddac750fa8deb62b81a5e2f33741","ssdeep":"","tlshash":"7560000c0030000300000003c00f3003003000300c3000300cf030c00300f000ccc003","first_seen":"2025-07-11T23:09:21.255864Z","last_seen":"2026-08-10T18:48:38.866572Z","times_seen":29,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/LandingSections-DrshC6nU.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.372Z","timestamp":1786387668372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/LandingSections-DrshC6nU.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 7434\r\ncf-ray: a1e3a6ac3e96974b-FRA\r\ncf-cache-status: MISS\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 20 Jul 2026 17:20:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CdMlheUDhx:19329,t53\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40446,"size_decoded":8263,"mime_type":"text/css","magic":"ASCII text, with very long lines (40445)","md5":"d96ea6dc6d1b6213cb71a575d3ca0727","sha1":"7f8579d7081fbe33127cc9f778e25ecc31445eb6","sha256":"7b4945dea3f415d36dfd4cce3dab160a395a6a4e63f266f8033032bc2e79ca79","sha512":"d74ff7f58f03be42fe1a51dfdc6ddb6cc843ff207c20d92780e100ec9d8f2a6404818b386d2e51a6d267cbac8a06b899bdc68f974cbf3f0715a657e2a3a2fb5c","ssdeep":"384:A15PHhHo1MAEZxzol5Xs2J6zGqGwlTDR1LpkVMtRV45uSoWJuAl57:APPu1M+s5TDRzkVMtXIoBg7","tlshash":"390385e51a11b23c9c7ff52493fe636c52286405ef9b16eea415722607cbbf20d3364a","first_seen":"2026-08-10T18:28:18.374704Z","last_seen":"2026-08-10T18:48:38.438139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CurrencyCombobox-ZSClh5ow.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.379Z","timestamp":1786387669379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CurrencyCombobox-ZSClh5ow.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/PreferencesModal-Bl8q8E4o.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 378\r\ncf-ray: a28f86636fa2f4e5-FRA\r\ncf-cache-status: HIT\r\nage: 148\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:61,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":624,"size_decoded":1245,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (570)","md5":"0ed43758a8f2ed5a5359e47493b838d4","sha1":"a96076077083aee06b89875bb53beca0aca83bc6","sha256":"c6c2e46a0462ad7f4c418ee525d75f7185e3955c79f516d3a825656a8d561502","sha512":"0d2b22df83edcdc2d6037f52dd4508f61e2bb35281aaeafd81da84e3e2e80c325ca631cbe8e995f7969a45127fd3247dd7c374b6d17b218eb7dc02b77b580fec","ssdeep":"","tlshash":"c9f0024db09039fcd62b34a2807c95412274e2882a890ce5d06f9dac9b38922d437eba","first_seen":"2026-08-10T18:28:18.006275Z","last_seen":"2026-08-10T18:48:38.867191Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/constants-DZxgRpCO.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.905Z","timestamp":1786387664905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/constants-DZxgRpCO.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2000\r\ncf-ray: a2750d2eff170054-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: YmdVlemlyZ:23,t27\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4958,"size_decoded":2832,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (4911)","md5":"1dfddc70ef7aefec70fbc99deef1f433","sha1":"e149af1244e31188c54c9ba929ecb877d4aeec04","sha256":"c3e85713c190d0f45f5452b89231f25a1f27195b247cae30440799f0ad081754","sha512":"3afa43cc8a193e8f031df3dbb136e52a5131abf2a51b6e677d35e00128c945de39216c451ed958db7a3f899ed3c5f12387e57de948c65a7b3a1ae64ffce43352","ssdeep":"96:PZ1///FwrH/co4/muySjY7ljTvnSNl0cV9F59ieQEO80R9mRLoyggo:PZ164AuViTSNl0cVziT8k9mvggo","tlshash":"7fa175cbd06c85b7b686b2d4a1502607e07967c4887cc9e8b4946f0c02ee95fe7cfd59","first_seen":"2026-08-10T18:28:17.710507Z","last_seen":"2026-08-10T18:48:38.868067Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/HeroLanding-ChnVGYSg.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.216Z","timestamp":1786387668216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/HeroLanding-ChnVGYSg.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/HeroLanding-ChnVGYSg.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/index-D4USwkjV.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.755Z","timestamp":1786387669755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/index-D4USwkjV.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 1074\r\ncf-ray: a28f3405fa2b53ad-CDG\r\ncf-cache-status: HIT\r\nage: 1063533\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Tue, 28 Jul 2026 22:15:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: oLTMcizddB:425,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3977,"size_decoded":1913,"mime_type":"text/css","magic":"ASCII text, with very long lines (3976)","md5":"ba624d9baee7055e8e88a217e4521cd4","sha1":"01dfed37bdf975a553591682313b55639b7af282","sha256":"e122c072c813e1208f119cd0bc8cefb0a63a577568010cdf0603375472aa4969","sha512":"315399cbdcbc3f0678fdf78f8f3b9cf8834c4211776d3f1e2c02315e0a8891b2f8a20e71b7111bd87077e94e957cd5825df15e2eaa7f528cd326f14a4cd42c6b","ssdeep":"","tlshash":"40812f99925da23eac6be226aaec126d50366530df7306e9f05e312746c77f30973708","first_seen":"2026-05-31T11:11:56.08268Z","last_seen":"2026-08-10T18:48:38.640579Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/CurrencyCombobox-FBl24MnR.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.707Z","timestamp":1786387664707,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CurrencyCombobox-FBl24MnR.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 102\r\ncf-ray: a204acdc5bf898db-VIE\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Fri, 24 Jul 2026 17:34:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: JMFviQVQhQ:345,t33\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117,"size_decoded":944,"mime_type":"text/css","magic":"ASCII text","md5":"4960f307b274635f3a5d849a1b8f6110","sha1":"613eeebc91f77e747af357f43250e6a540c9ba18","sha256":"9cda794746c85c897f3825fd9ee419f7c6a3eac5b59e493e1379e1222ebf1d20","sha512":"8bea08686c58933cefe7397a84473d7502f10735c6cebb8846dbb930d6d442f8904cc2ee29d10485a5762af2e8a117fe90af5fa44e1e6de4020482bfe976b75f","ssdeep":"","tlshash":"61b092198224a138c5465716b5e2f84fb08194198a4380dafdc23649e289b4ef4962d1","first_seen":"2026-08-10T18:28:17.85341Z","last_seen":"2026-08-10T18:48:38.781056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/urlstructure-CaQgsdsi.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.789Z","timestamp":1786387664789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/urlstructure-CaQgsdsi.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1882\r\ncf-ray: a28e938fcffc14c6-CDG\r\ncf-cache-status: HIT\r\nage: 131\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:13:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tNeegAMkVR:76,t5\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4657,"size_decoded":2747,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4607)","md5":"ffe001d991927a5c3fafa65806d97c98","sha1":"288c7904354f47e6621a8ead0f6d5273c015de07","sha256":"a1ba504123610ae35c20aabf94e627c3c796c966858b93660c3336c1a7a28730","sha512":"3c1b3d3a5396fe5a950e4c4afac5b984540766b413f718a4cb7b74646426d249cf775050192a2c009dba1e8589d49965807dbfbe768f46c477af816a5ee589d7","ssdeep":"96:IeCnQpBAXjDxjcSO6Wm47OGYiPj0QxS136SbdrfDvPFFfO:IfnZcSHM7OGMt6SbdrLvPy","tlshash":"9fa1a5ddf6fdb0a633e55275c0f7086ef12c2591442a5c94b196ee85a820adc03fba36","first_seen":"2026-08-10T18:28:18.376575Z","last_seen":"2026-08-10T18:48:38.869351Z","times_seen":2,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/clock-C-fp6A8y.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.597Z","timestamp":1786387668597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/clock-C-fp6A8y.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 359\r\ncf-ray: a28f2d20f88a9274-FRA\r\ncf-cache-status: HIT\r\nage: 6399\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TjzYJcJEoJ:868,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":481,"size_decoded":1203,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (438)","md5":"966c40f297f37aa23608faea204d257b","sha1":"b959fb065ca4ed41bbca74c5e7abf03820034702","sha256":"0adc70e4eec1cadd22b64a45dcc78289db5b64b5e70863b7e66835ae97188a39","sha512":"2f7194b5728f49df0a2ac972e14807525e88fafd4bb7a362b532dd6cf64db2f02e70b86e34674e6126799befe7e13a2fa2fb2e5e6d5d085b599f971010d34a2e","ssdeep":"","tlshash":"86f09e4ede781cbcb41a8c8cbe75a18eba26d272af411818d69c15f053041d05732bc1","first_seen":"2026-08-10T18:28:17.917773Z","last_seen":"2026-08-10T18:48:38.870516Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/MarketingValues-ybT39lQU.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.598Z","timestamp":1786387668598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/MarketingValues-ybT39lQU.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 580\r\ncf-ray: a28f8669caade866-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:67,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1136,"size_decoded":1421,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1083)","md5":"f3783273bf2a926ff0bb74d42cbcbba6","sha1":"a203bb6869184f0f55fd1e147a90daf3060886ac","sha256":"3f9ed16b2cc3ce1f0462488771b60be4f3b1d276691ad17e0daa048f00673673","sha512":"c0c1aadf824212a1d93c1bb898f5f793f94faf64d379c1d64c40dd864f63b568a62d78abd4f05b1377239f89630a98f995cb7a15d9861da664d1d727b393df30","ssdeep":"","tlshash":"7521114ae03824fd83178cecc099447ef73680684b8865fcf5da78652321498f12bf5e","first_seen":"2026-08-10T18:28:18.071375Z","last_seen":"2026-08-10T18:48:38.871348Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Notifications-Ccjm7GPx.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.912Z","timestamp":1786387668912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Notifications-Ccjm7GPx.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 265\r\ncf-ray: a28f3405ab9c9b98-FRA\r\ncf-cache-status: HIT\r\nage: 2882228\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 10:36:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:9284,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":379,"size_decoded":1107,"mime_type":"text/css","magic":"ASCII text, with very long lines (378)","md5":"a29503694fb9d88ec8caa574fee83240","sha1":"3b6d82d942bd74b4013b48d4107d4cabb6562dc8","sha256":"f9125271ce5aa2d892fcefeba8acbb7e439621e7bf483911c545c1bd8acc9753","sha512":"825391b3b23cae83bed81a76c64c212bbf5cfe91f94eac43eef08d31f057eeb76aa51e8c8946df8ea9769b10c23697f2187a4094bbc564631e41aa2108456ac9","ssdeep":"","tlshash":"10e02b5506149024ccabd102a1d6758a936c88149f1b07cbf558b644c6cfbda2466455","first_seen":"2026-05-31T11:11:55.603402Z","last_seen":"2026-08-10T18:48:38.872396Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/credit-card-BHevS6Uw.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.638Z","timestamp":1786387664638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/credit-card-BHevS6Uw.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 628\r\ncf-ray: a28f34056bca65aa-FRA\r\ncf-cache-status: HIT\r\nage: 2632216\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: zh-Hans\r\nlast-modified: Fri, 10 Jul 2026 14:05:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50071,t29\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2186,"size_decoded":1474,"mime_type":"text/css","magic":"ASCII text, with very long lines (2185)","md5":"d9ea22ecc2281752e002e44bd9e1f57e","sha1":"e4658e68c87bd197da4ff3deeab5911b5fbc5c34","sha256":"ba4fcf1f8057c232713b27a8497203e5921eed0faa49982cf2582ce9897e8a51","sha512":"ddcaddc3e9f8a6f9e739d2bca444cd6d0a743a691b873b884107cb1aa7dde73cd44085f61b658dfd282a283afce5464af2244ed537096846b812359acab4a65a","ssdeep":"","tlshash":"fd41cfe4a290b23e7cb7e6351ba8a6494410500cdd1b4bf4e11eb5d04ecabf15ae3b26","first_seen":"2026-05-04T21:33:06.327417Z","last_seen":"2026-08-10T18:48:38.371788Z","times_seen":13,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Notifications-Ccjm7GPx.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.667Z","timestamp":1786387664667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Notifications-Ccjm7GPx.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 265\r\ncf-ray: a28f3405ab9c9b98-FRA\r\ncf-cache-status: HIT\r\nage: 2882228\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Tue, 07 Jul 2026 10:36:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:9284,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":379,"size_decoded":1107,"mime_type":"text/css","magic":"ASCII text, with very long lines (378)","md5":"a29503694fb9d88ec8caa574fee83240","sha1":"3b6d82d942bd74b4013b48d4107d4cabb6562dc8","sha256":"f9125271ce5aa2d892fcefeba8acbb7e439621e7bf483911c545c1bd8acc9753","sha512":"825391b3b23cae83bed81a76c64c212bbf5cfe91f94eac43eef08d31f057eeb76aa51e8c8946df8ea9769b10c23697f2187a4094bbc564631e41aa2108456ac9","ssdeep":"","tlshash":"10e02b5506149024ccabd102a1d6758a936c88149f1b07cbf558b644c6cfbda2466455","first_seen":"2026-05-31T11:11:55.603402Z","last_seen":"2026-08-10T18:48:38.872396Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/chevron-down-Ag7Bcgkk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.862Z","timestamp":1786387664862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/chevron-down-Ag7Bcgkk.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 328\r\ncf-ray: a28e939108473616-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47384,t14\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":440,"size_decoded":1174,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (390)","md5":"e1d084ea81fe2e3dcd31a8b298ec7ebb","sha1":"2938414d3ef4287eb787271bb2acc51705e13244","sha256":"1c5b6a17bb44582b03ef74709537ac7d512bd105ab92a395288b74f08e05aaa7","sha512":"2b62eeb36e2d3a37ff6ec16f40787486f768528ecb23abea2c90d622d5fdbc5b61c534efb95591ffdc3ca312e781581c6c36ddc5293c5fe7a7213aff84cefa65","ssdeep":"","tlshash":"69f0dc0edfb42c3c901e4ccda6aab68fa9a6d2a0af452508e34c007413000c06379bc0","first_seen":"2026-08-10T18:28:17.718069Z","last_seen":"2026-08-10T18:48:38.873142Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/DrawerSearchableList-WnhewGCy.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.378Z","timestamp":1786387669378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/DrawerSearchableList-WnhewGCy.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/PreferencesModal-Bl8q8E4o.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 14898\r\ncf-ray: a28f86636bd9f47f-FRA\r\ncf-cache-status: HIT\r\nage: 148\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:268,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50264,"size_decoded":15742,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28480)","md5":"37bcdde66e37b3e774b97002974e078b","sha1":"baff2c65b116e2b6ebe7e178896376493e6e4155","sha256":"1f46e294bcc3614b8037ad6b7f860c98f3da3624306c54d7de18545c6bfe5c69","sha512":"d5f4214123536f45406f6dc7e93643b4bee129abf8efbf55f90a884cde14cdefd50a7cfc9c027ffba52cd0b8c5c40fbf7ca3d6633a940a3ae5d00ee7d7c26209","ssdeep":"768:irkvGWZ31nwD2HqCqwsqqWk5i9q/5TFL+9Kf94X:1CD2HqCqLq9k5iq51+9vX","tlshash":"7c330a9532587830d28f4156a2f7ca2c3b3a3795344a2404f0bd6c6f3a69591f3e6f97","first_seen":"2026-08-10T18:28:17.728609Z","last_seen":"2026-08-10T18:48:38.874061Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-DmKY9JrQ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.464Z","timestamp":1786387669464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-DmKY9JrQ.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/Scrollable-BUIl4HGK.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 100\r\ncf-ray: a2750d4e98e65d4c-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AGbklTsBFU:7801,t32\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110,"size_decoded":933,"mime_type":"text/javascript","magic":"ASCII text","md5":"e3d793726998e6b300722fc4e7f1e037","sha1":"8ac6764c299f1c99d8fad249a2207a7d01e11157","sha256":"da15f4e6127a35831281b48b4075ab653090dd9ab6e2ea02f6b284e0cc24776b","sha512":"791ad70b4fedf7a73774d3d97abf8e8e53e495c285ecba0c6a1d2fe2dc2e865c91955ee2f2c32e0d97f0f86d002ef394654726a5796c8d746bad898af9f8d864","ssdeep":"","tlshash":"ebb09285b4f12be8827209a9445601ba4628f486d5060214d11896ea2e746a0642cc30","first_seen":"2026-08-10T18:28:18.128803Z","last_seen":"2026-08-10T18:48:38.875102Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:48:00.696Z","timestamp":1786387680696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:48:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/NavLanding-BxRMYITu.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.697Z","timestamp":1786387664697,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/NavLanding-BxRMYITu.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 322\r\ncf-ray: a28f34063af9d285-FRA\r\ncf-cache-status: HIT\r\nage: 2975356\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 06 Jul 2026 14:38:42 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jIdbbblaYA:6,t19\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":634,"size_decoded":1161,"mime_type":"text/css","magic":"ASCII text, with very long lines (633)","md5":"ace40dd84d2accdddf3479c27abde8d0","sha1":"3333855c23c88bfc5aa98b087cf2b75a06115b63","sha256":"a3410d099b41048a823161e1ed57eaa6110babce30fbeb51a1624b13aec025bc","sha512":"80ed34830ce2e3c62d3a869d1419edaa5357f39257e5247f8e1116571e03bc00a4a2298b89525f4ae3cb50dfdda82dd1e18b48f7b347a8b250957646c5b1c781","ssdeep":"","tlshash":"c2f0dd607314427ccc3bb20447f9808ae15c5a661b8321f25a2a324481cdbb35473e2e","first_seen":"2026-05-31T11:11:55.729531Z","last_seen":"2026-08-10T18:48:38.837837Z","times_seen":7,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/SupportedCountriesModal.module-CCA4OPx-.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.787Z","timestamp":1786387668787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SupportedCountriesModal.module-CCA4OPx-.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/SupportedCountriesModal-CWtZYhz-.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 145\r\ncf-ray: a2750d490f423554-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: YmdVlemlyZ:48,t26\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170,"size_decoded":976,"mime_type":"text/javascript","magic":"ASCII text","md5":"faad1d539150435139838d20a9869404","sha1":"d07e5a740d346f1f78a994c3e587b88edf68cd0d","sha256":"c23e71f7d417b7ec3aa4b6a99be8fee32db7e6884ca5d827fc00290773f46f92","sha512":"1a8e563eecdb65d3db50eb749c1297ee6e21232b636286d543d41d66f28e407ed85e88624dbb2109566226e671bb1b3ab2a44f002f6ccb9a7a596fbb8ac1fc76","ssdeep":"","tlshash":"00c08075d47e45b830e3491f344b44b75b38e0f5c701065447411584919d949c879970","first_seen":"2026-08-10T18:28:18.330751Z","last_seen":"2026-08-10T18:48:38.875841Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Shelf-BgyBos5-.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.311Z","timestamp":1786387668311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Shelf-BgyBos5-.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 1097\r\ncf-ray: a28f3405c890371d-FRA\r\ncf-cache-status: HIT\r\nage: 5101601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: cMPZAnjOru:51,t14\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3770,"size_decoded":1936,"mime_type":"text/css","magic":"ASCII text, with very long lines (3769)","md5":"820202fb8298d2a657ac7a2ca39c46d7","sha1":"4deb0c576442bb631b27cacddbd40f892f343430","sha256":"c79cc3777e028f126151f6f60edc7c7736bfb5e9ba1b59247c3dd5c4a4b19ff4","sha512":"461041cd7bab354cbebf1a4edd4c4a08c8c9e1a5bff605ded19e5cdab6191ab063bd75cbc7c3338d1cab133e26c5fa910f145e9feafe2a0b303b7fb6c60036dc","ssdeep":"","tlshash":"ca7173d70e71523ecc9bdd24d6ad590c6248c5cdab4b20ca291ec51a89c9ff6187f748","first_seen":"2026-05-31T11:11:55.723514Z","last_seen":"2026-08-10T18:48:38.769111Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-assets.i.posthog.com/static/web-vitals.js?v=1.415.1","fqdn":"eu-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.881Z","timestamp":1786387668881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 22:16:21 GMT","end":"Wed, 14 Oct 2026 23:16:05 GMT"},"fingerprint":{"sha1":"A4:C7:89:02:89:1E:87:A4:0F:B1:DE:E2:A8:19:4F:7B:D5:1D:6A:BC","sha256":"36:85:BF:C1:16:3A:49:C9:98:16:2F:48:3A:FD:14:C0:9A:20:E0:C9:AE:CB:8C:72:55:A8:B5:4E:E6:83:5D:5C"}}},"request":{"raw":"GET /static/web-vitals.js?v=1.415.1 HTTP/1.1\r\nHost: eu-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a2912bd27b95723c-OSL\r\ncf-cache-status: REVALIDATED\r\nx-amz-version-id: xPYMWE.7kJD4qNYh1k8SU1SeD5Ilw0ol\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nx-amz-server-side-encryption: AES256\r\nlast-modified: Mon, 10 Aug 2026 09:57:04 GMT\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\naccess-control-allow-methods: POST, GET, DELETE, PUT\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nx-amz-id-2: UVAHzWYWpEdzwQIkMC+RI0FGFaAZRlVrAAEsaThWxcL7XlO7JsERFi5X3MvnynBOt0SM2wpoGZ3OSjdcbvuuYI3/hQ4M9dgF\r\nx-amz-request-id: F831HYSRK1M47GDV\r\netag: W/\"9532712f07bc7879e4860c770106d41f\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6914,"size_decoded":3553,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6874)","md5":"9532712f07bc7879e4860c770106d41f","sha1":"1d4f335927a6034a391e8b7dbdce3ed3347dcff4","sha256":"afab4cd2ddb19e4311fa5e36d4780eacd5e93c8c099675137cb843068f534d9a","sha512":"be189d6f8404bd9b85ca482d5359519e406945c053aee17f141b7414d4e7318c07f7d37aa050fdfbd9758745588866cf8ca9b642ae17c5f2ae8d5f4ce33cad79","ssdeep":"96:EaAn2sCG4Fzq4TDAlXTaWTQBdRkwPUgvRhyljTpSmVeD/DDDqRwokzjr05MDUACA:uCGlxNTtTuhvCljFl4DDGx8X0Fz0p","tlshash":"68e1e8f9ae42943512bfe6aad07a114373397792a04d419ce23eff9024ac4c5234bf76","first_seen":"2026-08-04T16:49:28.287672Z","last_seen":"2026-08-11T00:40:10.599169Z","times_seen":530,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/use-reduced-motion-Dqbo-BtS.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.815Z","timestamp":1786387664815,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/use-reduced-motion-Dqbo-BtS.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 220\r\ncf-ray: a28e93909bdbfb4e-FRA\r\ncf-cache-status: HIT\r\nage: 131\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:7745,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258,"size_decoded":1088,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"f8f4c2b9c56382e20860df7b217dd216","sha1":"8a9d84d5d382c81060e7edfaba50f85e3db2cd1e","sha256":"c718967ef0d5e1c29f5b03e8827845574413f9d118d8158c7ba272f041dbfb67","sha512":"f976268455f6619fd33936e98296014b35813e045d86f5208f8ee4c0d95960da1a7031c505db46b5e0d6b666a4092a1b6279165bf290a25b5448c2d881d1adf8","ssdeep":"","tlshash":"80d0954db8e1dd73d617045d403d7595a53571f5635453c850541030531dc52dc35e24","first_seen":"2026-08-10T18:28:18.025143Z","last_seen":"2026-08-10T18:48:38.877925Z","times_seen":2,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ImageColumnsLanding-CTesZ2wj.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.402Z","timestamp":1786387668402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ImageColumnsLanding-CTesZ2wj.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 414\r\ncf-ray: a28f3405ea97f51f-FRA\r\ncf-cache-status: HIT\r\nage: 2765674\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Thu, 09 Jul 2026 10:13:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: huhItYZPXB:2058,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":919,"size_decoded":1255,"mime_type":"text/css","magic":"ASCII text, with very long lines (918)","md5":"616b645a3dcec3566d820d3462285676","sha1":"9ddd1a4360859d4ac7d2a1a71725006a749ccb24","sha256":"30055d8315b8f83e49cea3d94420f265a18b16ced912667b63dd67ffdc9f9691","sha512":"419750e2be08b49aa6024b31dc5222059db6b130ddeb926a3a4d7be701362c6a52e4cc6495ce6395bf760fe66383498fc69a9c8da062d581279542cda9128ef4","ssdeep":"","tlshash":"f4115e554905a03d8c7ff505e3eda5edb270a704de5751f49400226443d6ff2091791b","first_seen":"2026-06-11T21:29:59.590552Z","last_seen":"2026-08-10T18:48:38.565696Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/faqItems-D4Sz4LF-.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.576Z","timestamp":1786387668576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/faqItems-D4Sz4LF-.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/json-ld-DgyWTjJP.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3038\r\ncf-ray: a28f86684fbddca4-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:2458,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11220,"size_decoded":3906,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11174)","md5":"38ae048351f9721d482ca2c3788f4f15","sha1":"5adc3c6d948e31378b4e1f4ebea0cb130dd65d1f","sha256":"fac058f39f8522f82c7a6100f717520372202a9db2179eead323ec96650673a3","sha512":"e95cf715a683ba4323ea549d0ed2b7935cf66b0db398907619d9a62ee8bf3e0bff93c1224cd2b2ffa98386673e97eb99e382136b745a34b67da7a810a847292e","ssdeep":"96:Uf4weKoSGtEDGO92LATSacGY9KW+NseuCPl+otWbuCPl+62VtWjQw4CYLtlJXCYr:Uq492LkcGYoNsapgk3hRlJ8xZLI7KZdk","tlshash":"5e324157d4bc12bb9d9554702024838bbd3f903ea0d818d69eb13058213dade6aa37ef","first_seen":"2026-08-10T18:28:18.176813Z","last_seen":"2026-08-10T18:48:38.878799Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/cloudinary-B2VcqVl7.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.606Z","timestamp":1786387668606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/cloudinary-B2VcqVl7.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 567\r\ncf-ray: a28d7e790cf85d8e-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 07:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:45735,t37\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":1401,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1028)","md5":"6b7bcadeecb00adeb1a0f8a3ceb0a615","sha1":"b49d2586533296e7e00d8f829a39641b01743561","sha256":"a748b59b3346827bd0e024e711f246d69235e25765ab2d3bfc89352e6b2e76e3","sha512":"25ddeeb6b002bbe3fef82e8233505c897488b7a5e27ba8ba4ba15398b1a1886fb317b26d29d6259bcf6d57d477f2d4944f92dd57b23c64090501c8f149519e46","ssdeep":"","tlshash":"eb1146b171d5f472c36ec55291d51849e25ffa363c4e8908b3c134ba696264088f0f30","first_seen":"2026-08-10T18:28:18.029388Z","last_seen":"2026-08-10T18:48:38.87979Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Card-B5veHcdd.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.699Z","timestamp":1786387669699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Card-B5veHcdd.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Card-B5veHcdd.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/lightning-logo-C7oEbKjP.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.943Z","timestamp":1786387664943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/lightning-logo-C7oEbKjP.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 391\r\ncf-ray: a2750d304b38eded-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: YmdVlemlyZ:29,t27\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":613,"size_decoded":1224,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (561)","md5":"7fe29a6df0a633b396634bba0dd5b920","sha1":"3c7079033c54034127b446e283219295ee5b8e06","sha256":"fe61d023f71c06e830f20a0b7163dc3628c5532b126152b397eb0c4210351a48","sha512":"aec2f3bb616b3e9957072b2c075b445a842ed34a6830b66fc9bc56cc08c65c4abac718f64cf7691598267f735a49953240547abcf5c06aaefe2416ad7ad52e7d","ssdeep":"","tlshash":"c4f047bcccf40188d4280777f79c1886e01237975f6d24e045439642239817e353ce3d","first_seen":"2026-08-10T18:28:18.322746Z","last_seen":"2026-08-10T18:48:38.880597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/landing-hero-footer-BisnBQzS.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.237Z","timestamp":1786387668237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/landing-hero-footer-BisnBQzS.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/landing-hero-footer-BisnBQzS.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Product-C26tbHVc.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.332Z","timestamp":1786387668332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Product-C26tbHVc.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 1068\r\ncf-ray: a28f3405ae5ad5a8-CDG\r\ncf-cache-status: HIT\r\nage: 983876\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: iliVLMVHfv:31083,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3629,"size_decoded":1908,"mime_type":"text/css","magic":"ASCII text, with very long lines (3628)","md5":"42b99cf24360b2b9eddf8daa6c2df89a","sha1":"0cf40a729722c52a034195f27987502e163f5f15","sha256":"f2267244de6dbdb8bcd9d3b4ab0beb6bbc18473e2550d67dfe1d059ca259ea99","sha512":"c062784f5627498180e2f90eb4e463715c852b2dcb314f35cfbfaa3d20b50f6a881f86571286a9abc9d7b94b8982773b263018320e3f6db53538d549ea74d5f1","ssdeep":"","tlshash":"f7712297c960633e4c27ea385ffae54c55380676ae2306ed7978525cb3c7fda2653400","first_seen":"2026-07-16T00:57:04.980715Z","last_seen":"2026-08-10T18:48:38.669526Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/SkipNavContent-DogOaaDH.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.870Z","timestamp":1786387668870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/SkipNavContent-DogOaaDH.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/SkipNavContent-DogOaaDH.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/es2015-BHenECUA.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.796Z","timestamp":1786387664796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/es2015-BHenECUA.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6880\r\ncf-ray: a28e9390afa73616-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ouYoNuBcFU:47382,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19746,"size_decoded":7725,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (12278)","md5":"3e1a1f70c48d835d636a6758d7dcd523","sha1":"def94c88f4984f15672320fc0035e9363ea92fbf","sha256":"d20f6493e28beb06501411cb8fcdff78ac3207656b5251db65310623a14acc37","sha512":"ab99e475bf55a9bbc4841c7bbf9407c6f8c88d63962e5f7aa049249c07440fb982d4626997fec3a2bf77eb7eb278ba4e5a3c798c16147f309b15660c920c2f33","ssdeep":"192:bkemzt9y5iMEdUEYeb68fZ+MhLHi4ZW1a+ovtF9Kp6Sq0CZQnNm259E9/NEJ0eod:9mzny5qdUs28ThLCIE6Sq0CaxnyMO5","tlshash":"4092e8d93692b530a697917a617f931af73a2989b40e4004f439dcc83e7dc81d263fad","first_seen":"2026-08-10T18:28:18.268789Z","last_seen":"2026-08-10T18:48:38.881396Z","times_seen":2,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/_patched_static/cart-trace.js?v=cart-trace-20260801","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.971Z","timestamp":1786387664971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /_patched_static/cart-trace.js?v=cart-trace-20260801 HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 10480\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10480,"size_decoded":10770,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f203fccb21993e17b417caf056a90021","sha1":"8607a6622b1ed2d1996dcffffe8516d9beb68350","sha256":"298afa75c0a58ef50fbf7e9865384dfc5dbb3af24d93f315e1a6cbc59d4d66d9","sha512":"4189eb8fa289e5a6cf80a41ec6f3bdd2cd1faf2a2cec17342094b6cc3f1665ced01be4cbf5df49d818b07f70c789ac036992ed4cdf67983b6f2d6d4d064257a3","ssdeep":"192:I0CtZJmgPO0mNtMKSCCu6KvuaNq8rbfzu4b1WkhMCJwv87JJCOCZvo8EJyKE9nHW:utI0M6Kf/5J7UMsFfZVId","tlshash":"de222fae28f350324517b0be1b8fa0857530e4a76849dd94be4c47606f964788bf2fd9","first_seen":"2026-08-10T18:28:18.15506Z","last_seen":"2026-08-10T18:48:38.882319Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/hat-glasses-Db8MNtRV.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.750Z","timestamp":1786387668750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/hat-glasses-Db8MNtRV.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/icons-CBF0S1-q.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 395\r\ncf-ray: a28f2d1ffef1d5a8-CDG\r\ncf-cache-status: HIT\r\nage: 6398\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:13:07 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: iliVLMVHfv:31058,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":644,"size_decoded":1265,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (595)","md5":"02dd3ff24708a7b6c7fd561b2ac06f9a","sha1":"168afabf05a1f92f7c47346e0054a29af3892873","sha256":"2a5e60db8c882735d3e2c33f906663cd7f2717fdf82e9c0c1a2db7c373c433fa","sha512":"6d91e2f531413795ce1635bc3fbdef624b2f8c3b1b4e77b5cf39e1a79f6f75d4dfecca6380dbe7967e72f790ae6ebda8f5d714664bdffd883e0a3586ac9e1f19","ssdeep":"","tlshash":"24f04e1f6f8e46bc490205a0780e9c025d5688fc72bf19c53194657a0bd0486dcb8fa1","first_seen":"2026-08-10T18:28:18.049548Z","last_seen":"2026-08-10T18:48:38.883867Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/check-CC2_N3nf.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.750Z","timestamp":1786387668750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/check-CC2_N3nf.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/icons-CBF0S1-q.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 155\r\ncf-ray: a28f2d1acdb09a0e-AMS\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 6397\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zVqkiAenNG:120,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167,"size_decoded":997,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"14706d783f7e1db66f910e7bbecd20eb","sha1":"f90e01e0ac19563b0dd8562d97b7a9e6043a05c6","sha256":"350f2ecf7459b02e313332fc6856de0caa4aea99dbc8d5515539bd348bf5fa93","sha512":"c09eb08906e5ba9a9c987263be5cba2a53aa071651dfd9f3045e5fed79668fdd1876c7468ee2b6b43ba6b685929ce0d422aabc0d951d4edfd68b3ef31812e613","ssdeep":"","tlshash":"00c08c7bddb56d700d49afb1605d0502ca54a09693aa8c90b280933e02a2ca6acffe14","first_seen":"2026-08-10T18:28:18.105317Z","last_seen":"2026-08-10T18:48:38.884639Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/StatusText-YL2xEzDb.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.852Z","timestamp":1786387668852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/StatusText-YL2xEzDb.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/StatusText-YL2xEzDb.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/circle-help-CGYmH4Pk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.838Z","timestamp":1786387664838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/circle-help-CGYmH4Pk.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 385\r\ncf-ray: a28e9390394ae537-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: HcKxlISubs:2244,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":539,"size_decoded":1253,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (490)","md5":"bf6d87089c17281c627b04a0cc33e0e4","sha1":"3cc0450590d32258ec2a10afa95497b90e5d089f","sha256":"5778ed8b51311f4ecc09a48b0c9ad257d0e1b0630b61336b186c7b2d7e25cff7","sha512":"b4fe1a901a1efb9e803272a384cdd2614007903176ec327298d6037ad940ed9065bd35cd9320821374846c989737a56cd9b641ccdfe356b1f45f24698cfee047","ssdeep":"","tlshash":"0af0811edaad0cbd640a4d9c7a5dd6cfba6be1a1af451514f14c247002115c09332bc1","first_seen":"2026-08-10T18:28:17.731159Z","last_seen":"2026-08-10T18:48:38.885416Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/billCountries-B9rF-oTw.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.892Z","timestamp":1786387664892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/billCountries-B9rF-oTw.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 117\r\ncf-ray: a28e93d22b3314c6-CDG\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tNeegAMkVR:83,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123,"size_decoded":957,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"46314858fef599da26ddba3992411a53","sha1":"0fb627c9ade34c8a22e9dc1307d50d17bbccad2f","sha256":"1e8ddf07325bc328bb8bd6b0a953cddc91d9d8fc868a0364d5b9c5c3b493181d","sha512":"32e175d51008a40cc367f0630827ba7c710249584a6e96f5c0c4d6e6613422336113a4f0019c50f0e60313e873615c34668b49cea434c52fe7e8c87df0987ce2","ssdeep":"","tlshash":"e0b0220aecb00cbaa02a0e8b002e0a82232828cbaaa22800b08000a00a308828030e28","first_seen":"2026-08-10T18:28:17.76255Z","last_seen":"2026-08-10T18:48:38.88628Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/solana-dark-AOe3PJWe.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.966Z","timestamp":1786387664966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/solana-dark-AOe3PJWe.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 632\r\ncf-ray: a28e948b99c1e537-FRA\r\ncf-cache-status: HIT\r\nage: 152\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: HcKxlISubs:2333,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1875,"size_decoded":1475,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1826)","md5":"80e5d67f7e540bb3c6f47e7962bc1882","sha1":"66c6491c5760c39d3bd1e7e678cc8f15856e9f3b","sha256":"1f5bb61f20dd046b706eab71158d417291bbdd06accccdd2e6b843618fa4eb52","sha512":"f6886e9029cb8e1e54e7bf6b8bb6db1c2abfde3433bcd6a5bfd4cbd5716b88e7b0747640e6e6ad71877b4981326483b2c4bd23ac88fc4f111090b52771467fe4","ssdeep":"","tlshash":"e631ef1b81a96eddf2058ca93f95541db2af1089dfe290a0be4d355451214c0f74ffe1","first_seen":"2026-08-10T18:28:17.79362Z","last_seen":"2026-08-10T18:48:38.886958Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/TrustpilotWidget-D2CAoTrL.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.198Z","timestamp":1786387668198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/TrustpilotWidget-D2CAoTrL.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/TrustpilotWidget-D2CAoTrL.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/review-V1JrYtZK.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.628Z","timestamp":1786387668628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/review-V1JrYtZK.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 712\r\ncf-ray: a28f8669ef25f47f-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:273,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1735,"size_decoded":1577,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1691)","md5":"b13cc10ead06ac017a2d9f08458af779","sha1":"7a5c55e7c2544471ebb037d9593aea4bc01384cd","sha256":"b25c28dbb13045a39977ab26a2de166cabcbff8975df45994685670da5426a72","sha512":"dcae25c26f158a0b0f1e7568813146f0714dd90f22013a06c70fc91f3d111aa9ae2c29fa469bf3274aed12774f52e944145d51bdfd9dbb2d6fc9495b35b04667","ssdeep":"","tlshash":"16311dd9f075a08c95aac629e63e92dcff347d02f8d34178e88c8e1d12205043716e0e","first_seen":"2026-08-10T18:28:18.415853Z","last_seen":"2026-08-10T18:48:38.88766Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu.i.posthog.com/i/v0/e/","fqdn":"eu.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"18.158.90.132","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:51.706Z","timestamp":1786387671706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:B5:42:B0:EF:B1:77:97:C3:FF:B8:89:87:B5:A3:F4:32:08:FE:27","sha256":"BF:C3:D3:B1:0B:53:D4:58:C2:A8:1F:37:4C:D0:F6:A2:F8:E0:1E:BB:05:FA:53:84:BA:CC:BF:1D:78:D1:F7:A5"}}},"request":{"raw":"POST /i/v0/e/ HTTP/1.1\r\nHost: eu.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: text/plain\r\nContent-Length: 1680\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2544,"data":"\u001f‹\b\u0000\u0000\u0000\u0000\u0000\u0000\u0003XëoÛ6\u0010ÿW\u0004¡\u001fZ r(Y¶%\u0005û°\u0007ºaÊ\u0001ë\u0003è\u0003\u0004%žl6\u0012©‘”c§èÿ¾£d%²­´n‹6Ž¿{òîx×Ï\u003ek\u0004½½Ÿùͦ »úŸ¹»{³Üþ“—\u0026M?½M^¼x÷ú%¼Yÿ³yû§yÙ¦û¿êýßõ›½ñŸû9³ÅÆÏÞöÛVp”A´\u0004NHÀâ¢\fV1ð ™'‹ _́Äø/å\tòÁ\u0016¤Eø\u0013ÖZU°Æ¶\u001aÜhՀ¶\u0002ŒŸ}öŸ(üðß\nÉÕ­S†ßé\u0016´\u0011J\"=$Ž”k\u003c\u0003ß_\b\r¥Ú9\"‡­(€Ú}\u0003xð\u001b˜\u001b«\u001aw`E\rwJ:êëW¿Ž)T•¥\u00014‰ ±hµFûh«+Dn¬mLvu•\u000b\u000bº¼›\u0015ª¾’ê\nä•\u0013°QÆ92:tԆٍdµS4ÂjvK[´–²uïþßêNT\u0015»Z̈÷ôà¨÷ò•\u0017’\u0019¹ö°Œ¯½û¡·Y8gä™÷;\u00147ê*\"!Á¿¡wpûª;\u001dEä!Rx2\"WL®[ԏÚA\u0006¯ÿõ'Îhƒ2Å®ƒ¸sSh\u0000I7 Ö\u001b4;$Qü@½\u0015Üb\n„QâB·\u0015pÛ(mïÁéj\u003e\u0026\u001f£+‘£’[ÈýþËøzgq¸˜…î@H4ÎÒ.¿¢Ú¬5\u000by²þ”€Ép‡(r•,çÉj¹\"³¨·ßP.Œ¥Å†I\tî*\u000b.{Â\nV‰;fQ\u0019íùýˆDˀ$AH^…I\u0016¯²8™­HôÎq\u0014J–bIÊ©\u0001c\u0006.ÕZZc’†\tqžûNŸÅÁØûbHc1,y\u0011¤y\u0002AX$‹œ\u0011’¯x1Ê×ïâ\u0019\u0015Žó’åUg›Æ\bR#8:T²Ê\u0000\"1¼t+,~£ 'pV·'0VUê\u0016a5X-\nôO¶U…\u0010Ø\u0015Ðt!\u001b4O\n\u001c\u0014s`œ\u0016•(n\u001eÑü\u0000ÌÛ5-…ÆË*Q\u00155’5f£l\u0017dcYÝ\u003cÜï2\rÓåp½\u001d£†¦b{ü¨•Åª×b½F\u0015µkMB®iw÷Nœñu½èž\rµÙÖõ0\u0004ןâÅ\u000eñƒœ•7\u0018²bë\u000b%\u001còNC¡4wŽ!\u001cËB\u00033]Å\u003c\u001cÜçwωÅ\fØÐôq/Ó¬¬ªªëf\u000f ÇÍǗì{Ú\u0003Èa\u000e‘êÛjw±]mÀ¨×8T\u00055⌫»^Nk­’3ÚÒbg꜆3L\re€âµ”†ÑŒjÕJŽ1é\u0001Ñ\u003cad˜4\rëºñ,3f­¦ÈΌùéƒ\"×;‘ëËõ¦å~ð{ÁÎA”Û‹ýàK»\t0“*Ž´¨ÿªÊà\u0000\n?ø×¥Òu6F…S(.¶3—‹ÖéÄ\u0016z#º\u0018\u001c\b\u0007kO];Á{§øÁdÎ,\u000bðÆ×\u0012¹\n\u0004€\u003e:rõæ\\RèR}|‚9çŽðá•ÃpNhÆÅ. š\u0012:еª\u001c”cn©õ@4vßQƒ çhT£0\u001f‚ƒ¥A\u0017j\u0017¢@aV\u000b™y[¦ŸŽÐø⟁ž]{Éc[\u0026*W\u0015A÷–LŠ;Á\\$­°¾!®\u0007MÈ;Tì×l’ÅFéG\r\u001a\u0004|͌^Â`Ã}º²\u001c'\u0007ع;\u0018\u0012âü\u0006/ÉÏl”\u0017µÐZ¹8µÒêý`\u0026b7˜JG\u0019tdã\u0010×[ÍÜwğæI£ŒpoHæáˆ\u0001üÚ« DI³»öpL\u001b~\u001b\u0012\"ë­0KŸ\u0026\u0011ž=Çé(jv\u0018ÂZÈ!Þ5Û\rªB;•[™‡Ïu³ó‚…St\u0017tÁ˼øŒñ,ÓÂ(N\u001cÏ7Ò#ó’Åb\n7Ê\u0000\u0014\u0016Îgó8MS’Äñ*Z.–³\frc\u0017›“ŽDÎn3ÆÛÌ\u0015ßgßê\\ؽ­º\u0001ùc³ÿa(Âg­dmeÍý\bµ\bædübÎ5ösMRDó ä‹e¸ŠÂ0\u0006æ˜n»)ø›\u003c«˜Å‹\"-â±\"p©J/zî¦X¾þø\u001ds\\²\u001a\u001csL/\nǘGֆñ‹ß\u000f\b¬°b\u000b“ƒ…pÍ_²\nŸÅ²tC=ȵ\u001b¹#r\tÚàÐàgó(ÂQë\b?ìDƒÁ¼ÕÝôìgÉü\u00189 ºñd4·%«0š2¡¬Z³q£a§zÒÊ£¡\u0010ýÿþÂ|:\u001a\u001a?~t²‡Ñ\u0012[\u0006*i솺±\u0016p@x\u0018HÏ\f0n \u003e›N»ÑŸ¤—3t=\u0010…ž7\n/g•Š»­8ZFß¡¯0†ê¶rŒ\u000bŒÁ\u0014#鉶l3Ü £nm¿8uÛÿa\u0001šœÈµ[*À=$“±íŽñu`ÅÆEÿ°ˆœ\u0002ú1\u0017aP7v\u001a\u0007®xþk¡…Q\u00165¸Éº½ó¼—$Á\nVIcÛ\rRl¼œ\u0014e^–ón74ˆÇD\u0017¥\u0018gD£UyM±)㴍\u000b²*E5ZaÜòŠ\u0005\u00018××Â\r宍¸’í\u001a,F(M¿\u003c÷‡ÿd\bã„|Ál4®¢˜Z\u003e\u0017!.Ÿówþ—ÿ\u0001úrí±¢\u0011\u0000\u0000"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 18:47:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://biterfz.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 22\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":420,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-08-11T01:03:22.2501Z","times_seen":44155,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:52.689Z","timestamp":1786387672689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/search-C8-nSFB_.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.875Z","timestamp":1786387664875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/search-C8-nSFB_.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 354\r\ncf-ray: a28e93d22ce2090f-FRA\r\ncf-cache-status: HIT\r\nage: 123\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:7753,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":471,"size_decoded":1198,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (427)","md5":"9e075e114e142cdc675f0cb7af6ccb79","sha1":"39f84a673e757a7d35c77ac77cf2d977331e9d42","sha256":"804bb269c4a5075bed5bac056183a1592094d2ff7ccff7110eee2fb44f0426d7","sha512":"d77936270257ad23d7b6aa464d8ef1a194e6c740df08e7ffc9bc0ad1d1db9e7c63955455ff34661b8c291bbae0a8bb27c166fc3f4228aa19ef2a748243977538","ssdeep":"","tlshash":"1af09e1fcab90cbdb42a8c4cba68b54fe9b6d1659f421518a39c117013005c01325bc5","first_seen":"2026-08-10T18:28:18.381554Z","last_seen":"2026-08-10T18:48:38.88842Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Flex-CBqrzjUj.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.633Z","timestamp":1786387664633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Flex-CBqrzjUj.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 229\r\ncf-ray: a28f34054b9b371c-FRA\r\ncf-cache-status: HIT\r\nage: 5101600\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: ko\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jeySHQyKxh:14,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text, with very long lines (381)","md5":"3a27cb7e7d2dd9923b028833a45c4a76","sha1":"b7e0a9e615e2de613c803151f172fc5443580e74","sha256":"ef58cca1f818f55f960a9f1aac64a1853da0a8ee6cc07801abcc158e0ea51ad1","sha512":"1134af65564a8406ce6fe57b4d6c9cb162db41a8ca1fcf5016da6494fc4d13ea328a8443ffd51bd1bcb270f6c3b6ea15fd6baf1e473a4ecc92dc8e5c5651858d","ssdeep":"","tlshash":"68e02281b7605034d857802c2926a109a0d9c742ca8f90e9a413133ac9ee2872ff99dc","first_seen":"2026-04-30T03:12:05.924332Z","last_seen":"2026-08-10T18:48:38.595879Z","times_seen":14,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Backdrop-CImOsIjY.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.641Z","timestamp":1786387664641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Backdrop-CImOsIjY.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 223\r\ncf-ray: a28f340558194d4f-FRA\r\ncf-cache-status: HIT\r\nage: 3323701\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Thu, 02 Jul 2026 14:35:26 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50069,t24\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343,"size_decoded":1066,"mime_type":"text/css","magic":"ASCII text, with very long lines (342)","md5":"094e114064c967093d4a417ad9156306","sha1":"953c88cfdceac7c452ffd01ca703ae0888aa22ce","sha256":"036ccbcf8df8e9ac042f407853e62950143e8b6df4b1f33e13f95af6a87bfa4e","sha512":"08d2077c1bd4dbec1abf7555ed1c0908cdd83de0c409991791a72e1dbc11a408326b269dc5f4f3b8019f7ba6b7f9739cd5d43306e1555b3e2a8fe9b07b24cc18","ssdeep":"","tlshash":"cbe0df10214040b0cb5751aa6a829f0a33ad24bbd69f03fef4dca980538af4aa89d040","first_seen":"2026-04-30T03:12:05.899057Z","last_seen":"2026-08-10T18:48:38.644237Z","times_seen":14,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/TrustLanding-_OqOEVti.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.677Z","timestamp":1786387664677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/TrustLanding-_OqOEVti.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 493\r\ncf-ray: a28f34061d280ecf-FRA\r\ncf-cache-status: HIT\r\nage: 983876\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VjFWdNxVXU:234,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1510,"size_decoded":1331,"mime_type":"text/css","magic":"ASCII text, with very long lines (1509)","md5":"c91d26d2d076a60f0686e019d90d4f3c","sha1":"a24e348fea76c92e98a1e42ffdb26367acd4604b","sha256":"1177f9f418ab5e1c451da77aa18eabe8746917f5d0fc3dfaa70b237324adda4a","sha512":"1e01aed6811bb7c581eaaa8ae2dfc720f0b3084342d53bd15e628459247eaa4091a7d4fb951821f29dae00b32df773627581225e10d995fcc52259cc2c895afe","ssdeep":"","tlshash":"9d31225d02294bbe847f6c6d70335e4e5225a009ef6ba0edfb29211481cf3912f736a8","first_seen":"2026-05-10T06:59:25.079962Z","last_seen":"2026-08-10T18:48:38.630082Z","times_seen":9,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-tPUgdwW2.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.804Z","timestamp":1786387664804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-tPUgdwW2.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 375\r\ncf-ray: a28e93909e194db4-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:48374,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503,"size_decoded":1221,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (461)","md5":"e6ef2a2ab571fdd4339c8cbaa3a8e53d","sha1":"3b3540d3b1c7ed9f2549bf1fae9b67e3d4fa8a6f","sha256":"01f2e4922c84e681fef449919369fcc6214ff2d1fbbc0f1e2f83642176e191cf","sha512":"c588c6aaae6ac51e1b5e30e708267f5edc41092e3605bcc7d4b1cd9017ed51861207b5ed4770a1d592b1514ac5d3c781618fe6aea42a4e4e438da3b342bf0ffe","ssdeep":"","tlshash":"dcf00e7688b028b0802acccce45924aa5715e4a9b34b774c590e29b44309af1612ff31","first_seen":"2026-08-10T18:28:18.34697Z","last_seen":"2026-08-10T18:48:38.889108Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/fx_rates","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.687Z","timestamp":1786387665687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/fx_rates HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2112\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2912bbfee298824-PRG\r\netag: W/\"840-byXcmF8OTzKKKgyWR3V9Yluhpis\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-cfw: mMamnrwzVJ:64,t45\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex, noindex\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2112,"size_decoded":2688,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"09ee325747d7b574edbe9820ca71bb07","sha1":"6f25dc985f0e4f328a2a0c9647757d625ba1a62b","sha256":"6619b04b0ed7523cf15dbb8cf9a61b1494b8f3b1efa96fc1489de9cb0e5a533d","sha512":"100ebd175e5dd97d773ac22e5101c1e3ecf1908f6ef89552ee5d400f13213ec6a3096f5eb6f73dc8b6d5e5ce3af42df0de37e297ec6fa864376e33a9d8c76b54","ssdeep":"","tlshash":"924168e09bde33c1ca52b057bee1f9f5e869301bb7d58989c8426fc82c8a1c93754496","first_seen":"2026-08-10T18:48:38.889687Z","last_seen":"2026-08-10T18:48:38.889687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/new-to-crypto-MRmXXQjV.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.593Z","timestamp":1786387668593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/new-to-crypto-MRmXXQjV.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4404\r\ncf-ray: a28f86698d84f47f-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:271,t14\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12372,"size_decoded":5271,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12321)","md5":"dc065726e6e3905332f0a290ce089e5d","sha1":"fcab09182f5618dcb51ebcc75c728db65ade218b","sha256":"ab70e6600f64c89b327aae5bef31374f499efedb94782a1a3cafe9be38435b11","sha512":"16f1c045edb157de28fff53f0818d9903797f9258ba48d79d6ad82862b57f5eeff0d3bd4b77eca7022fcaf05b4b21f68530242d13babf74a18fdc2ad869ea55b","ssdeep":"192:xWQxxaSIfBzYOfDufQldfi0gTfS7e8Zn2ifiQ95Ah0IExA6ateQqYuWmgd:EQxQSIHSOlOSN2ifiQL9I2KeX1Wt","tlshash":"8f42e9db6e7cb3c865da05e5ac37640d903bc19c4febcde099a9d4482160ac5b27bf84","first_seen":"2026-08-10T18:28:18.020284Z","last_seen":"2026-08-10T18:48:38.890637Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:48:12.702Z","timestamp":1786387692702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /api/accounts/cart/jvz8-itnU8xk94WXKXlM7JsZ?currency=EUR\u0026localFiatCurrency=EUR\u0026language=en\u0026country=NO HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR; exp=preheader_agentic_cta=claude_connector\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:48:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 175\r\nx-mirror-cart-overlay: 1\r\nset-cookie: cart_id=jvz8-itnU8xk94WXKXlM7JsZ; Path=/; Max-Age=604800; Secure; SameSite=Lax\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-store, no-store\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5101fc775d1af4ccc411b662945f2307","sha1":"4f4e0e396c6ed89ea11affdd3c7c55b29733ffcc","sha256":"5fcd116ef6f59aac4bf10a1caa7d65de191e46ea2ecf7bf48f6265c2e2995d23","sha512":"b1424f43e729daa448675761317f5df6c04fdec5d2491446f465ca5ec01ade4c671ec35e0a6610f5c6d3e47e93a23f407443d72dc08945cb273fb27e60b49918","ssdeep":"","tlshash":"5ec08c24f62a9c1b98d8ab49288b3aa447cc50038113dc2e48710b6c07f50fb29b2155","first_seen":"2026-08-10T18:48:38.376303Z","last_seen":"2026-08-10T18:48:38.376303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/circle-alert-fXQEtylk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.877Z","timestamp":1786387664877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/circle-alert-fXQEtylk.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 368\r\ncf-ray: a28e93d229a5dbb5-FRA\r\ncf-cache-status: HIT\r\nage: 123\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: wuvSjokemO:10,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":535,"size_decoded":1210,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (485)","md5":"3e3e61df43e46a33bed718ad7cb5e3d6","sha1":"33e9450835382bc4f122b436fb8b748b6d46adfa","sha256":"0a26fbd823bbb17c8587fcfb66efbc6daa0fccb59d1ff06d148bc2333193f95f","sha512":"d5b194c87d72497cf7eb9a6bae45b3d49d77e716c659224e92fc26969d0be9b4bdf8e9315638b705927e7b6bee814e9c14ba3f3a5a52e135cdef823171f7641e","ssdeep":"","tlshash":"03f08b6efa682cbeb4154d8c6a65d04efa6bd297ef061904fa8c21a093005d0b331fc5","first_seen":"2026-08-10T18:28:17.847675Z","last_seen":"2026-08-10T18:48:38.891362Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Divider-Bz4gi1Xs.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.951Z","timestamp":1786387664951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Divider-Bz4gi1Xs.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 287\r\ncf-ray: a28e93d0feb9dc79-FRA\r\ncf-cache-status: HIT\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: QtIEGlNvBZ:88,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396,"size_decoded":1129,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (351)","md5":"13ea6c37b4a9f6d3a667374e15e8181b","sha1":"8c8e4212a722b25a949f5dd367e3aa8d0f55d21c","sha256":"6b18a3c4d6290fa8cc7a9e32f7cf37d3025bf0843fb939ef3c8e8f9250af739c","sha512":"ee2d24ee50c610a0e3dd5d7561c3c2ea6a7019b02a5b072522a5ef673607db34e0e01f658957189406296ba6ef7e9544322030e275afcab6c56acb1c7d2f6899","ssdeep":"","tlshash":"bbe0f11eb8f864b9401a0cdfc00e9dc3b239e3828b419854c08e4190c309499de38fae","first_seen":"2026-08-10T18:28:17.777883Z","last_seen":"2026-08-10T18:48:38.892049Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/CurrencyCombobox-FBl24MnR.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.006Z","timestamp":1786387669006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/CurrencyCombobox-FBl24MnR.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/CurrencyCombobox-FBl24MnR.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Flex-CPqAvGjK.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.824Z","timestamp":1786387664824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Flex-CPqAvGjK.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 541\r\ncf-ray: a28e9390aad2e537-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: HcKxlISubs:2246,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1120,"size_decoded":1407,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1078)","md5":"a1838862bd351f4fb9c0da4dcb84f3bb","sha1":"958eceaa7562c2b59e28937e937202a8f7d685f5","sha256":"217eb16fa0df8c6b931f527260579cbfbfad2a41c1830510f663cd19dea38cbb","sha512":"e47fad2a4ea95836bb2e0ddd94ceea6116372ec821617edbee5a2d2840a8ad0368fc29caee4424e2f441bc77330b9e458cc8656175ef31c2d4110f42b70b3db2","ssdeep":"","tlshash":"3f21301bb9247234b137d4e9d2ee2581d3d3959a92862416916e40be83510920b3ceee","first_seen":"2026-08-10T18:28:17.791616Z","last_seen":"2026-08-10T18:48:38.893241Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/striga-w5O4DWzE.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.869Z","timestamp":1786387664869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/striga-w5O4DWzE.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 164\r\ncf-ray: a28e93d21e6dbb7a-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 123\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: OjwzZNOaGM:1,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208,"size_decoded":1004,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"9a98f8c8a7e6be98eca86c44b7a66b12","sha1":"a73c727c0153b8fdbcde172e8a2f335f72f89081","sha256":"7d71629c74e7b68a8ded08b501515771c8c42447c22dda8abcbdd0f951b05a74","sha512":"4086d61cce89da11fbb56c8f370574b6763be6a89824266d91a0ab0d5789a05f4f8277b279a2259ef76d51de7009092ea41279a4ef498281b00369ee536eda3e","ssdeep":"","tlshash":"9ad0234dd1f47574e74c0cbcb1150455c374e4d09f451151d34102d05b784e5d22ff2e","first_seen":"2026-08-10T18:28:17.769137Z","last_seen":"2026-08-10T18:48:38.893934Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/esm-4GbFeYsv.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.925Z","timestamp":1786387664925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/esm-4GbFeYsv.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 840\r\ncf-ray: a2750d31e90dd3b8-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NdKsUHbfSu:3305,t33\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1698,"size_decoded":1673,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1657)","md5":"5ca25d1aa46b9eec1272301ba609486f","sha1":"41a7761908c921344113006384b4ee539dc30822","sha256":"302643c2ac6384d9eb41639ac8361545f591d2dbdfd2ba8deb99d70650e47a41","sha512":"c5c1b5507fb16b1fcdd53261ef9c7baeac06a8d56309a4e59403e8560c65452ebd6ba695ca009feb3303058a4e6d214927b6dbc91b67297faab8b390ab32ff91","ssdeep":"","tlshash":"d0314239b7747087234d2e8b48c794c6e17aea73504c681cf1062d072aa17f281def1a","first_seen":"2026-08-10T18:28:18.054533Z","last_seen":"2026-08-10T18:48:38.894829Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/formatAbiItem-DW6Uas8h.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.937Z","timestamp":1786387664937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/formatAbiItem-DW6Uas8h.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 657\r\ncf-ray: a2750d2f8ba8dcda-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lyytAWfgNq:202,t26\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1352,"size_decoded":1489,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1301)","md5":"774e02befe93dd1ce33c552b18d31914","sha1":"173fb6fe78e7386a0fa6468d508f5d41e42e6aff","sha256":"e5695ee63d7e6be94d9c31710ecc2a3dd6a1e8792abe61a08e1384147d4395a0","sha512":"71085ffeb5ac4b5ed77c5378a25dd1c03e5152f85e814d1cf6a1020603544184e8edcd48e2cba40daf3b352dd0240e664dc9172a95b38c5536ad519fd600ab40","ssdeep":"","tlshash":"d42136cf3162f0539959a49694b91a53f0b5fc82800c692492788d73279ee04c79df7b","first_seen":"2026-08-10T18:28:18.039339Z","last_seen":"2026-08-10T18:48:38.895529Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Link-78T-cJXY.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.234Z","timestamp":1786387668234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Link-78T-cJXY.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Link-78T-cJXY.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Link-B6vCSCdt.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.285Z","timestamp":1786387668285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Link-B6vCSCdt.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 104\r\ncf-ray: a28f34054eb0248e-CDG\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nage: 5101601\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: tr\r\nlast-modified: Fri, 12 Jun 2026 11:49:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: oLTMcizddB:422,t5\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139,"size_decoded":942,"mime_type":"text/css","magic":"ASCII text","md5":"e27d3252faff80cb1fd1ae4bfaa574e5","sha1":"cf4110b533566dbf158964cf2a9958c1c70a70d4","sha256":"67ea2a5ef644acca7d50ebfa74b0b07c5033d91187897251bd4b385b03b5e4cd","sha512":"165caa9faf747e4ea6b8110623351e32e01d426477cd535fb4730bb94742599db3449877743020b93f4d6d8bd2d3b8cb471975da4f2f179488c96b1acf3c5671","ssdeep":"","tlshash":"b0c02b04e3003e23ad039904bbc41b5b7c154450605154e4f8c0b21cc24d06fb8a8260","first_seen":"2026-04-30T03:12:06.039242Z","last_seen":"2026-08-10T18:48:38.681119Z","times_seen":14,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/jsx-runtime-DS4W9P0j.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.767Z","timestamp":1786387664767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/jsx-runtime-DS4W9P0j.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 340\r\ncf-ray: a265b1b42ad2db07-FRA\r\ncf-cache-status: HIT\r\nage: 353\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 05 Aug 2026 12:08:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: MxxrtAbxvE:70,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":472,"size_decoded":1206,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (423)","md5":"723c8511f764bddf6310763ceb2c3232","sha1":"6252b079882d956dcb06c29401730bf7acbd017b","sha256":"935ea395d38d5d002edad0e2c0965ef2d1042c211ccc364ed619ae76ef208e1c","sha512":"2b0222b83fce799f3f37255d13111694ac8942f081ae0f05c917d2afe6866355d9008f33f4e33397c55611184fda2729402e653320a724835d322ab78c9d8d83","ssdeep":"","tlshash":"dcf09e8166a454fc653f9c07916f56b2a13c7047e7c52302b207d89217b7ed59012f38","first_seen":"2026-08-10T18:28:18.273538Z","last_seen":"2026-08-10T18:48:38.89645Z","times_seen":2,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/info-DN6-0mey.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.879Z","timestamp":1786387664879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/info-DN6-0mey.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 358\r\ncf-ray: a28e93d21ea29bf7-FRA\r\ncf-cache-status: HIT\r\nage: 122\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lZbKugsTFS:2,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":1223,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (455)","md5":"b5dbd2bb9ee6d31772c538667ab05f78","sha1":"69cbecce5ce9be42385e82571acd3788735a2cf1","sha256":"c8e8ed15da4a2a6612b0a18fdb9f933ae289dd6724c53f6a0c5ab155ef53dc3f","sha512":"1c783f27f07d562aeba8caa7538d9c4ff30bfc9df19b34afbee7b9ecd96403b974310458941b2d498df1f90cef399e6ec1333297b5bd5cd832c3d2a3ffb07e0d","ssdeep":"","tlshash":"eaf0c90edab80cbeb4190c8cba2aa08ef6aa92a5af421518f78c257002000c01322bc0","first_seen":"2026-08-10T18:28:18.31976Z","last_seen":"2026-08-10T18:48:38.897144Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/index.module-DiHkEyQY.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.887Z","timestamp":1786387664887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/index.module-DiHkEyQY.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 346\r\ncf-ray: a2750d319b4a9191-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lCcPRSqkmX:65,t28\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":738,"size_decoded":1179,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (688)","md5":"71d031e15a81f8a3335b3f35478a05cb","sha1":"221fecdece8c8a27a218271af318a3a67aa27864","sha256":"b27c95553dae0ef030c75b619afcaad9d867cadd0b3a970253ea39a5aba5b965","sha512":"578b239918edbd2133cb1376f07626c060a6de4635cc2581e339283b6f157bc4b05eca02d472cb61cdedf2c92a826be3a92cda6d588227eca598d971e3bef053","ssdeep":"","tlshash":"ae012879917d12a3120d17bfa98c557fd0b762b5c132a48eb18c913703c209f22dc735","first_seen":"2026-08-10T18:28:17.836208Z","last_seen":"2026-08-10T18:48:38.897752Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/prop-types-CqqpnCOS.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.927Z","timestamp":1786387664927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/prop-types-CqqpnCOS.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 536\r\ncf-ray: a265b1b69e87bbe9-FRA\r\ncf-cache-status: HIT\r\nage: 366\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 05 Aug 2026 11:57:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: HtqFiCLZNZ:10582,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":851,"size_decoded":1381,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (803)","md5":"b9e66e50fe9def937df1f165de5c5c79","sha1":"cf2ba55a59b031ee2466c1f8cf6403bcf38975dc","sha256":"f39710a1e57b8e659057f39646f9b32da884f7ca21a3ce45db5f3d35ab7bc3b3","sha512":"e807149687296d0e891bdf84d4dc3f295e0c8a1eced5c81d5b5c6c7e3b8b2b2dc13158dc9fb976476f1cc53bdb7a096fb7c6fb66d4fe955968d3e37b18d085bf","ssdeep":"","tlshash":"bf01520bb290a9bc1f030662c64d12e7e15298846b8e750cb0d8c1dd3b2cc7c265fb20","first_seen":"2026-08-10T18:28:17.799825Z","last_seen":"2026-08-10T18:48:38.898717Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Input-Co4Qphjw.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.894Z","timestamp":1786387668894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Input-Co4Qphjw.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 1061\r\ncf-ray: a28f3405cc2065aa-FRA\r\ncf-cache-status: HIT\r\nage: 2192740\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 15 Jul 2026 16:37:08 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50073,t19\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4274,"size_decoded":1903,"mime_type":"text/css","magic":"ASCII text, with very long lines (4273)","md5":"152488a2dc11f6174313ee1706db2f08","sha1":"33293a9a55f5f7500905291c790205f09b488a8b","sha256":"30ab3e3d889a3ae36a67af530773a706a382b82c56eac4c78eff1728e195c39d","sha512":"da85a662c8f8d4b9ad57a2ddee75101bce942e79946dab47f819b2012dbd0bacf4f40d82920c48c1b255de4f3cb4e492907df942b1b7a438a2c60045a531ac77","ssdeep":"96:d/SHohoKlEeMq2gljgD6ptOZyjrf6tasN7:5SIhoKlEeMq2gljgD6L6tasF","tlshash":"fa9111fc53a1ad3e6c3ba527629ca45e33143162a96306e6fc706724cfc3bf14a5e601","first_seen":"2026-05-31T11:11:55.721014Z","last_seen":"2026-08-10T18:48:38.682083Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/notifications-DViy2ImJ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.781Z","timestamp":1786387664781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/notifications-DViy2ImJ.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 503\r\ncf-ray: a28e939038862757-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CCmZTzPoOp:4,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":822,"size_decoded":1344,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"7e274de22b53f51eb5bce34d7ce0c982","sha1":"a814a49a235406a8ca27c6b5a3c45994445e7bf9","sha256":"6bb074d7ec07fc37cbfcd2075e6255aadbc2ac331ea07e3db891d817998f3ef7","sha512":"62a118d19529d73f68fcb6ed39249de9ae48242f1c964382a01c9fb674b1e278f52d57fbee979653cc967ed6ea34b17eba4fa77759c5cd70906b5571a4f5e4aa","ssdeep":"","tlshash":"b501e38e26d3f7b559cbc0a0e0b4881079255ba6260dea04f2c902699184348e56af3b","first_seen":"2026-08-10T18:28:18.336236Z","last_seen":"2026-08-10T18:48:38.899355Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/lazyPreload-tCqjB4m6.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.888Z","timestamp":1786387664888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/lazyPreload-tCqjB4m6.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 229\r\ncf-ray: a28e93d2296a3608-FRA\r\ncf-cache-status: HIT\r\nage: 141\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:12:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jdmkUBpFoT:11,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":265,"size_decoded":1095,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"879c0dc4fd2eb297ab62a42b1f79979f","sha1":"15878425c53841a02735d296979ffc59079bdf82","sha256":"2f9f5d42d2b3f30d81c8c6edb833ce4a39864c548d4a9408d42e4e540c651d74","sha512":"c5b50ee40396ef1fc64955c9224dd7959b9bc0fb8aff2b94e7160dc4a1886bdcd51970896acd0c949bbb99bf37ce5ea4cfed86d36e79202c60cda1289715b6dd","ssdeep":"","tlshash":"7ad02b2bf1faeaba76046864813d61d14390b04a9942e53150160540e3557e259b4e2b","first_seen":"2026-08-10T18:28:18.417218Z","last_seen":"2026-08-10T18:48:38.900006Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/rpc-CnAyU3HB.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.931Z","timestamp":1786387664931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/rpc-CnAyU3HB.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2172\r\ncf-ray: a2750d2f29039191-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: lCcPRSqkmX:61,t26\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10811,"size_decoded":3004,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5656)","md5":"d962285a8fbebf9d544a7201c6a2f493","sha1":"9f0b2a85f0e7e41d1480bba2df5190f534948750","sha256":"0722fb7163c1038a9f73e556db3286453fd7a186738b917e794132e4df0395df","sha512":"623285f9ad08f7a455b1946321b5279a3ed64573ec784984f9ce66ffd9810131b3ba119462a93c5f997550c11b6f1265bd8edf58c974c6a489205579f9b0eac6","ssdeep":"192:HcoekXOepvy6BMBa1o+ja81XO9bnUP2R2u:HcoekXxpakxjaJUPoZ","tlshash":"27223226b26c7db640a5c5cdb4070044e550f892d339d0f82ef96e26afdb6c991fcda2","first_seen":"2026-08-10T18:28:18.097137Z","last_seen":"2026-08-10T18:48:38.90099Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/doctitle-CXpYezUK.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.533Z","timestamp":1786387668533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/doctitle-CXpYezUK.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/landing-EzeWBxTg.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2542\r\ncf-ray: a28f86684d924d7a-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:51737,t18\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6871,"size_decoded":3387,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6820)","md5":"b8b4de6a2fd11af978f6963f556a9813","sha1":"85c52f97fa462f278f559c8d0c149f4679e6e7f6","sha256":"590e2587378ffbaa8718730be520485739ad8a846421a8f6f0a4891ddc26d75d","sha512":"c065575776c21934dded559c57607efd2471a8a8792cf0ad5644c9fe2c5d920779a8f2f54179db37108b8e029b9f4eeb56b34accf9d96b0555fa354272d12e3a","ssdeep":"192:6gmcN8zTUVcDCusVhEoVev/wIVUyOTX93pG:6HcaHEcwh8QV93pG","tlshash":"96e10c4cd2bc71827ee945f0b064680ff13ff580d6968d92e28c5e4421f06877677a6e","first_seen":"2026-08-10T18:28:18.069039Z","last_seen":"2026-08-10T18:48:38.901817Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/StatusText-YL2xEzDb.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.665Z","timestamp":1786387664665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/StatusText-YL2xEzDb.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 359\r\ncf-ray: a28f3405dd474db8-FRA\r\ncf-cache-status: HIT\r\nage: 2811211\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 08 Jul 2026 13:10:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50075,t15\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":862,"size_decoded":1202,"mime_type":"text/css","magic":"ASCII text, with very long lines (861)","md5":"7b0d110d2292a6fe5b53404b4898653e","sha1":"813554c7e3b37b9b59c0fb9385f1ad416ffc0999","sha256":"e545e352dfc280af24a145767ed9b04600cd095b74ce5b0cf6dbcfb21a7c3ba0","sha512":"068bf778efe31426cf4dfb28db41c5c715ebd0c959f96cb95e3358f6b43bfb71bde8cc05ca7f384b5e0cb8fa9687be834a8896569a73f9f069e63dd97a36cf39","ssdeep":"","tlshash":"051129994224da3dec3ef42d17dc723d915566086e5246f5a806332547c2ff39d27542","first_seen":"2026-05-31T11:11:55.614506Z","last_seen":"2026-08-10T18:48:38.475829Z","times_seen":7,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/landing-hero-footer-BisnBQzS.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.703Z","timestamp":1786387664703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/landing-hero-footer-BisnBQzS.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 516\r\ncf-ray: a28f3405fe735d94-FRA\r\ncf-cache-status: HIT\r\nage: 2801922\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 08 Jul 2026 13:10:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: DucbRGedCW:50077,t13\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1570,"size_decoded":1357,"mime_type":"text/css","magic":"ASCII text, with very long lines (1569)","md5":"e9e348c9421328c0cd257ea6dc3a6e71","sha1":"33ec665924a920a07d36d62214a8c0fe06811d2e","sha256":"cba379002edc4111a102552638ccc4dcb2638ce2467f88db905ecb59e0a255f0","sha512":"3fd291f0e7fd14680eac67bcad8d7ac76b4eb88dc9acf84b7f75536111ae19af08e8fbc4345979fc4a3f58f2bd60b384938c047170eb813a399cf12aa0be7f69","ssdeep":"","tlshash":"cf3120f122828a3c2c37d63106ded10972983014fe0b2fa7acb56399aec93412423085","first_seen":"2026-05-10T06:59:24.776563Z","last_seen":"2026-08-10T18:48:38.791901Z","times_seen":7,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-QVT-TaoZ.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.790Z","timestamp":1786387664790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-QVT-TaoZ.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1712\r\ncf-ray: a28e938fbd91dc79-FRA\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: QtIEGlNvBZ:82,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4251,"size_decoded":2553,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4209)","md5":"a6336ab0df8bd8441cd9ef04f916a21e","sha1":"8f330be8d4b2e22f8d426cee2ebaf0cd19f2ffb1","sha256":"56de69f3d272b01fcd6aa669e9611cf9832ece66ad0f59c3f4699b756d74949d","sha512":"780e6ae40cac59073fdaeb9e99777157dba8f2011812d53c5fafc0839682137bae9921589d0a9f15ae3fee4120fb56320d6445fe4a1e950cb07cdc4fbcbb433c","ssdeep":"48:W4ttM8CL/g5UuB85NzGfyyDW6sJk6+8L9uMgWDU3kDpwS+uZJcHFGtiEfrqyLUOE:ftU4iu5qAW63AAajZOlhEPIHthCpH8","tlshash":"2f91a4c6b199f460b34e46e1c43f857cb76a3196100c5138f0795c6929b09a6e2b7fbb","first_seen":"2026-08-10T18:28:18.443818Z","last_seen":"2026-08-10T18:48:38.902512Z","times_seen":2,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-D-6ASWtk.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.793Z","timestamp":1786387664793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-D-6ASWtk.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 664\r\ncf-ray: a28e9390991314c6-CDG\r\ncf-cache-status: HIT\r\nage: 112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:13:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tNeegAMkVR:79,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1371,"size_decoded":1528,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1329)","md5":"bae295bac1067470535d01e42cad30c8","sha1":"c903de981dad25df0ba10d5fc616467400c44df1","sha256":"e5e34190cb0c60dbb052c1a78250e469c6800d45c3fd76d87617a991f9dbe566","sha512":"ddeb181625819cb4d979d61024119e05ce4b0c36816410d9824f1902a010268a05b318f8c6412dcfb37f9ad0bc7a745842a51b18de838157e2f94e94113d8fbe","ssdeep":"","tlshash":"592141917041b77091ef9ed0c45f44b9a63fb551600903a4f4bd8a084939390b237faf","first_seen":"2026-08-10T18:28:17.757603Z","last_seen":"2026-08-10T18:48:38.90329Z","times_seen":2,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/dist-BYpX_itA.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.794Z","timestamp":1786387664794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/dist-BYpX_itA.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1965\r\ncf-ray: a28e93900d883410-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: CCmZTzPoOp:3,t33\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5452,"size_decoded":2796,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (4691)","md5":"8341bc2fae926661e9b5fccad297a7a2","sha1":"be29de14c82975882ed1fcf21817468e03484d25","sha256":"3c3f5756c74b2ead6b3141a5b490c1fba9311838f6462d8cb574896cf8e1cfe0","sha512":"60dba4347828a95d53b504ef41c45faacc17af3d2f970ebc41b4b813ada47822c64a91b66d4f76920f539705efe2a14d88f7502d488510c19f2691bb039296a0","ssdeep":"96:siNP4RHbk1UyPyAgUybyobIyw78yDCRLIygjKEQGZscjuKcBRO5CncVhdH3cHPs:/0bHm6LojNZsXKpDXcE","tlshash":"06b1c8de302573e5dedcdcaa4a23103d5b1a9989558e011db98a8f2003593c4fbe7f69","first_seen":"2026-08-10T18:28:18.29486Z","last_seen":"2026-08-10T18:48:38.904162Z","times_seen":2,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/debounce-D1znENOK.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.806Z","timestamp":1786387664806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/debounce-D1znENOK.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 554\r\ncf-ray: a2750d2c7cce3801-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: JZBXrKgoTU:7550,t26\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1072,"size_decoded":1387,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1026)","md5":"3921958d0e6b0943c195d13f0cffdee0","sha1":"ea8d28a2d8c84977c5a8b9bcfde6ed6fa7c7cfc5","sha256":"0c813675f924d6e1f3b12cdb74d5a6938c6e7ebaf8923b3386decb6245f96317","sha512":"ed0c92f0d025950225d139be31a7c0f49ca516520f94e4b1ae1c3ac3b61526702eadf8c30f114d25bcede9b2edf6c4cae77def1b632671607438159007321cbf","ssdeep":"","tlshash":"351120d8b6c6b8d277a2c839d0bf561bf1397490488c4061e12391927a3067eea53dbf","first_seen":"2026-08-10T18:28:18.382739Z","last_seen":"2026-08-10T18:48:38.904947Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/TextLanding-DFkYqn6N.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.230Z","timestamp":1786387668230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/TextLanding-DFkYqn6N.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/TextLanding-DFkYqn6N.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Scrollable-C-avTb9b.css","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:49.057Z","timestamp":1786387669057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Scrollable-C-avTb9b.css HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biterfz.com\r\nReferer: https://biterfz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 463\r\ncf-ray: a28f3405c842248e-CDG\r\ncf-cache-status: HIT\r\nage: 983876\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: oLTMcizddB:424,t5\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1358,"size_decoded":1300,"mime_type":"text/css","magic":"ASCII text, with very long lines (1357)","md5":"573f4f8685fdb1251fbdebacf49e32e5","sha1":"5f74e757294b1245d7827e0d9a39040d3fa10afd","sha256":"a1c659fc296c599f1a202f77a34926bf0b404147b43979a35d583028c17db79b","sha512":"7831a1036d92fcfd8bccbd00649353a5589b1371832f5ffc7f7c92a8466c09ae8f39691e759edf83b2b4cb50ab0e2f8fbd739375837d9ef59a01b103e32cbc6b","ssdeep":"","tlshash":"0821cee05560a4bcbcfff00bebd4628e515860d3ac6706e0e0e0ae7165c1bfa1716124","first_seen":"2026-05-31T11:11:56.098404Z","last_seen":"2026-08-10T18:48:38.59239Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/primg/w360h216/roblox-usa.webp","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.754Z","timestamp":1786387664754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /primg/w360h216/roblox-usa.webp HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13294\r\ncf-ray: a28f3a21c85bed47-MXP\r\ncf-cache-status: UPDATING\r\nage: 3650\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"CUD9RiW2xeCwhfEfqVSGJ63FIcOfk2WLO8cNshJIYe8k=\"\r\nlast-modified: Wed, 29 Jul 2026 05:40:14 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-cfw: FwjyRhBcwM:512,t5\r\nx-chosen: 0\r\nx-chosen-size-diff: 0.17039220712637784\r\nx-org-content-length: 13294\r\nx-powered-by: Lightning\r\naccess-control-allow-origin: *\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13294,"size_decoded":14139,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x216, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3e759acd1932ec1b66c328a542552be5","sha1":"1032290afc5aa5ab0dc5acdb2652a1d540fde713","sha256":"89ba883b5242ad50fbe4fb42da7ecfc1c2959773e456e631679ec754cbdeea55","sha512":"b7a86e6ef4a8773e6d34f30e43a337a1f191674b3b2ab67a41b9f7f861f4282102b2c2917793240a8afded953942a9da2258e6281b53b07ce331ef2afa5f77e5","ssdeep":"384:/dVzBQYCL5QkfmrLnNzpMc3uUWuNIs3azx6Q:FDe5rmrLnNlSUHJQ","tlshash":"1852d0013a274e218a50b10d6dd3841c1d16dacb7f18a469b2dfebfa9d871d2fcd68b4","first_seen":"2026-05-04T21:33:06.044405Z","last_seen":"2026-08-10T18:48:38.905831Z","times_seen":4,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/ui-D9WTwPGB.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.818Z","timestamp":1786387664818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/ui-D9WTwPGB.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 250\r\ncf-ray: a2750d2cee5dd3b8-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: NdKsUHbfSu:3297,t28\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":310,"size_decoded":1085,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"dd6b9e7b26cb0d20cd6cb3cb48adc660","sha1":"2ec1219b8516485c9a4c5f4133d6ad39ac2e4f99","sha256":"a9133db2c181a8d47e2308d2289c748171f8159abf3cfb424f9ec323c908fda6","sha512":"85c25083211c2e844d5dc8f5bd2933bd3cb43777e9beb6befc71fbdaadd2ab3c6be981c9495e2a80584f4d400b34ed9abd5c35a407aa312bf19c80c4a120e717","ssdeep":"","tlshash":"6de0728d0ce506b0b8060174b920cf608083ec2eff210202b0828f240630592aa2ce26","first_seen":"2026-08-10T18:28:18.03049Z","last_seen":"2026-08-10T18:48:38.906606Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/theme-DVMIzpDp.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.955Z","timestamp":1786387664955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/theme-DVMIzpDp.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 228\r\ncf-ray: a28e948b688d3608-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:15:01 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: jdmkUBpFoT:13,t29\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":274,"size_decoded":1085,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"a784acd91272b09d7a6c236b17a76d6b","sha1":"ae2f7c7555a6cef4e98f917698d5a9c0428eddea","sha256":"119078737fc7e8d515e4d80759b5a2382cd4f41e4e5d93c5355d58c1db12bc09","sha512":"9f152c153cd063651d3a18bd68e4911c5167ee6eae3a9c5539783456bfeff2f936172eb6ec21db518106ea64edf9a59bba665fc41e2dc0d5e71a26227dd93613","ssdeep":"","tlshash":"7dd02b9a35a06274d1cd094ca025d984763af406ea263908f36c52d40e30cb22926f7c","first_seen":"2026-08-10T18:28:18.150601Z","last_seen":"2026-08-10T18:48:38.907345Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/HtmlContainer-DsvY5hA2.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.706Z","timestamp":1786387668706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/HtmlContainer-DsvY5hA2.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/Faq-By_4Sa_k.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4975\r\ncf-ray: a28f86683a72a93b-FRA\r\ncf-cache-status: HIT\r\nage: 150\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ZKAvOBrXUO:10082,t18\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17937,"size_decoded":5820,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17886)","md5":"1ab899465d40b8519205c08305f08b52","sha1":"3b4e752f1041f1f01ef1eafe02e949f119464005","sha256":"f3f6b8b16cbfddb7a870c7f40346e6737c0dba6c41bab2e8f14a0c7c8d71691c","sha512":"c9829b9f57992625fdda4c5fcdaad597d116800d8e49f5268879b14ee04e76e0bb3ec49b38d593b5dcc317f8330195c93501e2539c5ee90c221aa09c835a26b8","ssdeep":"384:6mJrqOFmnpLPZN+c1zVhYR29dGAFxM/fK7lg7:6mYzVVU29dGAFxDRQ","tlshash":"17822f17a0e576d7b9895cdb9026880fb95fa84896a90db8f93539c035144c0e36bffc","first_seen":"2026-08-10T18:28:18.073831Z","last_seen":"2026-08-10T18:48:38.908126Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/api-client-BCvJLI2Y.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.405Z","timestamp":1786387665405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/api-client-BCvJLI2Y.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/utils-C4bW6HNT.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 51294\r\ncf-ray: a28e936e1dd514c6-CDG\r\ncf-cache-status: HIT\r\nage: 107\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: tNeegAMkVR:73,t5\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":176425,"size_decoded":52136,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45606)","md5":"5645b25da0517ce3d2904bd2cc9d82e8","sha1":"961af067b8583277dad36489c279cdc1447a4f67","sha256":"52cdbce7e9fc77208e007e4dddcd9c5cdf3729ed05135a0b35b4c59412257be5","sha512":"8247935153f5af6221540cfa8b7c987741116fc43239043abe767de9831f058445071bcdf5b550c1cb61c28e194fd49cd30ea55aba03f026fb26e7fe8be88c3e","ssdeep":"1536:ZRJfXEgtZjh+h8sRJ/OiHzmOj30Ci7ZFp9XULnMEWGuJw/hVpi1im/ZaMH3k6iud:Xhk+k9HzmiZ8pdyi/gMH3kEEb6","tlshash":"ee044b89b3d8b076179b2534506f190ffa7e6848ec5e84a0f372d1883d77a44a273e79","first_seen":"2026-08-10T18:28:18.197167Z","last_seen":"2026-08-10T18:48:38.603595Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/landing-EzeWBxTg.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.470Z","timestamp":1786387668470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/landing-EzeWBxTg.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/URLStructureRouter-B1PtNMUc.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4286\r\ncf-ray: a28f8f1b3cb677d1-FRA\r\ncf-cache-status: HIT\r\nage: 507\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: fr\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VUFxalGXLv:52,t12\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12384,"size_decoded":5152,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12331)","md5":"68d8535e0c9091691e8c41a5ce7a5d50","sha1":"690c9e14b73e937f8ca83071173748b5b8286cea","sha256":"3eff8118e9b795fbe082a47075b6afcb7f84397d08eb0723a8dd21e6a6ae556c","sha512":"42e9b8a9e382569f38c6b3c198490c203b5f565e52ddaa8d59d2ff18025b720864d817113727be54b70339c9ac37c831ee4aed165990fdd6a90b6ab5de208ca8","ssdeep":"192:BkOqtGjQnOQCUKRZqptn2JMf9kQ1aj5PYIIakf:NqtGjQOQCLRZqptn2JckTj5Qakf","tlshash":"f842c80be4bc32b179960ef0b077855e7abfa018860950f0b99e154427995c871b7fef","first_seen":"2026-08-10T18:28:18.409899Z","last_seen":"2026-08-10T18:48:38.908698Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Notice-BFBvmUi1.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.876Z","timestamp":1786387664876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Notice-BFBvmUi1.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 647\r\ncf-ray: a28f86349c90e7ba-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: zDZhQknwEq:262,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1409,"size_decoded":1513,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1365)","md5":"c1c2baba87db5f0a06b3e93583317d1d","sha1":"62e1bd227c25621bdb10a3551247f721bc81f812","sha256":"d32a0c28a917866d3d070d2e4547d098cc8b434f09f2f496af84fbdff12e5b32","sha512":"c18b4e3d67d7de3e1b0c34bbabd276e841968349d0e565e055b65d2a31d5024ab29863ddb0b935fea117ec6b4ffb6bee718fc195ec23140088ae7400ebd4f2bc","ssdeep":"","tlshash":"7a21e21bd011a6f8142fede8e01ce0eb3328e15cc74106b8918d296d7b234a6ab17f43","first_seen":"2026-08-10T18:28:18.408041Z","last_seen":"2026-08-10T18:48:38.909288Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Input-BwaFIFgb.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.860Z","timestamp":1786387664860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Input-BwaFIFgb.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1073\r\ncf-ray: a28f86343b45cb3f-FRA\r\ncf-cache-status: HIT\r\nage: 154\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:53,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2652,"size_decoded":1914,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2609)","md5":"73c36ccf8b3ad000121bde9039747799","sha1":"474bb4294eda2fc4fec884b4a84b47c11a23d2cc","sha256":"45b864bd2e805058b529f357c4c86ed2ef7ed7597df694aab3318bde47ef28b9","sha512":"e01d446b813d61030564a40784781859e7e2f910c3acd4fc806ffc2eb72217db2d48c85a1dc8760a7c6c3289be1cf1ce0572bc2da088132b0de414e8964acf51","ssdeep":"","tlshash":"1b5123cde82078b6a43f89dfd1ee441b37176064e6070534bd3463392b015ad6f1aeab","first_seen":"2026-08-10T18:28:18.058519Z","last_seen":"2026-08-10T18:48:38.909952Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biterfz.com/assets/Link-B6vCSCdt.css","fqdn":"biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.157Z","timestamp":1786387668157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Link-B6vCSCdt.css HTTP/1.1\r\nHost: biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/no/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __mirror_affinity=QaTWkq_yYr9dVuCTXAeUOjsbOEC85Pnc; currency=EUR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 171\r\nlocation: https://cdn.biterfz.com/assets/Link-B6vCSCdt.css\r\ncache-control: no-store\r\ncloudflare-cdn-cache-control: no-store\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-edge-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/identity-BLhiA33i.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:48.591Z","timestamp":1786387668591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/identity-BLhiA33i.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/LandingSections-P_DxiMJ3.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 76\r\ncf-ray: a2750d4649f2972b-FRA\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-language: en\r\nlast-modified: Fri, 07 Aug 2026 08:47:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: TAXwibjPFw:7450,t26\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":908,"mime_type":"text/javascript","magic":"ASCII text","md5":"03ea1b4d7fd76ebfe4af5b2c94a98eeb","sha1":"3af210c114c43387aa157a6ef4e2284fc72b31d4","sha256":"1e409f85066adbf7b3d7d4246ae0f1138d659bbe2d75b63c35cfb0a69052f405","sha512":"21af8084ecf4845e7d42a424a0b53b3b1278371112d51bea9ee0e5e6f9f629d952fd33918e32a0c576f3eb2e48a11739b9948a05b00ea8f4a3048709f19e110b","ssdeep":"","tlshash":"efa012cb74f126f050120c34801b4096e41890d4d10442547010106425304704830d10","first_seen":"2026-08-10T18:28:18.126744Z","last_seen":"2026-08-10T18:48:38.910711Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/string-Dvb3Gdz6.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.773Z","timestamp":1786387664773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/string-Dvb3Gdz6.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 562\r\ncf-ray: a28e939078f0d2c6-FRA\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 11:09:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: VRZgCclaWe:1533,t26\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":993,"size_decoded":1397,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (947)","md5":"b617126102d60558924baaebad5b91b8","sha1":"619ce630ae9c0aef6ac206fafeeab97c411fb3d3","sha256":"b7fcf954dc338ef4f12e8bc38eb31d1701b1e50cf79bf76358bb3915d063a3e5","sha512":"3545225c695e8899bdf420ab06c2ec2c3f345e338fb099f50edf6451e4ae2d4506773d87c2334a79f853e41c43e53b7914d761c184d2ba6509a76ecf36068756","ssdeep":"","tlshash":"2711cede73e2b677630234b458b780aaf17caad2099d4925f001b0d63474134d37bea8","first_seen":"2026-08-10T18:28:18.174308Z","last_seen":"2026-08-10T18:48:38.911271Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/errors-DWM3BVj3.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:44.889Z","timestamp":1786387664889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/errors-DWM3BVj3.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biterfz.com/\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2259\r\ncf-ray: a28f8634ccf7cb3f-FRA\r\ncf-cache-status: HIT\r\nage: 151\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:59:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: AQlseTSRsO:55,t5\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8848,"size_decoded":3124,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8804)","md5":"68238f581e25d81dbb01d896061a134e","sha1":"c62d958aea63273cd6e3c2ef7b7fd8a5666ce045","sha256":"602112b7618731afa1a16aed3e5376e6d4cec79a266090fb1cac43f7d58e7c87","sha512":"3360ff8f736043d998fe99174b5dd14857454a3f05df557d0d2219e3fa621c230ed41f4d350a64ac12af2bf3c85e2e3aa2baa58bdc717847f682193c93202bb5","ssdeep":"192:PvDM69Z/d3LUIqpTWZrjL8/sA3k4gyDeSIy:I69voIETWlEB3k4uy","tlshash":"3102534e80b067e1f8c987e89073c58defbb50a4c52c84f4392493a4235ee95b553beb","first_seen":"2026-08-10T18:28:18.216535Z","last_seen":"2026-08-10T18:48:38.911883Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.biterfz.com/assets/Text-fkry7N_q.js","fqdn":"cdn.biterfz.com","domain":"biterfz.com","tld":"com"},"ip":{"addr":"196.251.107.165","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biterfz.com/no/en/","date":"2026-08-10T18:47:45.406Z","timestamp":1786387665406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biterfz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 11:27:21 GMT","end":"Tue, 06 Oct 2026 11:27:20 GMT"},"fingerprint":{"sha1":"5F:3C:C6:21:E8:FC:5B:AE:C5:F8:E6:4E:52:2E:C8:1E:76:98:2F:1F","sha256":"D0:C9:28:06:73:77:71:5B:6D:9E:DD:71:34:D2:6B:6C:9E:F8:2E:40:F9:F1:CB:9D:2F:91:86:C6:60:43:E4:42"}}},"request":{"raw":"GET /assets/Text-fkry7N_q.js HTTP/1.1\r\nHost: cdn.biterfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.biterfz.com/assets/differenceInHours-L4JCVyfs.js\r\nOrigin: https://biterfz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.5\r\ndate: Mon, 10 Aug 2026 18:47:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 49932\r\ncf-ray: a28f8630aa32dcc4-FRA\r\ncf-cache-status: HIT\r\nage: 155\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 13:55:13 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ikYHbMnBIW:2451,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-mirror-isolation: public-static\r\ncloudflare-cdn-cache-control: no-store\r\nx-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172087,"size_decoded":50776,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"06b4b54b5ac9eefba21e01b97c80f14d","sha1":"9adb8a0825a8bc65841b061efa2e37fdf28f50c2","sha256":"8c1231d8962c514663a88d2305a988b479b08c833cb70a407b8df293cf6c32e4","sha512":"9af00da40ae2b9439933fe51c8754a3817323a8d73e5e4e17703d68b9ca0aa3f6a413d7dd066a5a22c05e66c463f50815e004ae557c92b7d2fe0e2c5c5e38177","ssdeep":"1536:fzUwlbNxiTuifemIOinUoEMwOeODIEcmoOd9cIUHqUgsV3dT1HrvNuANh7ph7:TlbOkU7e9hatRHrvNLN7h7","tlshash":"7ef34b89328ab1a9e3bb4b6590b2140db77ad540ec4e180cf1d9f5c519e3842f2f6fb5","first_seen":"2026-08-10T18:28:18.222884Z","last_seen":"2026-08-10T18:48:38.336616Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"cdn.biterfz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}