{"report_id":"4c628e11-d4cf-433a-a8e0-c7c83de92604","version":6,"status":"done","tags":[],"date":"2026-01-12T23:28:11Z","url":{"schema":"https","addr":"sync-bybit.click","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":0,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"sync-bybit.click/","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"title":"Bybit Audit","dom":{"size":22440,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9f05fde0f2a4ad006032907ddeb542d9","sha1":"c8f2c1b53506396775e58679c738743fc47c6fea","sha256":"2556952edf5a3f1b4c13c37fe6381bc6c5433869ca8e5df7f3faa156255bf184","sha512":"42b5b716387e3945cdc43645855c42fe5c1068576ec7a6e6f04020ae27b1a44db416d918434e9d4c103d092bee4750015880024a8d0bd510b8421f9e02cdf5c2","ssdeep":"384:4K0FBuEleJxxxxAxIEBuN44lWs0WigBS/iJiD:4K0FgEleJxxxxAxI0LPMS/iQD","tlshash":"d9a2325552f310526643e0a82ff75b1a3664a407d50acd283fec66d88fcbde5dea3388","dom_hash":"domhash53263340bdc58b36c1552f8742d281b3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"sync-bybit.click","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":0,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-16T23:28:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-12","alert":"Phishing Block","trigger":"sync-bybit.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sync-bybit.click","ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":55,"request_count":11,"received_data":114092,"sent_data":4881,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sync-bybit.click/","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b905a9026fed006441dd20205b6f8274","sha1":"5602d911881a4bf41ba55616aa2a84076c9d5ba0","sha256":"cbf6f207940a94cdae5f5f3b0a48dbcbc39e35d6d1f17b306e99f49fe97ea7c2","sha512":"aa254dacb366e22bdae637a77f2fa424695f9f6bc22a74946ff075cc59013cab4c9e8be05df7d5e7c42d88bb1136d844a52bfe6f4c151ce683bc0ae3da379925","ssdeep":"","tlshash":"7bc02b3771b518f004e7b16e130b870010220043080086013f0c8dd14f108540821141","size":137,"data":"","first_seen":"2025-08-28T16:45:25.997504Z","last_seen":"2026-02-11T04:39:12.550639Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync-bybit.click/","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb090c11d4bb01b2a53b853971291ea7","sha1":"ad6b88cc7735f453bc890d8ba885f5efcf3e092c","sha256":"81390a1a4c774c26fa1c10548c3be76bb6431ebb5a2c63b63512f53fcbfc1332","sha512":"63cddf2aa8d23131e7708810ca8f40421f1eb34e94b694f6392da466e95171e9c5f5ab792ab92e9a51d88069a39ef6cd63b31c4a5724eff3b7173eba246ae0b6","ssdeep":"","tlshash":"c2219d84b5fb3120401772bc47876669601c753f301c4e417e6c6562bf90176ef83be8","size":1407,"data":"","first_seen":"2025-08-28T16:45:25.999756Z","last_seen":"2026-02-11T04:39:12.551231Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync-bybit.click/","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"845b085c234404416da919340f41f27f","sha1":"eb7280cd7686d854de7724bb161c699394bb84cf","sha256":"dce07ae331bfcc127c4277bb567789a493d42390fea5da97d7ce4418e390f8c5","sha512":"fe1d8156bda3314cb3cd4970ee4c6d3f0f949097ce1459051ce5af2e096804e15b83feb1c99d509590ca245a94c2b85f5439f4b9e3f718df3bb1c30824c6a026","ssdeep":"","tlshash":"7b51626823f0a134d327a146d6db77457230b44ba8e5286a7d0c41cc1fdddba8ad72eb","size":2975,"data":"","first_seen":"2026-01-11T07:18:58.108321Z","last_seen":"2026-01-12T23:28:32.502781Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sync-bybit.click/","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-12T23:27:49.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-bybit.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:02:31 GMT","end":"Wed, 08 Apr 2026 03:02:30 GMT"},"fingerprint":{"sha1":"64:F2:96:09:59:2C:55:BA:90:B6:5A:F5:28:E5:46:CC:42:00:74:63","sha256":"7F:76:34:79:BE:B4:73:AD:70:D2:FC:F5:00:B8:5E:84:FE:07:D4:14:78:C5:C7:3B:6A:98:24:FE:F5:2C:03:5F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sync-bybit.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Jan 2026 23:27:50 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 08 Jan 2026 03:59:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695f2bb3-5ac9\"\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23241,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0ec576b716df9e7ad55b5414a2fabebe","sha1":"64c75467283e05f272beda925a1d1e9bc0061950","sha256":"3402c3619d177f3150eeefe010233eca55568865607a423e4894337781a49629","sha512":"49f59acea8b28934caa01b66b3eb914d95c73e068032224a23760a3e890e7132405dbbfb2866c429ff9a3efa6dcc3e127fabf1f7f8830007aa7f1a7a0332bbc3","ssdeep":"384:htHVgzxxxxbIESB4UXUver9O8ilr+/udiV:DVgzxxxxbIEuv2R+/uMV","tlshash":"15a22d2492c16002a133d2a8afa31b1efb595057934691283fec67964ffb954de63fcc","first_seen":"2026-01-11T07:18:58.102243Z","last_seen":"2026-01-12T23:28:32.494686Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":499,"dns":454,"connect":20,"send":0,"wait":20,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-12","alert":"Phishing Block","trigger":"sync-bybit.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-bybit.click/img/fast.svg","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sync-bybit.click/","date":"2026-01-12T23:27:50.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-bybit.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:02:31 GMT","end":"Wed, 08 Apr 2026 03:02:30 GMT"},"fingerprint":{"sha1":"64:F2:96:09:59:2C:55:BA:90:B6:5A:F5:28:E5:46:CC:42:00:74:63","sha256":"7F:76:34:79:BE:B4:73:AD:70:D2:FC:F5:00:B8:5E:84:FE:07:D4:14:78:C5:C7:3B:6A:98:24:FE:F5:2C:03:5F"}}},"request":{"raw":"GET /img/fast.svg HTTP/1.1\r\nHost: sync-bybit.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-bybit.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Jan 2026 23:27:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 507\r\nlast-modified: Thu, 08 Jan 2026 03:59:47 GMT\r\netag: \"695f2bb3-1fb\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":507,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83087e67a4866c16085ec95bd2187e21","sha1":"134ecb79756ac373650c7737fce5105b39f081ce","sha256":"2ba6dab223ae3928b3c3dbd26e7c8a5449e2c894ade64705820b7b7d3014857a","sha512":"8cea2b2cee8427318f41b1dfbdc610b97a9a8584f47b6b89cea75f2af29259b7d76d99192059403e3fea5c9107d3e14cc1d6c9cbf579652930ba37a07ae30977","ssdeep":"","tlshash":"a9f0e9f56418774c8a2b6311e2a8e59fc31e30fd758d0cd9a46c29f4e442d87da03ea4","first_seen":"2025-06-22T10:33:59.651011Z","last_seen":"2026-03-02T20:27:24.01297Z","times_seen":65,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-12","alert":"Phishing Block","trigger":"sync-bybit.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-bybit.click/img/time.svg","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sync-bybit.click/","date":"2026-01-12T23:27:50.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-bybit.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:02:31 GMT","end":"Wed, 08 Apr 2026 03:02:30 GMT"},"fingerprint":{"sha1":"64:F2:96:09:59:2C:55:BA:90:B6:5A:F5:28:E5:46:CC:42:00:74:63","sha256":"7F:76:34:79:BE:B4:73:AD:70:D2:FC:F5:00:B8:5E:84:FE:07:D4:14:78:C5:C7:3B:6A:98:24:FE:F5:2C:03:5F"}}},"request":{"raw":"GET /img/time.svg HTTP/1.1\r\nHost: sync-bybit.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-bybit.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Jan 2026 23:27:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 923\r\nlast-modified: Thu, 08 Jan 2026 03:59:47 GMT\r\netag: \"695f2bb3-39b\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":923,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c41ceccd15d8ecf7798b1e7592e30136","sha1":"2571c4c1141909ee19ffce298139d66986a3249a","sha256":"3c777256fb463bca7d0c5a71d92dfd8a9e7098cdf2c742a58527253dc4c0afa2","sha512":"b732a8d2a434e10962c47def834de840fc236e9fe683f3f33cefc28343c874df3dd73ec54e979d9998c67071c9e2863f35362cc8e10a5b6a41f3bdc6abdfd9b4","ssdeep":"","tlshash":"c71134f1b82c45bc4a1293913b79d18c9769a1ad77ff8cb5ad4c0ab45043ea4fa03d85","first_seen":"2025-06-22T10:33:59.668275Z","last_seen":"2026-03-02T20:27:24.014257Z","times_seen":65,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-12","alert":"Phishing Block","trigger":"sync-bybit.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-bybit.click/img/trx.svg","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sync-bybit.click/","date":"2026-01-12T23:27:50.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-bybit.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:02:31 GMT","end":"Wed, 08 Apr 2026 03:02:30 GMT"},"fingerprint":{"sha1":"64:F2:96:09:59:2C:55:BA:90:B6:5A:F5:28:E5:46:CC:42:00:74:63","sha256":"7F:76:34:79:BE:B4:73:AD:70:D2:FC:F5:00:B8:5E:84:FE:07:D4:14:78:C5:C7:3B:6A:98:24:FE:F5:2C:03:5F"}}},"request":{"raw":"GET /img/trx.svg HTTP/1.1\r\nHost: sync-bybit.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-bybit.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Jan 2026 23:27:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 08 Jan 2026 03:59:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695f2bb3-4cd\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1229,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"258fab0fbbce8d77e60e3a1cbd6ea62b","sha1":"dcfa67e34475123ea688ee52d5de3120cca6bce6","sha256":"922e7a50a737981acf927108f361770898e4bde3a1427fb67b31ef808001dd7f","sha512":"1fab25b028c9c56e0f3f9d1bee764dfac691eda77ec30dee5f964f8572b70cbefc8071768d91b46bf49a7697361ec3a7f87749dbb8de98cc3e4241f8af779f35","ssdeep":"","tlshash":"f32151ed07e8c8cbcc14eba19b06b0bc3146e0ba96c01518e798ca5c098a4af6911fd4","first_seen":"2025-06-22T10:33:59.714169Z","last_seen":"2026-02-11T04:39:12.540867Z","times_seen":62,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-12","alert":"Phishing Block","trigger":"sync-bybit.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-bybit.click/img/fail.png","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sync-bybit.click/","date":"2026-01-12T23:27:50.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-bybit.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:02:31 GMT","end":"Wed, 08 Apr 2026 03:02:30 GMT"},"fingerprint":{"sha1":"64:F2:96:09:59:2C:55:BA:90:B6:5A:F5:28:E5:46:CC:42:00:74:63","sha256":"7F:76:34:79:BE:B4:73:AD:70:D2:FC:F5:00:B8:5E:84:FE:07:D4:14:78:C5:C7:3B:6A:98:24:FE:F5:2C:03:5F"}}},"request":{"raw":"GET /img/fail.png HTTP/1.1\r\nHost: sync-bybit.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-bybit.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Jan 2026 23:27:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 9821\r\nlast-modified: Thu, 08 Jan 2026 03:59:47 GMT\r\netag: \"695f2bb3-265d\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9821,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"318f89bd9ccd1755bd8d0c8516bed8a4","sha1":"d8da3a48814d6d7aef1e733b867310c492c9cf99","sha256":"efdacd559f79382d54a545baa37899e9140d1fd51d0c6bd84b0a01ec9fa983ad","sha512":"5ee2dbe597a1a7b4232e8bf232a4bbc0af035f11384eb3d84196c75fddc93a6371bcd6e02e24e4ded01b3869373b6e25b8ed86bfe009ea04c11390dd8ffd8c82","ssdeep":"192:cS18zXmIPMDH/vxe3bQ+IWpp2MpArKRFMOtuNDQrxwvXZrHeBmecP+NMZz9nbz:b18zXmBDnwdDpsrgLtei6fteBmDP+NMD","tlshash":"ad12bf5cc3562eba893dc037cf1aa643b06ba787d3c2c65c609b1415feb485a4b13d1b","first_seen":"2025-06-22T10:33:59.694437Z","last_seen":"2026-03-02T20:27:23.98715Z","times_seen":62,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-12","alert":"Phishing Block","trigger":"sync-bybit.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-bybit.click/img/done.png","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sync-bybit.click/","date":"2026-01-12T23:27:50.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-bybit.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:02:31 GMT","end":"Wed, 08 Apr 2026 03:02:30 GMT"},"fingerprint":{"sha1":"64:F2:96:09:59:2C:55:BA:90:B6:5A:F5:28:E5:46:CC:42:00:74:63","sha256":"7F:76:34:79:BE:B4:73:AD:70:D2:FC:F5:00:B8:5E:84:FE:07:D4:14:78:C5:C7:3B:6A:98:24:FE:F5:2C:03:5F"}}},"request":{"raw":"GET /img/done.png HTTP/1.1\r\nHost: sync-bybit.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-bybit.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Jan 2026 23:27:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 9345\r\nlast-modified: Thu, 08 Jan 2026 03:59:47 GMT\r\netag: \"695f2bb3-2481\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9345,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"244c520b68d55cef3cf6b66b9967e047","sha1":"fd4d708991659fb45503cf522bcdd81128fa84ea","sha256":"8eb0164564fdf89ac1721256974a0c97f84ce3cef63029112caff54a6be9825f","sha512":"85bf2ea758a50ab61f63cb8c30a63dc77c1fc929a26cb74b9966acf089bb0721a77270d9abbb12593efde2e86d9ddc032ab4809c301baf648713b2e6a286fbed","ssdeep":"192:cSifj4E69BXoxfBS++0xKUHAFhy57mYFZR/gNvhl4glOXp/YbRr5kY32EAf:bifj4Dz+pBYUmhqTpINvQSOGbRVNmdf","tlshash":"d312afd8c69e40ad50e4ef3e9e9ee09d745316c1408308e46204ddf8fc28a85a7ebf97","first_seen":"2025-07-23T16:15:52.393936Z","last_seen":"2026-02-11T04:39:12.542239Z","times_seen":62,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-12","alert":"Phishing Block","trigger":"sync-bybit.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-bybit.click/img/dot.png","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sync-bybit.click/","date":"2026-01-12T23:27:50.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-bybit.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:02:31 GMT","end":"Wed, 08 Apr 2026 03:02:30 GMT"},"fingerprint":{"sha1":"64:F2:96:09:59:2C:55:BA:90:B6:5A:F5:28:E5:46:CC:42:00:74:63","sha256":"7F:76:34:79:BE:B4:73:AD:70:D2:FC:F5:00:B8:5E:84:FE:07:D4:14:78:C5:C7:3B:6A:98:24:FE:F5:2C:03:5F"}}},"request":{"raw":"GET /img/dot.png HTTP/1.1\r\nHost: sync-bybit.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-bybit.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Jan 2026 23:27:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 50653\r\nlast-modified: Thu, 08 Jan 2026 03:59:47 GMT\r\netag: \"695f2bb3-c5dd\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 424, 8-bit/color RGBA, non-interlaced","md5":"3f32a7713666bd5e6291f4f77bbdf8ab","sha1":"2fbee7f161fde2fa84525c5887ffd497f494b389","sha256":"3ae6ade587e89bc93b63f0195aecd8197ee4d33e131002a26e9d571d81e45d34","sha512":"d82bbdb33ec1a9f724230a19490380c2b05037e4336a26a9521f327f3c7c48e1fd01a5647339738c526e5b365bca51be7fd9b2fa243cfb80cae60adda2b0e97e","ssdeep":"768:koA04+DiQ29zPrMpm3R1UMoGQfNKT8MHV/8Wzy3JPrOh+8w5KcJqR:3xJi1Km3kWQfUT/1/8Sy3JDO+KuqR","tlshash":"7c33f25a4150dd2ffac8507cb34493bd0b22d24be7b15810abb9440b8d5a6d3dc8ddbe","first_seen":"2025-06-22T10:33:59.67159Z","last_seen":"2026-03-02T20:27:23.998561Z","times_seen":57,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-12","alert":"Phishing Block","trigger":"sync-bybit.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-bybit.click/img/icon.png","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sync-bybit.click/","date":"2026-01-12T23:27:50.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-bybit.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:02:31 GMT","end":"Wed, 08 Apr 2026 03:02:30 GMT"},"fingerprint":{"sha1":"64:F2:96:09:59:2C:55:BA:90:B6:5A:F5:28:E5:46:CC:42:00:74:63","sha256":"7F:76:34:79:BE:B4:73:AD:70:D2:FC:F5:00:B8:5E:84:FE:07:D4:14:78:C5:C7:3B:6A:98:24:FE:F5:2C:03:5F"}}},"request":{"raw":"GET /img/icon.png HTTP/1.1\r\nHost: sync-bybit.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-bybit.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Jan 2026 23:27:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 2015\r\nlast-modified: Thu, 08 Jan 2026 03:59:47 GMT\r\netag: \"695f2bb3-7df\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"052374b43a2a8bf7a0c661ec08d19918","sha1":"f4b3334409917f14dd09018f8078897f53c24dd8","sha256":"08c694f640edd49c3e1bb391c5e52b064cfbe590a6aef5e0c1f72a228be4dab1","sha512":"db6c05cee45bec5195e2ae490e0b11511e1cbb945eea854063fb20778639d8945839d135a4d1d317ccc6e6871d96d695070d52486963f5859d6446cc425919bf","ssdeep":"","tlshash":"45412d5239ed4d79d4ec9132910b973d38659ff3131733d42451b1686224f6ba20bdb2","first_seen":"2025-06-22T10:33:59.706214Z","last_seen":"2026-02-22T19:17:44.732012Z","times_seen":61,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-12","alert":"Phishing Block","trigger":"sync-bybit.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-bybit.click/img/logo.svg","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sync-bybit.click/","date":"2026-01-12T23:27:50.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-bybit.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:02:31 GMT","end":"Wed, 08 Apr 2026 03:02:30 GMT"},"fingerprint":{"sha1":"64:F2:96:09:59:2C:55:BA:90:B6:5A:F5:28:E5:46:CC:42:00:74:63","sha256":"7F:76:34:79:BE:B4:73:AD:70:D2:FC:F5:00:B8:5E:84:FE:07:D4:14:78:C5:C7:3B:6A:98:24:FE:F5:2C:03:5F"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: sync-bybit.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-bybit.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Jan 2026 23:27:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 08 Jan 2026 03:59:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695f2bb3-5bc\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e592090eed1fb82a0f2fa307fd4defd","sha1":"aed6448de92999c50b5684867c133fe2f38f47c6","sha256":"05197bc478bf477d3fb7f4b7f2e87a8c81501fe5be9fcc1700eeebf0ba0a0847","sha512":"ad1a202cb1c39b0dcb0e401714299ef0cf5ee72005c32af0b78d795af2a4521bdd8396421a9bd992ad082a716b3f23d7b7ff95f6736e6120d16a6b57b66070b7","ssdeep":"","tlshash":"133112ca73e9e6d4c644aba442697e3b702171f69dc5a350cf526a0734d440f08d4de8","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-07-05T11:45:18.832476Z","times_seen":163,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-12","alert":"Phishing Block","trigger":"sync-bybit.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-bybit.click/img/big.svg","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sync-bybit.click/","date":"2026-01-12T23:27:50.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-bybit.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:02:31 GMT","end":"Wed, 08 Apr 2026 03:02:30 GMT"},"fingerprint":{"sha1":"64:F2:96:09:59:2C:55:BA:90:B6:5A:F5:28:E5:46:CC:42:00:74:63","sha256":"7F:76:34:79:BE:B4:73:AD:70:D2:FC:F5:00:B8:5E:84:FE:07:D4:14:78:C5:C7:3B:6A:98:24:FE:F5:2C:03:5F"}}},"request":{"raw":"GET /img/big.svg HTTP/1.1\r\nHost: sync-bybit.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-bybit.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Jan 2026 23:27:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 08 Jan 2026 03:59:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695f2bb3-291e\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10526,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d6a36fb03eec6fc719fbef3794794c5","sha1":"a7dcedf82f5b2c53d8932fe537d0042e0634a65f","sha256":"b1b26deaa3b37fa1af0b53df25d0e3ebd6cc1541223b4ac8ff2df5252d59239f","sha512":"353cbd32389ae71701380eb6f8a584b11ba1bdbac05666e76d9fa067a486deda27bb03dc93e00ad86ca8cb3c00adada517f47c47fb4efbe152ec466859825f4d","ssdeep":"96:ay7CTqN955Sjlcm/A6S5EbuxGxQxQy19hA8uFjR9qrvcEQF5K0aCHBmSCyx8WSL:aq5Y58A6ztuR93F5K0agBmSBxm","tlshash":"ee2240cb671cddfca81b056cef61b56a173fa1a8720e61c4a47ede35021394de62bc80","first_seen":"2025-06-22T10:33:59.717929Z","last_seen":"2026-03-02T20:27:24.019053Z","times_seen":66,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-12","alert":"Phishing Block","trigger":"sync-bybit.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync-bybit.click/img/pdf.svg","fqdn":"sync-bybit.click","domain":"sync-bybit.click","tld":"click"},"ip":{"addr":"172.86.94.172","port":443,"asn":30823,"as":"aurologic GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sync-bybit.click/","date":"2026-01-12T23:27:50.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync-bybit.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 03:02:31 GMT","end":"Wed, 08 Apr 2026 03:02:30 GMT"},"fingerprint":{"sha1":"64:F2:96:09:59:2C:55:BA:90:B6:5A:F5:28:E5:46:CC:42:00:74:63","sha256":"7F:76:34:79:BE:B4:73:AD:70:D2:FC:F5:00:B8:5E:84:FE:07:D4:14:78:C5:C7:3B:6A:98:24:FE:F5:2C:03:5F"}}},"request":{"raw":"GET /img/pdf.svg HTTP/1.1\r\nHost: sync-bybit.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sync-bybit.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Jan 2026 23:27:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 08 Jan 2026 03:59:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695f2bb3-500\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1280,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b35d92bfa90cd0d492ed30ac77c80ead","sha1":"59d952c9f0495552bc8656ccea7a9887ff5dc859","sha256":"f5b24f521717e9e2e197d4ffcaeee416cabd36e6b282f4365dca64e51fa2f37a","sha512":"87e815bf47535c039672cbc0dab4fc37359affaab20c27875f33c24257dc0786e938e562f04faf717ade6e722c0d29e2ad2b612e0038df77ba5b223948cc674f","ssdeep":"","tlshash":"5021f0e2266800dd5a5a8695bf39b5c5438d60ea72af85c6895d0fbcd40ddd4f213a40","first_seen":"2025-06-22T10:33:59.647863Z","last_seen":"2026-03-02T20:27:24.010422Z","times_seen":65,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-12","alert":"Phishing Block","trigger":"sync-bybit.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"sync-bybit.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}