{"report_id":"4e023105-e421-4330-92fc-ff1f56c16dd0","version":6,"status":"done","tags":[],"date":"2026-01-18T22:25:51Z","url":{"schema":"http","addr":"nistbit.com","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"104.21.83.20","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nistbit.com/en","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"title":"Cryptocurrency Exchange | Buy cryptocurrency on nistBIT","dom":{"size":655468,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65332), with no line terminators","md5":"86fbfd5e2b8a771d689d08597ff54611","sha1":"a9212ba9844a54b9b470f03f0b150cba67620acb","sha256":"1d825c86940db39b1164d16e43572d11def7cfa1b493a6f74bcbbf60fbd88b54","sha512":"81076d5ead2133effcac1a9521860da63e778628e893564834f4fe1220771b7ed0297e836a58ae6a293e0a3927112f1e15e4b783d3ab8cd9f1e2b82342c26ac2","ssdeep":"12288:lNmjjw0AoAj6saKgng32sTclLSOouV0oI+FIrFmG/qxs4Boe+vHYo6bS8:lNabS8","tlshash":"7dd430bb130230bcf5b147c4d41b74141b2d616af7c958adc36d9a363fa5ae3b6220da","dom_hash":"domhasha81fa11113481c0b93ed2ac2efe3ec60","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nistbit.com","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"104.21.83.20","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-22T22:25:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-18","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"nistbit.com/app-resources-d4/main.dbaaa30daa0453a9a13b.v2.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"nistbit.com","ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-01-18T22:25:52.73297Z","last_seen":"2026-01-18T22:25:52.73297Z","alert_count":35,"request_count":34,"received_data":3248128,"sent_data":17318,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-01-18T22:25:45.99612Z","alert_count":0,"request_count":1,"received_data":1777,"sent_data":476,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":1,"received_data":49367,"sent_data":551,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-01-11T22:26:49.271833Z","alert_count":0,"request_count":1,"received_data":368,"sent_data":476,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":1,"received_data":3241,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nistbit.com/","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c38a1c38db52a93a90b3ca58090896b","sha1":"120d4f1ee4a3b625518bcaf92a2da1fb3a9c45cf","sha256":"dca0a9325f01c1f74bec70f2e2156dd536d0b926f7f068a73a2761ef55a90c16","sha512":"1d05ecd9ed686eb478a6c438210ae2a501e5e43edf515f29a079ddb70a55b259fd9c18fb2c7f684670fab5735b02b7c161c0a59225f7eec0415a34b79e0181f8","ssdeep":"12288:6Nmjjw0AoAj6saKgng32sTclLSOouV0oI+FIrFmG/qxs4Boe+vHYo6X:6NaX","tlshash":"b3c4ecbb130224bcf5b147c4e45b74141f2d626af7c858adc32d99363fa5ae376220da","size":586029,"data":"","first_seen":"2026-01-18T22:25:56.922975Z","last_seen":"2026-01-18T22:25:56.922975Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-06-07T00:10:49.657309Z","times_seen":687175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Inter:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 18 Jan 2026 22:25:30 GMT\r\ndate: Sun, 18 Jan 2026 22:25:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2555,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fcf63d91b46adf99bd3db1a56530254","sha1":"62f7d93d0b191e1e8464958268f225f51dd1752d","sha256":"63867a7c4bb197935b85ada1c4bcbc95951598dfb736b24132f0a43e5e5e365c","sha512":"16d25c5cc841006ca8e86ef334efb051054257e6990275a3a0d1e25f9adc6c665b65ff9083dfc9c409d84b69365a26eb9ba875431ca75765743b70902e684d14","ssdeep":"","tlshash":"0451ab92002ba404ab931dc233cf7f3aaece50856085d2b96ffd1dc65cead66436875d","first_seen":"2025-09-10T17:57:06.167004Z","last_seen":"2026-06-07T00:24:21.611962Z","times_seen":28601,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":85,"dns":1,"connect":20,"send":0,"wait":32,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/api/spa/_/config?","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /api/spa/_/config? HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: nistbit.com\r\nX-LOCALE: en\r\nApp-Key: MTc2ODc3NTEzMDQ1MXwwLjk4MTYxNzI4NzIzNzExNDU=\r\nApp-Locale: en-US\r\nApp-Timezone: UTC\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncharset: utf-8\r\ncache-control: max-age=120, public\r\ndate: Sun, 18 Jan 2026 22:25:30 GMT\r\nx-fastcgi-cache: STALE\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qAMdjQVWbZFcWDzIbrAVEKKivo9MaC7w2rUHinfaxzhaRlcMk0LxTnoSuJC2d2k%2Fddprsl7KPlDSqA1zN785O17%2FpP8XS8Db0A%3D%3D\"}]}\r\ncf-ray: 9c0182358b8f568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6203,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e67fd2408f4b746e73821338da32469c","sha1":"48463b09860ec9763f700b7d254b74f862c0be00","sha256":"3502c099d935f26deb52c58a71c42a2d1f718d905427c0cd5f30892484b100bc","sha512":"d38c3996f835842996c568e556f5937918508aaf4037de0d87a499df175c50d2ebb8d7741e20a262794841370755df6ea9eb548c51cb96126df9f50c58d2740e","ssdeep":"96:hrDfZe2Bfi7XRLSwd8bxR6hh/NTGVJQob5vQef/LKWaA/5DI67relap4PwISS87N:He2o7VZyE/xGVfZaASYz9","tlshash":"afd18788861a0bf109f630d0bcfb6ed05c7ca7176145de4747ae8e2582e432ebb2f815","first_seen":"2026-01-18T22:25:56.874526Z","last_seen":"2026-01-18T22:25:56.874526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/api/spa/_/currencies?","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /api/spa/_/currencies? HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: nistbit.com\r\nX-LOCALE: en\r\nApp-Key: MTc2ODc3NTEzMDQ1MXwwLjk4MTYxNzI4NzIzNzExNDU=\r\nApp-Locale: en-US\r\nApp-Timezone: UTC\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncharset: utf-8\r\ncache-control: max-age=120, private\r\ndate: Sun, 18 Jan 2026 22:25:30 GMT\r\nx-fastcgi-cache: STALE\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R8O6MBpXByFudelxOiYVwS9gkVLDlgQKtW5y%2FWdFi%2BGtqa7YGnXoQA300Ov49x5gfwMSMx%2FkZoHqWPzs1aszFmqlpAo0SyKtAw%3D%3D\"}]}\r\ncf-ray: 9c0182366b9d568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520976,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b711d0e4c25ab5005fa36b2ba3df88cb","sha1":"de34b9b4330ef7efe3db1f9b9ae404f601077ef8","sha256":"0baf5e85ec45c6ff958a5102f18b0cb00b62bd4835eefbe8af7fdfe56b7ede3e","sha512":"38de879c596545b8ac3cf48e9fdac86302b4dea314fda5ab59383676c9f18c11808b2f5f74c4aa3e698bd28122b5c5c9ba1abdb53467b191bd6457f1adf91eb9","ssdeep":"12288:6peLMiCsEjI+6ElBxfcMzIzvUy2sj+a2mZGRN+uvb9uwvKGABvyEae:qc","tlshash":"b6b4bcba224220bcf4f147c4d45b70241f2d75a6f78958adc32e8a363f655e3b5260eb","first_seen":"2026-01-18T22:25:56.877114Z","last_seen":"2026-01-18T22:25:56.877114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/mh-main-start3-light-min.109315314dfd723f3fcf.v2.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/mh-main-start3-light-min.109315314dfd723f3fcf.v2.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/app-resources-d4/main.bea2945007793d537781.v2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 100608\r\nlast-modified: Sat, 03 May 2025 15:59:53 GMT\r\npriority: u=4,i=?0\r\netag: \"68163d79-18900\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKZ62EdR3hRHDtmhQwiK2W%2FUNmAO34KfOfkvgBF0yppk58Ib%2FV%2Br88c8vFbPW8PlipwEfADlope9mLljhocfPq%2FAJsOqZxAfzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c0182396bba568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100608,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b2a7684ef128b3e8249391675bd4879","sha1":"ae6ff9d4440bc2bcffb556d3ceb8fa8281d632ee","sha256":"32a460c9bbfa738d6a6590281d4b7d5cfa3e4b6422a41e6f0167c1b7c4629259","sha512":"6b07037b596af6b036efff92c57659fb8dd5639a8ad156e31ed5f1b478bae08d339df4327510c1483d633f8c2397da6aa70f0bb104559349b6b7682f4864104e","ssdeep":"1536:VCCV8ropnBmCKBwpiXmwJR5TRqOSHmSSW/d+rN3t71+2U+6HYUKn35OVBEMs:VQrKrK4iX7tOHE+d+rZV1+wDJSW","tlshash":"11a3026174a1e0a25d4ae06e1af72a5c7c683847ce76652c0d615c7ce0d2efacee8c64","first_seen":"2024-12-22T21:55:07.363681Z","last_seen":"2026-05-09T07:28:17.107585Z","times_seen":17,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/mh-main-start4-light-min.fb06b25e9f6faf2752b7.v2.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/mh-main-start4-light-min.fb06b25e9f6faf2752b7.v2.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/app-resources-d4/main.bea2945007793d537781.v2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 232439\r\nlast-modified: Sat, 03 May 2025 15:59:53 GMT\r\npriority: u=4,i=?0\r\netag: \"68163d79-38bf7\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RMIGsU%2B32Pzfmky71kR69KOCkDaUCSswSdPwe%2FpQwcjSAThpSsmTI9cNYTw7TiLJPaVK2PIgoGuKj%2BR%2BLhi04IzliH9tHCdT1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c0182396bbb568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232439,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1176 x 642, 8-bit colormap, non-interlaced","md5":"97022ab5ebeaee544d0d4f3fe011bb53","sha1":"df82c79aff5bd7df03d48cdf8ad6cafd67459c4b","sha256":"215d53c6bc09d1a36062c07709ec00dfaf4c5e7fdaa49fd27626c41d721d9051","sha512":"ae8672d792d6e817aad1ea8f26746f597adf05850cf86829aded44d0bfca2cf100829bc9e134afde588b4fb2b363ab6592b9c9539bc529dfa5f393208b1063a7","ssdeep":"6144:x+FC7mNAoX5V0lL8NmXzyA0gZAP/VfGb+:x+C7clzwGXgZAFfN","tlshash":"763423b0d452aec0cb46a2270759dc3cd9feea4cf80f7bd6807b953a48954b1376c962","first_seen":"2024-12-22T21:55:07.366656Z","last_seen":"2026-05-09T07:28:17.124577Z","times_seen":17,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/news-banner-3-min.cdff803db3d9b3b34e92.v2.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/news-banner-3-min.cdff803db3d9b3b34e92.v2.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11440\r\nlast-modified: Sat, 03 May 2025 15:59:54 GMT\r\npriority: u=4,i=?0\r\netag: \"68163d7a-2cb0\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJI3XBnqvGecBKUCbfxH8e2t3QC3cBtfpgy2vKKS9iisCsB4bAl38Xko7jilm3tb3WqLTmShVdVBcnh71pEMcnd4BtP1c965mQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01823d5c03568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11440,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"37fe1b2950ae4c260ad5b7a2b839e108","sha1":"dfb9547762d91302bee342c5a55ae0b91b50d947","sha256":"5c74621f15cd234647c340fb00b38fa3b144d3aa98c1d44786cf985d3f33cc73","sha512":"e02be85e56cccb45f89b5a31c7942884bd7ad0f825e87ede9f9621fb744927722a5fecae46b61011bdd7c5bb441034e0274cfe80d9bbe1da30e28cbfb0ed851d","ssdeep":"192:UHxtxl1CUCzv//exno9BazIhfEEmjbS3ANu2a0nB3Cvymb+7ijNDBT1l:QDl1CV3KzIgMANutADQVBZl","tlshash":"6632be239c3f9198c4998482b5aa662c33a2367df38c84452b3c071f5d6a33d5abd1e0","first_seen":"2024-12-22T21:55:07.395222Z","last_seen":"2026-05-09T07:28:17.102136Z","times_seen":22,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/413.aecc341eb622f634f4a2.v2.js","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/413.aecc341eb622f634f4a2.v2.js HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 171545\r\nlast-modified: Sat, 03 May 2025 15:59:34 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"68163d66-29e19\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 18 Jan 2027 22:25:30 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NyObbRVq95ZkgvJ6j%2BwewhjFwDHk940iFYD3EyYXGSGL76U%2Fp9SL7OLdOFIGahsbqdQ7c75jmVnnHyqbdg2AGMYkrEfpUVVO7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c018232ab74568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":584679,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f745a9857c07ba4b3f01522152507f9e","sha1":"4a9b4fb4dc8d45f275f3ddc17401a42737109414","sha256":"89222c1a6ddefce5f1bd5f93f566f60bf792b642ad983c7bda147a20125da3af","sha512":"ea9061fb85d71e46cc37288029a7c9f02926d0cc78fd18b7b03a7539c5bc20262864a5015ee289cc71746fdfd8bffee92b265a87f66ed2ae62ea5b14d0ff5cb1","ssdeep":"12288:tNhcyGvK4tT5c8jyAiXBtX1JaNAcB/NajwakyIZX4/GuH+SZgoUDcXW3y31yOrjb:rhcyGvK4tT5c8jyAiXBx1JamcBEjwakm","tlshash":"15c4b74066c06884134b9ffbb72bb0e5e85e0d6f3c98488fd154bc6469a661ffaf1931","first_seen":"2025-06-23T06:49:49.33773Z","last_seen":"2026-05-09T07:28:17.094623Z","times_seen":16,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/main.dbaaa30daa0453a9a13b.v2.js","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/main.dbaaa30daa0453a9a13b.v2.js HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 133024\r\nlast-modified: Sat, 03 May 2025 15:59:36 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"68163d68-207a0\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 18 Jan 2027 22:25:30 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xX586%2FNinjo3izcfU4amL%2B0NqpdIFqgic5OT45qsGrSrnsDPlRLfS2LpYi5Gh4FjP8fk6rQVwCj3%2FGUlRKUjeBKuMr%2BzHdNv%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c018232ab75568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":551653,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dd3e3892d28e4adc82335492b0d07ac9","sha1":"b17ff7a9d1c6f6dc71b8581b4026915be878529c","sha256":"5766e267b1b566e667468c4481f497e1f1f8e62295811307afb4db7594022171","sha512":"ccc00d4c43d755610727b17199c33f025f8e8547d2b6c453e1cb1b712081e9f297c73ed82aed68fb0c54eb258393dcd2f8371b4d01f23cd99958e87890aa9a42","ssdeep":"6144:AKSQcI/aaHKYOUsGJrOibSb4oBjLNZpoOWMjYjfHvvnPphazfNJB:Qs6R3b4Od7oOW9/RhazfNJB","tlshash":"d5c4b584f3e0b45c534b9b36b73fa4ddf81f0d6a7588489bd140bc146a9a22bf9e1931","first_seen":"2025-06-23T06:49:49.313791Z","last_seen":"2026-05-09T07:28:17.118125Z","times_seen":16,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-18","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"nistbit.com/app-resources-d4/main.dbaaa30daa0453a9a13b.v2.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/api/spa/_/news?locale=en","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /api/spa/_/news?locale=en HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: nistbit.com\r\nX-LOCALE: en\r\nApp-Key: MTc2ODc3NTEzMDQ1MXwwLjk4MTYxNzI4NzIzNzExNDU=\r\nApp-Locale: en-US\r\nApp-Timezone: UTC\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncharset: utf-8\r\ncache-control: max-age=60, public\r\ndate: Sun, 18 Jan 2026 22:25:30 GMT\r\nx-fastcgi-cache: STALE\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JGmkaPZvhLAp9q9I3l3QM8T51yW%2B66zkxZ7Fv3tCxMIr41NivIqNI7BmzOrzImT1jDPt%2BjmX13niv3c1IMs1dDax7VV1KmahoQ%3D%3D\"}]}\r\ncf-ray: 9c0182383bad568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3c43a898afb12d5088377ca2859fa638","sha1":"a2a2acf0900b9e1027320639ab0e284b2bce07cd","sha256":"56c361cf153258710e671a8235b086abb2e3776ed67d5e3fd1989d89242b8037","sha512":"4ce9c21c4a3843e1c0cf31b3b963c2aeb9be3b8e7bb4ce2eb5281a7bb76ff5d9d3a7e56325d4ba8dc02e975a2cafbbfe06d38e3c8f266d2a4e42de036ed77afb","ssdeep":"","tlshash":"3a8004403d01003055005541f40c1d40457431114314143014ccd4c1417c0573d7451f","first_seen":"2023-07-08T15:07:01Z","last_seen":"2026-05-09T07:38:55.096949Z","times_seen":119,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/images/currencies/s/e2acd857.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /images/currencies/s/e2acd857.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3892\r\nlast-modified: Wed, 05 Feb 2025 10:58:32 GMT\r\npriority: u=4,i=?0\r\netag: \"67a34458-f34\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uoHEWaP6o0sTfZW64ftldOXHacAWHE71%2Fi8asqC0MSpq3SoOYlwOVH%2FonOPaRJm2ZS5EfCU6nz2PQApORbaPkF%2FY4OfLSJRIQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01823a0bdf568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3892,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"dce7837c7239cf485263be4d4e24cd41","sha1":"36bdcac92b227ba65d8b8c6bcab43f2687bb93b4","sha256":"9669c9046b6f23da58e9f44d234fbed683c0af87d9d32d6a6267a4014f61cf5f","sha512":"7476f6eabada6c3a759132a757f93ec44be07b9c0d16bd8fb5aa63c0fd38f53a624edc1d8855ab8f57ca0202fa7980b78efaf21ae21da6984d9ab90033edbe6e","ssdeep":"","tlshash":"3d816e8cd3d89c7796a66bf3184e311e04fbd8ed3059ee87d2b7518f20c4a4a5702b69","first_seen":"2024-12-22T21:55:07.380414Z","last_seen":"2026-05-23T13:17:10.365681Z","times_seen":113,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/images/currencies/s/312ccb6f.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /images/currencies/s/312ccb6f.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3469\r\nlast-modified: Wed, 05 Feb 2025 10:58:32 GMT\r\npriority: u=4,i=?0\r\netag: \"67a34458-d8d\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rv%2FQ%2FOUJjHckjdNcHYpfHfbEA%2B9ZyP2i3Tl1%2Bc53%2FPYDEj%2FtEUp7KgqV6nBe2rvuwfSXm6CUwTySdg5O2NZGohH6NzxcKfJPDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01823a0be0568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"06c17e88d5cb0bb08b02448edfc059de","sha1":"f7fb762645e356dd9b49c8d5c7aa509a7a10550d","sha256":"1d86a1559c950a7cb9e6d4884363b320ab40812b0ed5885c5f5bdef5b05a2747","sha512":"34bf6334e933704ee69120f06d8ab4966547aa1b802a08024458237fa65a627b9cf35aded36c2e76132c2450d233ae58a2991b91e9b1e1d009b0f8c52494745e","ssdeep":"","tlshash":"ea613b7682519b1891387d22a08696f14fb06d60473e91a1f8879b27f311085f14438f","first_seen":"2024-12-22T21:55:07.382508Z","last_seen":"2026-05-23T13:17:10.340499Z","times_seen":114,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/images/currencies/s/d60541f8.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /images/currencies/s/d60541f8.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 9064\r\nlast-modified: Wed, 05 Feb 2025 10:58:30 GMT\r\npriority: u=4,i=?0\r\netag: \"67a34456-2368\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jDj2iiau7EdQ9QRP6UD1N4hVGYY520o%2F34AcA%2FBPvwtxoSWHWXCOHHQYSaIGnm5LUAvcJGo%2FTFMYpsZ%2Bg3T8V%2B%2FPMvlXsPcPEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01823a0be1568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"437bb560cefb04da22b30239700bf853","sha1":"c40be0c9a485e8ef4af49d1989176f97d5c7bf7d","sha256":"ee550bceac96ce1eb695aee1a188c3f692a8751feeec046f7e209da3ffa99943","sha512":"de1bbdba4c01bee7a03200d013e68b1bce06d13b1aaaed6c9ae14d61aae7099fed259e6b7cb2ebc3d9ec65e47c2a48de693df1faa15572dcba45e815b98a06ab","ssdeep":"192:DSAcJCn7+P0lCNN/e087ulegIRuyHsH4SrIgZ/brgEl8vtXHrV:2fbVNWFusDbX4IIzrd8VXHB","tlshash":"6712bf7316ede279725a6308fc26500dc992adc4d122f90f824bc2da77a8a16341ef5f","first_seen":"2025-06-23T06:49:49.326528Z","last_seen":"2026-05-09T07:28:17.072746Z","times_seen":22,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/api/spa/_/locale?locale=en","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /api/spa/_/locale?locale=en HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: nistbit.com\r\nX-LOCALE: en\r\nApp-Key: MTc2ODc3NTEzMDQ1MXwwLjk4MTYxNzI4NzIzNzExNDU=\r\nApp-Locale: en-US\r\nApp-Timezone: UTC\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncharset: utf-8\r\ncache-control: max-age=300, public\r\ndate: Sun, 18 Jan 2026 22:25:30 GMT\r\nx-fastcgi-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rYdeH9t15YO6CQK1ILjQVHp2Df50Zuo5pw8eu2dQY3MWig2gP46sn7puipiC%2BoDLE%2BWgq9hXghnLh0SxuwrQqlDzWYhoM5jLTA%3D%3D\"}]}\r\ncf-ray: 9c0182358b90568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64885,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1d8060deecd96177d93ff800b37e4ae3","sha1":"e1e8a20dc6dc2e3896efe1dd92b23a497ac5ece5","sha256":"5d5f212cf21757ac253c1561bbd76de8ef7a23f74fc6044277fabd47bc1d15e5","sha512":"d5caf2330d9d91538327cfe8e82e0add70448ad4c52b5a34cd8b7ac51c4044d02d720adee8d773c4e6c9c4de7def1f367d97b98c36036e0cabb442a61692d937","ssdeep":"768:Eh7+p0hXvgrqqlAFdF91veUUPPwXcMKV0nzd0ioVPoNRnN/bBI4by:EhSa4rXAFTCFIndzLoSH/FFW","tlshash":"2853ba0fa6083e728fc5129574be1ad9e6ed0254629185984eecc43d03f9eddd13b8eb","first_seen":"2025-06-23T06:49:49.317512Z","last_seen":"2026-05-09T07:28:17.109615Z","times_seen":57,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/UJPbmTBFI33IKYR0sNAPACBfRn0.1db5ca839856bfe231c2.v2.ttf","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/UJPbmTBFI33IKYR0sNAPACBfRn0.1db5ca839856bfe231c2.v2.ttf HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/app-resources-d4/main.bea2945007793d537781.v2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:30 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 45721\r\nlast-modified: Sat, 03 May 2025 16:00:02 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"68163d82-b299\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 18 Jan 2027 22:25:30 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gJSUC%2BTSjjXnTMkPt16xTogE5zyvbvJrXf1Y2zRGazPfTG7Wp01MnvquYfE852pQbtnf90xfGGpYxCby8NZJLxFU1Tcdvc4crA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c018237dba7568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102068,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 54 names, Macintosh","md5":"398b7b09ce09493f61cc28f64cdf32db","sha1":"d443b02aa6f912c27ba327b69700a6069edc0dad","sha256":"3d9b6f22423b4f7f6a167dd2406c7535a394551ab2b9de2eea6ac9a945f9c5b4","sha512":"d31f27fb3911e446993e7d1b11c72fe14bb942c54836355fce2b495768363facb0ffbeee6b311e3cb7fac81a4639ba99af6560a28e21f04e54efdf363a3f477a","ssdeep":"768:zBjgD1NJl+kbv6jH4IfhJcNusRxbqvVPgym2xrs4QBcDdkPykXfZw+/WVBs6plSX:eD1NbE88UbiKsD+/WiIYv45Dqa+vbsq","tlshash":"bea35b17f79ac723d1879f3a9531e315abb8f9357f2b530b5880a539acc62844d9038e","first_seen":"2024-12-22T21:55:07.404625Z","last_seen":"2026-05-11T21:01:00.914466Z","times_seen":19,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/mh-main-dark-min.212043d8a3fbbf6026e0.v2.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/mh-main-dark-min.212043d8a3fbbf6026e0.v2.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/app-resources-d4/main.bea2945007793d537781.v2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 22338\r\nlast-modified: Sat, 03 May 2025 15:59:51 GMT\r\npriority: u=4,i=?0\r\netag: \"68163d77-5742\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tJN%2BO6EBcAIWJoqIIXCoV05GMoHzJbUs7FF%2Bx1ly0MRf1BDVHICIRQeNfsqPV5Jf697y3hGl%2BvESDuo%2Fa%2B2SLV4UioTliBd5ig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c0182395bb5568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 632 x 514, 8-bit colormap, non-interlaced","md5":"dda49fa8849fbbe3e78c6c5a0a9225f3","sha1":"2b42a08ae87dbd359e465bf9f05d3a458701eca0","sha256":"192060c559e5a37389715573a12f77e08d9c3710a297b1758c312182108ef859","sha512":"3c6d4c76c8514a15642a11dce252baf066162c856d9a5fa115cb2e219f3c3f5123edc5cba4335993296d35dd1b4c5d60c070090b60e3ee3786f89cfe9c8ca45e","ssdeep":"384:UHXCXiDLfUNkp0Seywf3CP+m84M90hMRIPFETTI1TlXIzgMOQP2dRfGnFkuout5s:EcKSS5wrA8+ETTClXIzp5nVoufLY","tlshash":"d4a2d1b368a1d7c9f483c9346de396a875cd0e64028d8e522f9acd0b9f794b9d5301e8","first_seen":"2024-12-22T21:55:07.350515Z","last_seen":"2026-05-09T07:28:17.110587Z","times_seen":22,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"nistbit.com/ws/?EIO=4\u0026transport=websocket","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /ws/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nistbit.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: iiSXPOR7+Lt8R4pknD+QAw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 18 Jan 2026 22:25:30 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Xk85yDVfWhoJqSkPfgpD8vHcoaw=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AH5RHIf46DkTKuO0qw4npMz%2BMnxbZVAlYCWQ60nmTqc2wlO1xEOjuxk8Jtn%2Fg5ujg165f2CZk4FAr%2B6lQQNTyx%2B%2ByHELUpnh0HRNdLmMzqOQPRa5S1qpMJT1SNSg6Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9c0182356c1256bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=527\u0026min_rtt=485\u0026rtt_var=167\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3115\u0026recv_bytes=1179\u0026delivery_rate=6928229\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=5dff803c6b45aec6\u0026ts=99\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T00:09:48.841876Z","times_seen":16196943,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":19,"connect":19,"send":0,"wait":85,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/api/spa/_/currencies/changes?","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /api/spa/_/currencies/changes? HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: nistbit.com\r\nX-LOCALE: en\r\nApp-Key: MTc2ODc3NTEzMDQ1MXwwLjk4MTYxNzI4NzIzNzExNDU=\r\nApp-Locale: en-US\r\nApp-Timezone: UTC\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncharset: utf-8\r\ncache-control: no-cache, private\r\ndate: Sun, 18 Jan 2026 22:25:30 GMT\r\nx-fastcgi-cache: STALE\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ADjoKdcDXz%2Fi60g6FTfpsdTImB9PxK4qrcdaqzlXUL7BXZyKmRwehQefFMXGumAQl%2FYZCBIN%2BheYeNIPo8yUCeCYruDVAa98hQ%3D%3D\"}]}\r\ncf-ray: 9c0182359b91568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1606,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eadf834360708686930b31b4be1be159","sha1":"691933e4764ee81dd433af3e240ef1019b7f476b","sha256":"8826fd54044109b6b23130f1b84cd72e396814a561e9cb5948459a3450d0b0a7","sha512":"f3b705e26a2247fe86ce5fb1680ef1e6821daf7d0d2be90a8a243919aa8c9c89a162755ce7bf070d30afd66d0d1009b4e2802a4515382bdf7d58861f4d4f6ca2","ssdeep":"","tlshash":"3d317a914ecaa1feef1506085ea73c655c3ea23b1bd63dc6b0851c4885d4bdcb328523","first_seen":"2026-01-18T22:25:56.899122Z","last_seen":"2026-01-18T22:25:56.899122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/news-banner-2-min.d4e46cc644f0d8e1f182.v2.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/news-banner-2-min.d4e46cc644f0d8e1f182.v2.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9846\r\nlast-modified: Sat, 03 May 2025 15:59:54 GMT\r\npriority: u=4,i=?0\r\netag: \"68163d7a-2676\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4hXBklDzbtyKHSHjKeJ2vba86Usc7zUq2xwbsxmnh9eN4pGwN3OTMKo2GrsGRnexJFitciFhlo1IsXoKJR0wbuIzT9LKixp8ig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01823d5c05568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9846,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5506bb550af4bb7b9e89c62411bb055f","sha1":"1aabd8fa40be84dfd2e433a47455bfb1e3df6104","sha256":"87ae1c64995e05911e8fc66593ab2874ac99f730e8e2c266c3603f856b36c8ff","sha512":"c5a7beae26cbd04e6ce229ff58200193ff89ce5ab992fae674a45df98f0a73d99eee681d205dbfaabaa019e578f873223d0693baba9e6fc4627ba51c3df96942","ssdeep":"192:s391aVxprvSxBYI5w9nTKtLkpBFiI6ozWThtEhWZkNPlMNl1Nko/l:stYbxkvOKmpT5p4oUZkNPlM3vt","tlshash":"3112b07d86b05ddf04c57f467e2281268d2640b4be106cfd89e2b7260b2883ffa2e455","first_seen":"2024-12-22T21:55:07.396931Z","last_seen":"2026-05-09T07:28:17.114863Z","times_seen":22,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/favicon.2b8d705fd218129c53ac.v2.ico","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/favicon.2b8d705fd218129c53ac.v2.ico HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 6885\r\nlast-modified: Sat, 03 May 2025 15:59:46 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: \"68163d72-1ae5\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I1ePXjTk%2Bph8T9knISqAPAeJW%2Fq9eTIPadBerSeXnJR%2B97%2Fsbv5Y4SlnmoRxoiSeBfzBUZtsZG4Vzf%2FZKVBjipc2A2DPEgfNdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01823dec0a568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7361,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"2f61393931c3d49e6d15719e3de8cbff","sha1":"1dbe10b65ecbf113304a5e8bd58680e6db813868","sha256":"4be51c04b5b7baa8ed0e44aee6e26edb056a9745f543da85320a8e5c55272b49","sha512":"1b3749148ed4f69ad9ee8ae6ff22aafab00b2699eb716f42e6c307b9758478fcdcfb9bc6aaf0262098723df7a367e17d6ca21e835bf3fe78518af06c8b4f6e21","ssdeep":"192:xfg4zG9Vso0QwXhCuSZcv40Acre45g7XzF2iA:e469VHwo7ZUXBg7he","tlshash":"a4e19f271501437aef09ebbc47a5c53d2272c8b0ba8811725fe4a31f6a5239efb34221","first_seen":"2024-12-22T21:55:07.371319Z","last_seen":"2026-05-09T07:28:17.09309Z","times_seen":17,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/main.bea2945007793d537781.v2.css","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/main.bea2945007793d537781.v2.css HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 51364\r\nlast-modified: Sat, 03 May 2025 15:59:36 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"68163d68-c8a4\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 18 Jan 2027 22:25:30 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNRW2fzH4cNWM6p2jVQOJnmXEvRT60LSE%2FMi%2FAliEcUXYyHqKE8Rs0kDm33fNiEqIzxvugNUV7i1hnDemLhrho1vMyA7HHIQcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c018232ab76568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":317329,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65448)","md5":"0dcaf8f2bc8570a8c61a7217edbd6d3d","sha1":"784fddb04ca1a9c1c3a185183924b54b01dae643","sha256":"2d4627c7e8538144b557fe07a4b99542828990a8f98123885eb77afaccdc91a3","sha512":"439768cbeff2e8c463be0079cff0987302b8c2bf76f091266179c6ddbaf48d45bb87f0881a938e28ec38cb36ca03ba1c95bd06551c134666262e3c7bbd5a261c","ssdeep":"3072:tKgdjCz8cGdiAOX+70TrafFpJlD9751KOdQH29QK/bB1CyY/t7TzR3:HdjCHGdiAIH29QKD+","tlshash":"9c64a62d6f5863eab423d5696aa1d7de5939e000c1020fade663ada48dc73d30f7394c","first_seen":"2025-06-23T06:49:49.298754Z","last_seen":"2026-05-09T07:28:17.119026Z","times_seen":16,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onloadRecaptcha\u0026render=explicit\u0026hl=en","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:20 GMT","end":"Wed, 25 Feb 2026 15:57:19 GMT"},"fingerprint":{"sha1":"13:5B:80:5A:23:15:61:AE:98:37:1B:0A:3C:F6:E2:BD:63:8E:3B:D6","sha256":"22:03:24:94:F7:E3:5F:66:1B:39:CE:18:75:20:3D:01:AC:FE:93:AA:1A:73:8C:D5:34:98:AB:2B:E5:19:37:12"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadRecaptcha\u0026render=explicit\u0026hl=en HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 18 Jan 2026 22:25:31 GMT\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1077,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1077), with no line terminators","md5":"71db2354f118d0fc9d30446c584c7259","sha1":"63b51b6c7dbebcc1afa9b12ed20b443fb05543c6","sha256":"89702bec7bb9000c40f6020a4e0f81c12eff60bb82bbc925adb7c961bc6adabe","sha512":"159ae20d646b7c5edd839f4b455f65ac3383cdd041c8651f75d38ccc20e60931f42cfae7679cd30bb30351968abc2e067be67344bfe8a35a9c407d8eaa89a5a3","ssdeep":"","tlshash":"3d11fcb21705e0390f720de1a2ffcbb0e492701df15889eca5159aa82e7accbce05586","first_seen":"2026-01-18T22:25:56.907922Z","last_seen":"2026-01-22T14:56:30.107954Z","times_seen":5,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":50,"dns":0,"connect":8,"send":0,"wait":20,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/favicon.2b8d705fd218129c53ac.v2.ico","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/favicon.2b8d705fd218129c53ac.v2.ico HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 6885\r\nlast-modified: Sat, 03 May 2025 15:59:46 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: \"68163d72-1ae5\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7GR3tiRoI4fmUqaouX1ILQH91G5LClc%2Bjo27PQs39ZQzpXagTcVQ0E6FDAGS1AD2LnN3CLpDp4V4bdIV8x%2BUrCActCGHXdqMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01823b4bf0568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7361,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"2f61393931c3d49e6d15719e3de8cbff","sha1":"1dbe10b65ecbf113304a5e8bd58680e6db813868","sha256":"4be51c04b5b7baa8ed0e44aee6e26edb056a9745f543da85320a8e5c55272b49","sha512":"1b3749148ed4f69ad9ee8ae6ff22aafab00b2699eb716f42e6c307b9758478fcdcfb9bc6aaf0262098723df7a367e17d6ca21e835bf3fe78518af06c8b4f6e21","ssdeep":"192:xfg4zG9Vso0QwXhCuSZcv40Acre45g7XzF2iA:e469VHwo7ZUXBg7he","tlshash":"a4e19f271501437aef09ebbc47a5c53d2272c8b0ba8811725fe4a31f6a5239efb34221","first_seen":"2024-12-22T21:55:07.371319Z","last_seen":"2026-05-09T07:28:17.09309Z","times_seen":17,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/news-banner-1-min.15cc9bceb6fe28f6da23.v2.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/news-banner-1-min.15cc9bceb6fe28f6da23.v2.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11332\r\nlast-modified: Sat, 03 May 2025 15:59:54 GMT\r\npriority: u=4,i=?0\r\netag: \"68163d7a-2c44\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X2HVZW%2BPvr5W5TiF9yPuA75R5hh8FzrGPiS8ybmjUmU%2FWDtgnQ2rye2E1KkNY9D5zBjAq4naDyDZZO33PgAEzxk%2F5FMXVRBORw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01823d5c04568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11332,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bab578c44e69ae4e4c18b495d9492d2a","sha1":"191c456e9875b8c5e3ff4ce59c4c6641156e2876","sha256":"ae8b90500c16f5e5761d02cd1c4dce5cb899d03d92346297f112f0945b9189e5","sha512":"cfc4d6a26294bf6b643f83ec996ed4ac7b4e01798052f8853741edfb3883a0c5a34a85f257e5fb722e1b20c678e3eb9416c16fd5962793865fdb03e57659d981","ssdeep":"192:pYAgFy7Up9GFBN/EZgDMoWJ55RFQqBs9iUH8ntIoRc/Mf9yrJ3lSWTV4x4otXdLq:prgo9N/EZgfC/jQq+9i2itId/MfsrJVr","tlshash":"3b32af39a50c2a4b8c1f38e3f2289750a24f127fe4da447da1a4985cf397d22137d229","first_seen":"2024-12-22T21:55:07.398847Z","last_seen":"2026-05-09T07:28:17.10316Z","times_seen":22,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-18T22:25:28.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 22:25:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sun, 18 Jan 2026 18:40:16 GMT\r\nx-fastcgi-cache: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4mn86rS%2Bj6D%2BYKNGgSAuWcjeeBMMFu3c0qz5vtJr4t4iqBHmEce8oqaB8f16LQOQXmR4GbptdFXC4KbOprmJbfGQ%2BTMifKwiKkIF\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c01822b5fac5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":591431,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65332), with no line terminators","md5":"8f1287d14660d87bec158602d7c8f308","sha1":"f72b52d3fb6fb50e4bfec9f1d9314c62b2e6a807","sha256":"036df198f65d0e8318f349c3f07d5b13d4ba6cfffe81f87bd13af51d1744eb3b","sha512":"cb6cc4a693f2b136569b3f385d642d4eca97ae40f60f7ee7caf0932d1a8c896ecc990891d1fb24b9973024487cae0bd0602daa24c1e9ef0ca6c9ffdaaf050050","ssdeep":"12288:MNmjjw0AoAj6saKgng32sTclLSOouV0oI+FIrFmG/qxs4Boe+vHYo6C:MNaC","tlshash":"bfc4fcbb130224bcf5b147c4e45b74141f2d626af7c858adc32d99363fa5ae376220da","first_seen":"2026-01-18T22:25:56.911154Z","last_seen":"2026-01-18T22:25:56.911154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1052,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":1014,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/mh-main-start-dark-min.f432586b1e27482b17ee.v2.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/mh-main-start-dark-min.f432586b1e27482b17ee.v2.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/app-resources-d4/main.bea2945007793d537781.v2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4102\r\nlast-modified: Sat, 03 May 2025 15:59:51 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"68163d77-1006\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xbWQxlUsVAX8AqMpAn6XT9zMvEvouTMFu4geQrDJGNmqftk%2BjHH2wcFvMJqmsIRDavBLXWK1%2FqqPGsOLfdwhu9XNR84LHjGrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0182396bb7568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5474,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 776, 8-bit colormap, non-interlaced","md5":"491d9d10e235d7356c5ec27d1eebbc5a","sha1":"57989699853b5e59127d3dcb312020361fbb341f","sha256":"c9c8dffc1ce30c62e46c0f85be851753ead1d227ef28d51622e8c097ce9a93f7","sha512":"4da3d82793ac6edc51bfbbd2c1a3aa799093ded7b4b2a2d462e3ad20e9d1a7bb4a41680e6cf904b7464f2669511b9094a3184057c546c1f84754fb4093963464","ssdeep":"96:lSMnTz9Z83KBg+iN7fJkDk8SXn6VbQCyvEqbzhvogGI8:lSk83KBg7fJkDsXNvEpgH8","tlshash":"43b16cc0a05c602bc5e8183a67a336400d909edbaff79e7aa3627379197c9871e4d1cd","first_seen":"2024-12-22T21:55:07.356183Z","last_seen":"2026-05-09T07:28:17.111557Z","times_seen":22,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/mh-main-why-dark-min.959fee15a97afdb19aa7.v2.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/mh-main-why-dark-min.959fee15a97afdb19aa7.v2.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/app-resources-d4/main.bea2945007793d537781.v2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 9855\r\nlast-modified: Sat, 03 May 2025 15:59:53 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"68163d79-267f\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4x8bQhYJkya4BuRdKZtv9Kp8AHEoxioRjrAX%2B3YJymWolpNUXQNK366CsMRAFmRbz27nkOmmY6I9uSQqeX1%2FQIzDmLH13q%2Fq4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0182396bb9568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11552,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 792, 8-bit colormap, non-interlaced","md5":"b06360fecce0ae24a9da2f8ebfd8c521","sha1":"3db48e1bded5e2a6e72e4d8d4d42235e47d712dd","sha256":"12ffcf6292ec223cb239ee033d32e0f520513676244f807e8dadd638a41ee123","sha512":"d7c8449ff0ad714bc85f91dbf4d8c2640db70a0b24d76625516eb0c003faa6879bbd7713f3cd5caf438f03ea2846634a03624af1af6f206a8f9287fbaf5a0e9f","ssdeep":"192:PSd4D2RVX6hgBlxX/J66CGmGPRABmKBpiAH8haGrHLqZsNseYa3:6g2RVX6G/xPJHCGmG5AYopNH8haGLYsd","tlshash":"de32b02f8714e134f6446e33a07455142d5bcdbe5831996637befebc50e7d0f1a05206","first_seen":"2024-12-22T21:55:07.360488Z","last_seen":"2026-05-09T07:28:17.123602Z","times_seen":22,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/logo-dark-min.ae61757eb621c4472eaf.v2.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/logo-dark-min.ae61757eb621c4472eaf.v2.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4587\r\nlast-modified: Sat, 03 May 2025 15:59:50 GMT\r\npriority: u=4,i=?0\r\netag: \"68163d76-11eb\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HoQDVbgxAyKRtW1wiznB2kLRGXkd2ps3c4iGXYfYUodUrfybNcBgDMNd1YLTTDclvB2fIyBxODbssHb5%2BqUMN%2FI0BUMl%2BAYHQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c018239fbdd568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"0e7eee30dc2ab798fc63b712be4afbea","sha1":"9d4650146bb095401ba31680e35815095eaf8b1d","sha256":"3bd69443bc58e04a6575485906618b76e93cd44c2d639b9d9a6c4f1865d6c74e","sha512":"896c5dd454fb99cc98cfa30bee5491618401589e8b0e41fdf49a436204a6a8767deb6047d359fba86ed9e25826bdd5cf07afc7f783dc5269a8cdbda3898dc6e4","ssdeep":"96:ZZ2htxVZNNqrrX2sV0MumT7igs4sByrzGvK/M/jT0CiJwpr80Qzrrg:qhrVZwhVJ97iBIrqS/M/30CF80Z","tlshash":"15919ef13811478cc7dea1f4c0e258e1b3526232822aefd9674c0d95062a112a47e766","first_seen":"2024-12-22T21:55:07.369314Z","last_seen":"2026-05-09T07:28:17.113253Z","times_seen":17,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/images/currencies/s/94dcb270.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /images/currencies/s/94dcb270.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4325\r\nlast-modified: Wed, 05 Feb 2025 10:58:32 GMT\r\npriority: u=4,i=?0\r\netag: \"67a34458-10e5\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JkEj7MZ61fR87vky9nFMWzjnhaUkSpIdhsutupmuMaCmQYp7C6WbsPFJJWT0d3P8QWyCLrn2fOMq%2BddrzdpjhYe%2BIBxXtlntVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c018239fbde568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"25bca9cd997d7bb4d4bcd470d7e11ed7","sha1":"fd5b9b7b9809a98175d7e41eccb6a78c8eed4429","sha256":"4a8eafc2a8395383a9890c35e35d29ea81d4cdba64d8efb80e45442bb3fbc2f5","sha512":"8062d3ca011de747f8226ff9045273a4dd720ae399bd507a2a8c809a39819ac9c38f0a0c9cabbd8e00e18986e4fd89edb82a177bd8507191dda0b0c8eb57952e","ssdeep":"96:DSH2c6jOrRXqXCH0mMergbDTHPbh5sj4q4QLcEgoE7TbKg:DSH2c6jOrsyOzrskLEtEv","tlshash":"4d914bc3ed2b4aac97ad2e78e0a35cb5d20514cd4552da01901c7af55628b981dd6f22","first_seen":"2024-12-22T21:55:07.375559Z","last_seen":"2026-05-23T13:17:10.449212Z","times_seen":114,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/images/currencies/s/bd7b6d7d.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /images/currencies/s/bd7b6d7d.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 505\r\nlast-modified: Wed, 05 Feb 2025 10:58:34 GMT\r\npriority: u=4,i=?0\r\netag: \"67a3445a-1f9\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNVDDS%2FA6c5Qk54Q2kiiZcIevuNud66eoIpXFEee2WNKk1Nm7ATYmcC1QKweDMCLWCggdVughH65SJd08L8r1R2P5vnN%2Bk6PAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01823a0be2568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"1b894e991dbd167e5ddaa97497ff1c39","sha1":"633e16467be79b94239b6b2b5f0fcfbf8d662238","sha256":"c2fcf56538ccfd3b79372ba912eb9bba3f7070605591991bbbc27b660c38fd10","sha512":"7d9b11f7ca86af1a19020ecb1c71a0f4ead209cc315967e2db0f0c6e8125cb8ed9ea53d18a0443cba2e2ffb6d1b4a6b0148163daf0fe1b9882dc0dbab96c68b9","ssdeep":"","tlshash":"6ff075ed5e859ab9d10e2876b01909c6703299bc231c478416c08124754fc8973126ed","first_seen":"2024-12-22T21:55:07.386517Z","last_seen":"2026-05-23T13:17:10.408489Z","times_seen":73,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/images/currencies/s/5cab691c.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /images/currencies/s/5cab691c.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4367\r\nlast-modified: Wed, 05 Feb 2025 10:58:29 GMT\r\npriority: u=4,i=?0\r\netag: \"67a34455-110f\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fs%2BMteCeQ610bUC90qQlXts8CxjcWNtRgiAcR%2BGASql0mVn6d6loGBbML6D15Rww6tjZTVLC3NpgBEo8gB6yksJ5NhJ2MxxEdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01823a0be3568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"987fed91b9035321cea7557ba6295b8b","sha1":"4b047e328be030845563950dbe35daa3f0f44955","sha256":"1facc661730890f2b9d5c06b427dfccb2c0bffb88b44d84f4bbb8036c84c902e","sha512":"1988d79c670e19339be4ddc38fb8ddc88e1c52aaffcca908d1c1e71d48142ba7ab297ad868bf1ae24c24b4a6856576446366bdb649bf20f16f89512db7b91058","ssdeep":"96:DS1d4VTXgfdH7I+2cG02RcDz/uLWmnOUJVH+Q4T4yB15WZ0:DS1RLI7+ruqmOUbL4T4Q20","tlshash":"5a917c882c9cd49fdc645421a280f84b3bf6b656a8c7070c5a94d4e061fc9f6a4f5aca","first_seen":"2024-12-22T21:55:07.389609Z","last_seen":"2026-05-23T13:17:10.391727Z","times_seen":73,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/news-banner-4-min.394871bc7c2c38c23479.v2.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/news-banner-4-min.394871bc7c2c38c23479.v2.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11206\r\nlast-modified: Sat, 03 May 2025 15:59:54 GMT\r\npriority: u=4,i=?0\r\netag: \"68163d7a-2bc6\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHi1pwPhmwyYG5XS42wIo%2BuSL5N%2FEDnzQ0%2B5pNtR6f1qEM9HOK78oAcrh9C6O1vzaa9xgsIglTB62OUQp3gyWeYBKPbjCmkOPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01823d5c02568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11206,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d4dedda989012fa751dcaaa45f58aed","sha1":"2865d7db3122f1c163ac8bb261792fdaa02db388","sha256":"6c7ea178972c1735df4dc4ff828f934f1b3be93d464d018ff048db2762901266","sha512":"8d5381bed22c37a04b3f8a1cb3fdb05294250a9a66509a64157fa6420edbbf1a9d4575b5e10ecd23353a959f4fb9dab3c936847d36369d5227c9fd35dac3be65","ssdeep":"192:1rYD75vDWjx1OooCNkjucZ48jwEazIYiyScwi4OeyKhHJ6XdNa1ul+8GXqmssLQn:SP5vDWLOooyld9JiySRZzp8dNaEGXqmS","tlshash":"3232bf8245a7b60a8bc612bd20ab0936d9125e0fc54a4aff43cc2e0b319971c9bb84c1","first_seen":"2024-12-22T21:55:07.393299Z","last_seen":"2026-05-09T07:28:17.108516Z","times_seen":22,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/st-btn-min.d468757e33832bf16d25.v2.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/st-btn-min.d468757e33832bf16d25.v2.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/app-resources-d4/main.bea2945007793d537781.v2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5556\r\nlast-modified: Sat, 03 May 2025 16:00:01 GMT\r\npriority: u=4,i=?0\r\netag: \"68163d81-15b4\"\r\nexpires: Mon, 18 Jan 2027 22:25:30 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h2PnYsyJSVZx7mC5v5H0nX5cT9thbi6rJCwAyyyTvgvDLQGoNDBLILZ%2FPRuCs%2BYiltQtHiO2avjHPX3%2FKSD5SIwvbWxSqLoMUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c018237cba6568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a5b1af65d210a9fcae89d4d8469ef83","sha1":"c89987be02ac0f44df36ecbbcc521e1aee6f1860","sha256":"5da4906bec3a1a165f62c97f88d8b32d6c443243094bac441193d9c31709e261","sha512":"ef9dae15db08922014fe13e24c28457b6f1e997f3ecd28793f90627d74112937b38e74112021ec90555f07c8163d05a9e2d31494bead53594536acaddb911203","ssdeep":"96:dDIvBJzFE4HP0EUfeypuAefOF4gFRWUrB1C3Wm+bu7nq6BnADuocw5/HWFEB0TTD:ifs8ZpfOtVrB1mxbXhADuo//Bt4kXoyG","tlshash":"cdb19ece062634e1badc242f0794aeec5163947b0fd53cbb086912f0e670fc193d9886","first_seen":"2024-12-22T21:55:07.338297Z","last_seen":"2026-05-09T07:28:17.099497Z","times_seen":17,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/api/spa/_/faq?type=mainV2\u0026locale=en","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /api/spa/_/faq?type=mainV2\u0026locale=en HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: nistbit.com\r\nX-LOCALE: en\r\nApp-Key: MTc2ODc3NTEzMDQ1MXwwLjk4MTYxNzI4NzIzNzExNDU=\r\nApp-Locale: en-US\r\nApp-Timezone: UTC\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncharset: utf-8\r\ncache-control: max-age=120, public\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\nx-fastcgi-cache: STALE\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5iaSzPN%2FVW%2FRpHBmIE1be1cG6xufc2hmb0c%2FoJzrI0KlcGbdvNVq7kfkJC0NMwNlChkCEvD4Yd5mikp3elxeVM0NUhWGoF6Yw%3D%3D\"}]}\r\ncf-ray: 9c0182383bae568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2583,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0a57c8701f53761e1bd35f5021e55c0a","sha1":"fcc2c46dfdfba2ad11e54fa4198b886f85d6fc28","sha256":"b530746befdf7c49ff8fff6b41b17045cc3dbec97c538f7149ff603609325de1","sha512":"0eec0587a9281e5ba1f26caca64aa0984542a938d8fdff7b536993726b619f8935ce5a0f5d07594e2c65029d60ba4d148ae84facea80e200952b1c1c3196dfdd","ssdeep":"","tlshash":"2351f92bd648b3f482c00645327472ddd36fe02afa018afd522d49a833b47c888b59f8","first_seen":"2025-06-23T06:49:49.303193Z","last_seen":"2026-05-09T07:28:17.106641Z","times_seen":16,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:30.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nistbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:23:04 GMT\r\nexpires: Sun, 17 Jan 2027 18:23:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 100946\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T00:11:34.862329Z","times_seen":205359,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":93,"dns":1,"connect":21,"send":0,"wait":22,"receive":29,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/bg-lin-shd1-dark-min.b4661f2843c87dca7263.v2.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/bg-lin-shd1-dark-min.b4661f2843c87dca7263.v2.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/app-resources-d4/main.bea2945007793d537781.v2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 0\r\nlast-modified: Thu, 06 Feb 2025 12:38:12 GMT\r\npriority: u=4,i=?0\r\netag: \"67a4ad34-0\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpYR7jl4%2FYA%2BypXlBZxcye2SVLNO9ekERXVW3npU2KeP9%2FADJddL5M8sxO5W4bqCX5IArkdwDiibPAPR8mQ3e7HuWy03CSLuVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c0182395bb4568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T00:09:48.841876Z","times_seen":16196943,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/app-resources-d4/assets/mh-main-start2-dark-min.568ec7c6d86b09544bf2.v2.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /app-resources-d4/assets/mh-main-start2-dark-min.568ec7c6d86b09544bf2.v2.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/app-resources-d4/main.bea2945007793d537781.v2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10173\r\nlast-modified: Sat, 03 May 2025 15:59:52 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"68163d78-27bd\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TmABwxwk3cZHeZ7daMX7%2F3et7nDZXnCTqIyLJofXKpOuLuYxNXKLCfji%2FMtSLwyCLZeI7Gx8bc1f7AGnJMAzrgytcw3AoAsldA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0182396bb8568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"44ebbf9515b770ab854c5622f7fe8680","sha1":"245c3b56bcaf1cb1cf697e5a589bb79150ac7cd7","sha256":"a8f11607e818ec21114d3d37857c8d2714f1cb270fa318d566978a6698177cfa","sha512":"b1599f8f08b9e4c85498a9fc421b6f959c0ed7163982ae8c23682e8bc94f88cec4e33e6dd9c194efb6ae52d7639995395f939e5864f2b16876372c2bafcd69f3","ssdeep":"192:24o+SlSbxbTd3PBVtLF2nx4a55555555555555555555555558O5IJ0XP5IdScOP:nTbxbTd3PvS6Nl0XPidIEmHYAxVtBoBO","tlshash":"e73229e8b88b45c03babdaf528f07947633e586177a41bc748625098fa970eb75c346c","first_seen":"2024-12-22T21:55:07.353364Z","last_seen":"2026-05-09T07:28:17.112412Z","times_seen":22,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nistbit.com/images/currencies/s/8fa607ed.png","fqdn":"nistbit.com","domain":"nistbit.com","tld":"com"},"ip":{"addr":"172.67.167.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nistbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 12:33:30 GMT","end":"Mon, 13 Apr 2026 13:31:47 GMT"},"fingerprint":{"sha1":"21:FC:03:11:CE:9B:68:EC:CD:D8:39:7E:D8:44:A8:60:82:E2:69:CB","sha256":"BE:76:1A:0B:BB:6E:97:E7:A4:01:B0:06:18:C7:45:51:E5:D9:DF:1D:CE:3E:42:2F:A1:8B:C4:E3:D0:FA:F3:33"}}},"request":{"raw":"GET /images/currencies/s/8fa607ed.png HTTP/1.1\r\nHost: nistbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1506\r\nlast-modified: Wed, 05 Feb 2025 10:58:29 GMT\r\npriority: u=4,i=?0\r\netag: \"67a34455-5e2\"\r\nexpires: Mon, 18 Jan 2027 22:25:31 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6yWlMpuWXPQb6LN1cWcSBuM2WUnI2gSssWgm%2FO314jR0SGbqoyB3DC0vg8C9hEx5YB%2BwQPa0gVweny8w8nR95VCvcOIzCsmdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01823a0be4568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"ac047d5dfdb76626d0666cdb6324d7fd","sha1":"e5a7743809fd049c924c15d39b36184fbd47f9c6","sha256":"876e20bc8f222cbacbbed4f4515dde5c7995a46683f2443d6d226230dfdedbcc","sha512":"0cc7b64634d70eb6dcab67806d179a06b63d8aa74b9292566b11783288c8055091d8c18f09659c68036cb1dbed72d3c93acaef26f6a3643adeafc2939da42d20","ssdeep":"","tlshash":"033119f2812833aa0c1710619db303437f7aa01f07d9e7488481b2efece983674187a7","first_seen":"2024-12-22T21:55:07.387972Z","last_seen":"2026-05-09T07:38:55.082801Z","times_seen":40,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"nistbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://nistbit.com/","date":"2026-01-18T22:25:31.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nistbit.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ndate: Sun, 18 Jan 2026 22:25:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: sffe\r\ncontent-length: 1621\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T00:09:48.841876Z","times_seen":16196943,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":58,"dns":6,"connect":21,"send":0,"wait":37,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}