{"report_id":"5781e230-289c-442f-b2de-78e72d067c04","version":6,"status":"done","tags":[],"date":"2026-04-23T16:05:20Z","url":{"schema":"https","addr":"byfedai.com","fqdn":"byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"title":"FeDaiCoin.com","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T01:46:59.028862Z","times_seen":17682142,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"byfedai.com","fqdn":"byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-28T16:05:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":26,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":39056,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.142942+0000\",\"flow_id\":2100534339717033,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":39056,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-23T16:04:56.608169+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":39066,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.155432+0000\",\"flow_id\":353150517666880,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":39066,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6037,\"start\":\"2026-04-23T16:04:56.615488+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":39104,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.157266+0000\",\"flow_id\":648285637868212,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":39104,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-23T16:04:56.621236+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":39082,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.158763+0000\",\"flow_id\":886892545992892,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":39082,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":902,\"bytes_toclient\":3148,\"start\":\"2026-04-23T16:04:56.616636+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":39062,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.175328+0000\",\"flow_id\":393886134979138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":39062,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6037,\"start\":\"2026-04-23T16:04:56.608834+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":39098,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.182150+0000\",\"flow_id\":404056617545353,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":39098,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-23T16:04:56.618121+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35832,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.306167+0000\",\"flow_id\":1546127076274882,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":35832,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-04-23T16:04:56.635586+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35872,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.311982+0000\",\"flow_id\":338285635847144,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":35872,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2026-04-23T16:04:56.672744+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35840,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.312899+0000\",\"flow_id\":630246775204088,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":35840,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2026-04-23T16:04:56.665848+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35856,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.334770+0000\",\"flow_id\":382109334650150,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":35856,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":5965,\"start\":\"2026-04-23T16:04:56.671014+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35904,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.342132+0000\",\"flow_id\":2065927640742592,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":35904,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":5965,\"start\":\"2026-04-23T16:04:56.686784+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35888,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.352188+0000\",\"flow_id\":393261217246734,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":35888,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2026-04-23T16:04:56.683534+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":39138,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.372136+0000\",\"flow_id\":1335126070409752,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":39138,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":902,\"bytes_toclient\":1634,\"start\":\"2026-04-23T16:04:56.866840+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":39148,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.405206+0000\",\"flow_id\":1777930756177090,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":39148,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-04-23T16:04:56.867522+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":39162,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.408981+0000\",\"flow_id\":1867261780968098,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":39162,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":902,\"bytes_toclient\":3148,\"start\":\"2026-04-23T16:04:56.869026+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":39178,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.420414+0000\",\"flow_id\":1401171930009508,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":39178,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6037,\"start\":\"2026-04-23T16:04:56.872356+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":39130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.421711+0000\",\"flow_id\":497607447682518,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":39130,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-23T16:04:56.859606+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":39114,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.428047+0000\",\"flow_id\":2080395238055201,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":39114,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":902,\"bytes_toclient\":3148,\"start\":\"2026-04-23T16:04:56.859425+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35916,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.541064+0000\",\"flow_id\":1227451240323091,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":35916,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2026-04-23T16:04:56.890899+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.250","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":36838,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.557434+0000\",\"flow_id\":214747344011369,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":36838,\"dest_ip\":\"47.79.48.250\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echoali.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":5965,\"start\":\"2026-04-23T16:04:56.852073+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35932,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.570813+0000\",\"flow_id\":1618890264739546,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":35932,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":5965,\"start\":\"2026-04-23T16:04:56.917210+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35956,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.577890+0000\",\"flow_id\":431424149133222,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":35956,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-04-23T16:04:56.923558+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35948,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.586968+0000\",\"flow_id\":601644440490429,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":35948,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":906,\"bytes_toclient\":3148,\"start\":\"2026-04-23T16:04:56.922045+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35958,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.608336+0000\",\"flow_id\":2021829064016733,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":35958,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-04-23T16:04:56.934749+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":35974,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.628724+0000\",\"flow_id\":30944218599018,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":35974,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":5965,\"start\":\"2026-04-23T16:04:56.937578+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T16:04:57Z","timestamp":1776960297,"ip_dst":{"addr":"47.79.48.250","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":36854,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-23T16:04:57.764878+0000\",\"flow_id\":1770221289968590,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":36854,\"dest_ip\":\"47.79.48.250\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echoali.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-04-23T16:04:57.103374+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"echores.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-11-02T12:34:44.615446Z","last_seen":"2026-04-23T16:04:31.313876Z","alert_count":0,"request_count":10,"received_data":17748,"sent_data":4728,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"btc2.byfedai.com","ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-23T16:05:22.949428Z","last_seen":"2026-04-23T16:05:22.949428Z","alert_count":34,"request_count":34,"received_data":2962701,"sent_data":14134,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"webapi.romebit.com","ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-10-30","domain_rank":0,"first_seen":"2025-12-27T20:43:42.40633Z","last_seen":"2026-04-23T16:04:32.711253Z","alert_count":13,"request_count":13,"received_data":64565,"sent_data":6739,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-11-02T12:34:44.616471Z","last_seen":"2026-04-06T13:12:47.614624Z","alert_count":0,"request_count":12,"received_data":147350,"sent_data":5402,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"echoali.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.250","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-11-02T12:34:44.617798Z","last_seen":"2026-04-23T16:04:31.393688Z","alert_count":0,"request_count":1,"received_data":189175,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"byfedai.com","ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":629,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btc2.byfedai.com/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"149362c2879f83fcffbe86f8fc0017b1","sha1":"0d3cf8a4c3ec67720538921e1924205ff9122de8","sha256":"99ed11e4d6b3162a94e320ce1197a8964f169b14a4f42e274c7b423f2cc5c854","sha512":"77e9f0d4f4d68bafabfcb37e18c0a3562b8d57de76bb0395bbd8b72c83c007ebad45e573974085fd0df70b97d4a3dce07d6088a1b17b958317313f4e47e569dc","ssdeep":"","tlshash":"8111abfe191a602d6303404f976b7801643250b9001a184177cc9a9dbb9ab7de0cfb8d","size":1048,"data":"","first_seen":"2026-04-23T16:05:30.484646Z","last_seen":"2026-04-23T16:05:30.484646Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-28T19:32:04.78001Z","times_seen":504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-28T19:32:04.784298Z","times_seen":1389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-28T18:29:46.885991Z","times_seen":1049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-30T19:44:59.584471Z","times_seen":462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-03T01:27:56.512414Z","times_seen":41017,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/en-DWgOEzB_.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"475039c53d4841cb60b7167d825d3422","sha1":"f0f2f69afbacf178e5f54c0b660068558678e187","sha256":"ef9669e6d1f5c107ded544de0999f1f62a43c77883f41145f82f1825cd7c6e89","sha512":"b2c55fcf3cd9dfc5c9004908e75528e164da3df6fbcb152b4cbdcf900d3c29e09a95a07d15ac0d885a85583c42d2da6498d16a64ebbd021258e1c87ebdcdbe23","ssdeep":"768:+GtZcEw/o7rKOdAFsifnAMCxrdaAMFVoP6+6sPGKw1mwO6fpk7aOLxO:iponKOdebExr2FVLsPxwqLxO","tlshash":"f203d6893e1a989a04f3537674ce6e1120f60ac18255881f4fedc9fd93d2b67a367b34","size":40565,"data":"","first_seen":"2025-12-27T20:43:52.881944Z","last_seen":"2026-05-20T11:21:40.075129Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-qL_x3Eds.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"c8e06ded6696f50b48ebd4779005619d","sha1":"286c3e9189ec1b2fb419cefdcc85e3bdf8c7bbc4","sha256":"b15f997eb52c9169879a8b8f04028218b552bf8bf679697c8d9d03470cfccce3","sha512":"29cc1390c5b78a2a010620a5e2f519f063d36fde3e178155f3c7bbc23ed272d896124d7c2084f8e3b657a57ddcb0e3aab54bcc861d743d26744de87f2632de3b","ssdeep":"","tlshash":"8301fdf8fd0c9e771fb309501291360120095fddf92015e158977e252be1a80cbceb2d","size":777,"data":"","first_seen":"2026-04-23T16:04:47.061769Z","last_seen":"2026-04-23T16:05:30.483074Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-30T19:44:59.576739Z","times_seen":2152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-DQOytnWl.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"5c6f310eff3710b32b825a921ec78343","sha1":"3ae851ef55410e18a673a89fbe8087319e36da45","sha256":"dabf9f87e67cc74dd4dc9991cae18070d271b45f4426989c5e1188aedb549ebf","sha512":"d5ac2597a293be73bc2180c6086d12bde8409d158f9d6f66f53e9850f3e6dedd7eeea2d9f4e4cf38c8259e40f00c1b6ed9a44dc95f4c539cd11aae0d2fea5038","ssdeep":"96:a3pwzaARFIAcbwDW9qvYmKqCwzokffEwFbFMF0wx7WrdeZcyJJZw0B/8lxM3hjPw:epwzaARhcbwDWYYbqCwzVEwFbFMF0wxu","tlshash":"18b1d69ab8128979eab3518444590020b25d3ffa612c88b5f7feac16777ce78c3d2735","size":5542,"data":"","first_seen":"2026-04-23T16:05:30.441766Z","last_seen":"2026-04-23T16:05:30.441766Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-DhoGj4Y2.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"98d3678566543abcd158283d95f83b32","sha1":"79ef8016e82a2a529080e00ac21209a32ead513e","sha256":"9422e910782fb0e1a4655f283bac417d0dbf27cd0fab2a79c6ede5e6e9b2202f","sha512":"4699953a95ac946cab044d3a2c56788fe19dfbbdb29ccbdb52ef4b028d342dd6bdfb034f6f3ceeb646157c7d59651596e7f1c1014ac87b8d4ed938dc45671e1d","ssdeep":"","tlshash":"31f0052fb96dc0720bf38498d1231810fa1d1b963b50d5d4d9861b11db748e7d19f624","size":508,"data":"","first_seen":"2026-04-23T16:05:30.478022Z","last_seen":"2026-04-23T16:05:30.478022Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/filters-BxUGO4mK.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"a14d94662b28de1ffef940bf386899e2","sha1":"e02c3f85f772a6bae9f5f6c6342596366f2c8a1e","sha256":"06d61f575405874436ebea25ec77a1de77eeb24c9ddc071f27924f97e202e9fb","sha512":"c397f67d6d8630bb25c53f65ebda36c9c809a1e2d23f73e8b069730b7df27fe152fe18b3c15722eb246a0957b560d161f16006cebbeb8f2a154f56fcc3aa2172","ssdeep":"","tlshash":"8c5155fdfcd3a03346f95df940288514728ebe24686e0a4de55bd0456933888d0bfb78","size":3078,"data":"","first_seen":"2026-04-23T16:05:30.460997Z","last_seen":"2026-04-23T16:05:30.460997Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-07-30T21:34:04.97172Z","times_seen":1805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-07-28T19:32:04.769573Z","times_seen":818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-DvUVBAOa.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"4284b75be7d4721e9211b6fedeeccb1c","sha1":"e76055491953914a502cd4b2eb968f53b4cae5fe","sha256":"a019b64eec5f05c0b7d78edac67ad8cdeb2864a3bac95ddf7e30efa2557a8412","sha512":"04059a527aed4e13704228d254a8831c56bf65a56f1cce860d1673da71558c0e5ca57f747e180f819484a26e5a3331f05d75002eb8dcc0a0d99b3226ae7a9e75","ssdeep":"384:sjBzkCb2uLRzVgQv+8mdPtwnzjZj/QvNxtJpehRC0PpyQc:SzkWLb1+8mdPr5JpehRC0PpTc","tlshash":"8752c999f9069d3df5bba051408c08103219bfef900f8da2b5fe5d826366fb8b75d614","size":13833,"data":"","first_seen":"2026-04-23T16:05:30.458656Z","last_seen":"2026-04-23T16:05:30.458656Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1831de11b3f834a2de4166013d75eda2","sha1":"4cd45ddc173078df52a6a5da8ee597fc7b8fa84b","sha256":"890bb39f44fdd8c6b918239d60c90dce9fd3fae1b9b2049c5a0e9f80f02c8009","sha512":"7e4471d6a84fcda0c90b1ef370a7ac6853bb28d5fe3de1f3955f2cd491853b7b07f7eab7a9df9731f584e664d59606ca969359d613ca46193c9a31e392fa594b","ssdeep":"","tlshash":"b9c08cc4b0c36e103a26a450a1af34e4d0248027b04c1b139da8e88d2e630f18233e98","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-28T19:32:04.775606Z","times_seen":802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-30T21:34:04.992233Z","times_seen":1695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/vendor-UVi9_HUV.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"db4a055babb80d5b93bae8515c2a778c","sha1":"22c7295f54cdcff1b1a4c5154b1abeace3fadb9c","sha256":"1310f644fe311957774e65e9a26bfa6646606fd982b3a965ad05404ce55bd163","sha512":"4a2d74f29f7f69239e8cade28b646c01aa1155f3ef940e81ae784f441c90b6f2159e797b30d6e17f87709ca1e41c6af6141f90f33dcd79611e820e52d5e45f37","ssdeep":"12288:bzeeMRHdcpGhbApQVguh9IQN3kfLzEPTKvcihU/9xHMfsa+B8MhvWdrkZ9:3eeMRHdkuFeutBkfLzEPTKvZU/9xMfsT","tlshash":"53c408d93692b02553bb14e6007b0006f33e6e59780d84a4f1add8db7d7ad8992b7f2c","size":594933,"data":"","first_seen":"2026-04-23T16:04:47.034834Z","last_seen":"2026-04-23T16:05:30.433403Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-07-30T19:44:59.582021Z","times_seen":1652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-03T01:15:54.800562Z","times_seen":4424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-28T19:28:06.60817Z","times_seen":1059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-07-28T19:41:49.895426Z","times_seen":1403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-07-28T19:39:17.544705Z","times_seen":1766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-28T19:32:04.785689Z","times_seen":667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-30T19:44:59.572483Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/charting_library/charting_library.min.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-29T22:52:22.712247Z","times_seen":1299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-03T00:11:19.472782Z","times_seen":7130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-03T01:27:56.512901Z","times_seen":42527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-E8b8Xccy.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"265bf776887730562a3c6fabaa6d99a4","sha1":"03de94f5b5b1e0536a0c6e15426237b298a8f54d","sha256":"15a7d93830deb6fb9d069a7ac6df902db0759cc6d2fe3a8a119fb8e1530d3afc","sha512":"7a05ce78115acf890d595bb399e7be4fc4d882fb79a7ab0c744b87643e47c0835a070f489cec306483352356650203638b6245ba95f6c0f46dcdab95c8bc7947","ssdeep":"768:ZAmR6jmhg+j+TOLvznz10ckqymHzYaRx5MIgrp9a9NuDsyP2Adh/ghr8P8nFLq1v:ZrqaLbngvmmK0ghwPYMXH1wCKu1","tlshash":"ef935d45d90a0dff65be04983a6a190031280fd7d9888c63b779ed5a37face4b39d718","size":90521,"data":"","first_seen":"2026-04-23T16:05:30.462368Z","last_seen":"2026-04-23T16:05:30.462368Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/currencyItem-BtWHgslt.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"7e66ad44b2b4b5f0ecde4753eef67705","sha1":"09383f23cf7a22360811c49e1d1b0fdacd431dd4","sha256":"26becbbb77e869ab6203b4bc91a5e2107f9508d1b7f3439d54f263561cd843fd","sha512":"d9967328557b0c02f7bf31ddd0bd973488454aafe54b31223096e02df662065e1ef151789f8d070544caa29c2eb6c9e88974f47823943b4f6fe0f8d5299820a3","ssdeep":"","tlshash":"0521df9aaa01c7b1cbbe9162857d5414170d7fda700185c2ebed148a3b8b6fcd728b31","size":1206,"data":"","first_seen":"2026-04-23T16:05:30.466542Z","last_seen":"2026-04-23T16:05:30.466542Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/#/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-28T19:32:04.786467Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.025b7fb60f51b4b74b597653d3a7f6b63.jpeg?2.0.1774018953478","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.025b7fb60f51b4b74b597653d3a7f6b63.jpeg?2.0.1774018953478 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1874\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA4329E613583237687E3C\r\nAccept-Ranges: bytes\r\nETag: \"FEE16CE16A23A37EF3920798742FEFBC\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8433800826941682001\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /uFs4Wojo37zkgeYdC/vvA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"fee16ce16a23a37ef3920798742fefbc","sha1":"f862e3e61b12495b9f683a71d3d06053bc407b0a","sha256":"dfca8887d489be448d10cbd211b271db5330d73d299fe9c76f3e3300a9045a82","sha512":"560e8d3bbee698aac3f311defb7031f289096c6101339fc642889b10e9887000240109dd3e25139f0f12b6b7583b0b185f96e86248bc98d3252e1bcc5ecec990","ssdeep":"","tlshash":"d731f7da97b3107f3e5d8374563429c5555b85d1ba050a2efcdebc4c9f066e70128071","first_seen":"2024-08-20T11:40:30.958723Z","last_seen":"2026-07-25T14:35:33.349066Z","times_seen":141,"resource_available":false,"data":null}},"time_used":1897,"timings":{"blocked":804,"dns":0,"connect":270,"send":0,"wait":280,"receive":0,"ssl":542},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/resource/svg/light/zu29.svg?2.0.1774018953478","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1774018953478 HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 840\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-348\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-29T22:52:22.73799Z","times_seen":934,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.romebit.com/api/common/getAllSetting","fqdn":"webapi.romebit.com","domain":"romebit.com","tld":"com"},"ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.romebit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 06:35:19 GMT","end":"Thu, 09 Jul 2026 06:35:18 GMT"},"fingerprint":{"sha1":"32:C4:B8:33:B8:0C:6E:9F:48:3B:0E:0F:5E:37:D2:A2:8C:F4:5A:E2","sha256":"03:71:8F:4D:24:53:76:7B:65:5D:0C:D5:93:D0:70:04:AB:DA:6D:4E:2E:35:17:DB:23:A5:85:3C:B9:08:20:53"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.romebit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btc2.byfedai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 23 Apr 2026 16:04:55 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btc2.byfedai.com\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T01:46:59.028862Z","times_seen":17682142,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":64,"dns":0,"connect":25,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/logo/logo512.png","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/logo/logo512.png HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/png\r\nContent-Length: 57181\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA4329AA029832334FF7FE\r\nAccept-Ranges: bytes\r\nETag: \"1E7575B79BED9F753536CCC38A925702\"\r\nLast-Modified: Mon, 18 Aug 2025 14:06:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17970334485530824480\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: HnV1t5vtn3U1NszDipJXAg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":57181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"1e7575b79bed9f753536ccc38a925702","sha1":"e5166ef5911b7f486ec02aad71248019b995bd1f","sha256":"688e307bdba8057062e1777a66df230976d115172c66a66b84e3b202988b68c9","sha512":"886f18ace955722b49350830153eb334825ec4f6d63363ece657fb91a6ce845474dd74856ef56526d5d9a571f8fcfc9114d4cac99db819a76693f6bb1cbeee04","ssdeep":"1536:yqssZWFIcJd/KTqg3emKdr7PW4pTQC9DCPDF:yqnV6ATYmepTch","tlshash":"fd43f17eb9c0c79e7dd1026db83289e48bf851b6f120aed998926d244c4cfcc15752ee","first_seen":"2025-12-27T20:43:52.880078Z","last_seen":"2026-04-23T16:05:30.432887Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1392,"timings":{"blocked":0,"dns":1,"connect":334,"send":0,"wait":343,"receive":41,"ssl":673},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/vendor-UVi9_HUV.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/vendor-UVi9_HUV.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-913f5\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":594933,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"db4a055babb80d5b93bae8515c2a778c","sha1":"22c7295f54cdcff1b1a4c5154b1abeace3fadb9c","sha256":"1310f644fe311957774e65e9a26bfa6646606fd982b3a965ad05404ce55bd163","sha512":"4a2d74f29f7f69239e8cade28b646c01aa1155f3ef940e81ae784f441c90b6f2159e797b30d6e17f87709ca1e41c6af6141f90f33dcd79611e820e52d5e45f37","ssdeep":"12288:bzeeMRHdcpGhbApQVguh9IQN3kfLzEPTKvcihU/9xHMfsa+B8MhvWdrkZ9:3eeMRHdkuFeutBkfLzEPTKvZU/9xMfsT","tlshash":"53c408d93692b02553bb14e6007b0006f33e6e59780d84a4f1add8db7d7ad8992b7f2c","first_seen":"2026-04-23T16:04:47.034834Z","last_seen":"2026-04-23T16:05:30.433403Z","times_seen":2,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0bdef91be9d254935b506aaf656f8f619.jpeg?2.0.1774018953478","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0bdef91be9d254935b506aaf656f8f619.jpeg?2.0.1774018953478 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 499\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA4329E613583133D47E3C\r\nAccept-Ranges: bytes\r\nETag: \"758505DEC73355A50FA0EA7479FA0223\"\r\nLast-Modified: Tue, 14 Jan 2025 05:55:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8231209139480566513\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dYUF3sczVaUPoOp0efoCIw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"758505dec73355a50fa0ea7479fa0223","sha1":"f625f75d14059f9ca2f10573bb2c8634c6dc0b8e","sha256":"9ba4907adb5327ca635f6187be09172b1598fcfc0e96b62fb9736d9b17ac23d9","sha512":"de61b7e447da38fb2dad09bafceb7749b71e7fcd5cfa1e1d595c79bbb59e48c630c15c57c88d5154b3fdd22364d12d5fc6569173fedfb98fedbef50ae5191ac1","ssdeep":"","tlshash":"3ff054ed83a4ec7cf60bc3608f20e828c630b96b348d0c16256eb6309b4d09c2db11f6","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T23:35:41.503153Z","times_seen":177,"resource_available":false,"data":null}},"time_used":1356,"timings":{"blocked":1085,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.romebit.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.romebit.com","domain":"romebit.com","tld":"com"},"ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.romebit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 06:35:19 GMT","end":"Thu, 09 Jul 2026 06:35:18 GMT"},"fingerprint":{"sha1":"32:C4:B8:33:B8:0C:6E:9F:48:3B:0E:0F:5E:37:D2:A2:8C:F4:5A:E2","sha256":"03:71:8F:4D:24:53:76:7B:65:5D:0C:D5:93:D0:70:04:AB:DA:6D:4E:2E:35:17:DB:23:A5:85:3C:B9:08:20:53"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.romebit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://btc2.byfedai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 23 Apr 2026 16:04:56 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btc2.byfedai.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":529,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"405d2d85fdf41204b77675af031912e9","sha1":"42518ed874c5d99e1bb5652d611c4ac91a275480","sha256":"59dd91696a3cf690adfbae3d965dc677a5d2e57904249be6f4bc4ed8fe6f66ca","sha512":"3b89e62f74f7c550055f4c17e510f7169e96388ace133991d36c1676c87e539bef3065f7644d6e1a2b2e1c87fdd8ee9745474df3fea67818e4f9f80fe0801a6c","ssdeep":"","tlshash":"b8f0591a26788ea81e0645c759ccbdc5a34e2783c660cd38d66acf1d81f25f5161e948","first_seen":"2025-12-27T20:43:52.858952Z","last_seen":"2026-04-23T16:05:30.434539Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.romebit.com/api/common/getCoinList","fqdn":"webapi.romebit.com","domain":"romebit.com","tld":"com"},"ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.romebit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 06:35:19 GMT","end":"Thu, 09 Jul 2026 06:35:18 GMT"},"fingerprint":{"sha1":"32:C4:B8:33:B8:0C:6E:9F:48:3B:0E:0F:5E:37:D2:A2:8C:F4:5A:E2","sha256":"03:71:8F:4D:24:53:76:7B:65:5D:0C:D5:93:D0:70:04:AB:DA:6D:4E:2E:35:17:DB:23:A5:85:3C:B9:08:20:53"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.romebit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://btc2.byfedai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 23 Apr 2026 16:04:55 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btc2.byfedai.com\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T01:46:59.028862Z","times_seen":17682142,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":62,"dns":1,"connect":29,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/currencyItem-BuMNRmB_.css","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/currencyItem-BuMNRmB_.css HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-6d6\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"0a88af6b4dca3c130c74addeb274fb10","sha1":"fb0c4b8a0f7b7c4bac8e193999f99b4070ffcfad","sha256":"15550dda13edd7fe55a2d29edacb7ba57f23f39ef10d087669c0f75facae0763","sha512":"5d046b442f0f471b2063fcd34fb68b1d95b79647ec7e50cf5290ebd866febcd12e9b890a1784512959c4f4a433d3f31d57540254b4e0abbb6f55dc7773677619","ssdeep":"","tlshash":"ed31c05457110375da3bc8866ea8010dc0d47fd1901765cae8afaa2b2ccfa931b7096b","first_seen":"2024-08-19T15:53:11.157884Z","last_seen":"2026-07-28T19:24:50.808886Z","times_seen":420,"resource_available":false,"data":null}},"time_used":1043,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1043,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0c773c8ebe0194a919efee1afe2dab519.jpeg?2.0.1774018953478","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c773c8ebe0194a919efee1afe2dab519.jpeg?2.0.1774018953478 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1321\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA4329ACF6C538380970F2\r\nAccept-Ranges: bytes\r\nETag: \"B86773B6AA18C4A58D9C9879EBBA8892\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2019276143507127384\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uGdztqoYxKWNnJh567qIkg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"b86773b6aa18c4a58d9c9879ebba8892","sha1":"cb93b7a65e61e1206a92c01b63e9484b09885a5c","sha256":"1265faf359314ea74da3377a409087910279422db110469598b5cd514c918b91","sha512":"b2141ef8ef08d94acf6e764614667adc6c5893f057d55035d9a76c66b3ece5760ae98a67f500d8af66351a3ac6b7e254a65f21ce8ae6565e222bc89f3af61bd2","ssdeep":"","tlshash":"d321fbc2b3414eb836baae955312dc525efa7b6003198d8d3d212a67cd82311f962289","first_seen":"2024-08-19T20:18:19.617789Z","last_seen":"2026-07-23T13:38:34.312033Z","times_seen":117,"resource_available":false,"data":null}},"time_used":1984,"timings":{"blocked":854,"dns":2,"connect":280,"send":0,"wait":282,"receive":0,"ssl":563},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/DOGE.png?2.0.1774018953478","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/DOGE.png?2.0.1774018953478 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:58 GMT\r\nContent-Type: image/png\r\nContent-Length: 7799\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA432A70494832313F982D\r\nAccept-Ranges: bytes\r\nETag: \"BC63BF39B9AA996F479E8913F5E4790E\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18057188316877927664\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vGO/ObmqmW9HnokT9eR5Dg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bc63bf39b9aa996f479e8913f5e4790e","sha1":"ba74758acf201e0361d924ca37a7d607a3dbfb98","sha256":"e53957ee53bcdc88403c798640a85be148e577080f7d820669c1409fb07c8f7f","sha512":"a84a9a328766ca0f7e892edb1382ed30134980642e9e050bb6b4f3904f47cf5ba2ad695f0b6e39270c0bb5ef22d3d09873c8612dee0c78d7ba7bc4d0261ea8b9","ssdeep":"96:t3jhxa9Spfq9K05becu17MlJ+Pv1K4e6VIcxg4A85DomIHNJwqcfWIywQDR8D1x+:Lxa9CfIecuylqv845lwCEK7myhNVTiF","tlshash":"e0f19ed992fce096c465a0818431bcc3db6d5ac69de8dbaa5f5ba120213901f3e1964b","first_seen":"2025-11-02T12:35:02.143352Z","last_seen":"2026-05-20T11:21:40.105616Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1654,"timings":{"blocked":1321,"dns":0,"connect":0,"send":0,"wait":332,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/resource/svg/light/mengbanzu13.svg?2.0.1774018953478","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1774018953478 HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65424d1a-4b2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-07-29T22:52:22.743694Z","times_seen":928,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/en-DWgOEzB_.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/en-DWgOEzB_.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-9e77\"\r\nexpires: Fri, 24 Apr 2026 04:04:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40567,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (40544)","md5":"475039c53d4841cb60b7167d825d3422","sha1":"f0f2f69afbacf178e5f54c0b660068558678e187","sha256":"ef9669e6d1f5c107ded544de0999f1f62a43c77883f41145f82f1825cd7c6e89","sha512":"b2c55fcf3cd9dfc5c9004908e75528e164da3df6fbcb152b4cbdcf900d3c29e09a95a07d15ac0d885a85583c42d2da6498d16a64ebbd021258e1c87ebdcdbe23","ssdeep":"768:+GtZcEw/o7rKOdAFsifnAMCxrdaAMFVoP6+6sPGKw1mwO6fpk7aOLxO:iponKOdebExr2FVLsPxwqLxO","tlshash":"f203d6893e1a989a04f3537674ce6e1120f60ac18255881f4fedc9fd93d2b67a367b34","first_seen":"2025-12-27T20:43:52.881944Z","last_seen":"2026-05-20T11:21:40.075129Z","times_seen":46,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/platform/dev/config.js?1776960295351","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /platform/dev/config.js?1776960295351 HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 394\r\nlast-modified: Wed, 01 Nov 2023 13:05:28 GMT\r\netag: \"65424d18-18a\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-28T19:32:04.748559Z","times_seen":509,"resource_available":false,"data":null}},"time_used":1067,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1067,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0450e5050aa5f4f9b999d5e8cdaeac464.png?2.0.1774018953478","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0450e5050aa5f4f9b999d5e8cdaeac464.png?2.0.1774018953478 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1599\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA4329E613583237CF7E3C\r\nAccept-Ranges: bytes\r\nETag: \"7982395C5BE4A71C84A0E6ED25C0FFE6\"\r\nLast-Modified: Tue, 14 Jan 2025 05:54:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10124007141188402507\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: eYI5XFvkpxyEoObtJcD/5g==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1599,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"7982395c5be4a71c84a0e6ed25c0ffe6","sha1":"47b16735c5532d2f02fd0f2d644d2e32c4a29a5a","sha256":"18c72092134e339b1b587b0791f93ce88e6d7a4e3fb8ceb46f708050d9e5caf7","sha512":"410cd3f16dfed2cae78da54fbb283132c9ea52b14649abd5ff3812f16038b1c6acd50c84c7cc202cb0f40580bf636f473ec90563f84ce246b6b17f5f156141e2","ssdeep":"","tlshash":"0b310adf6e4f2cabf7f43855e3125e48de33d1e43874071d87a2e10230516560584a45","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T23:35:41.49714Z","times_seen":147,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":1083,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/resource/fonts/DINOT-Medium.otf","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc2.byfedai.com/assets/index-C9GjGIRV.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Wed, 01 Nov 2023 13:05:28 GMT\r\netag: \"65424d18-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-30T19:44:59.551352Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoali.oss-ap-southeast-1.aliyuncs.com/echo2/19cbbe65c5934042ac949b65cce743e1.png?2.0.1774018953478","fqdn":"echoali.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.250","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo2/19cbbe65c5934042ac949b65cce743e1.png?2.0.1774018953478 HTTP/1.1\r\nHost: echoali.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 188600\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA432AAA029832392EF8FE\r\nAccept-Ranges: bytes\r\nETag: \"BA90DB15956AEC9E1CF92536196639E5\"\r\nLast-Modified: Wed, 05 Nov 2025 12:28:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 537991324514236795\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: upDbFZVq7J4c+SU2GWY55Q==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":188600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 510 x 762, 8-bit/color RGB, non-interlaced","md5":"ba90db15956aec9e1cf92536196639e5","sha1":"ae222600a7971053314404810f83420f80604eaa","sha256":"d26130deae753177ba7e01c544e1467141c931613fd52d3d3d9fce1e95826e55","sha512":"6753af0ac9642b0ac254a595d91bfe915630e06b493a8aaad8fe0aac5056233b1e49fbf4730a20eea941b810abc7060a14498f823da77cb259e5638f0cb073d8","ssdeep":"3072:7vvS7iq62Ic7+l9VOCO1TX6bHLi3IwqP3kjTJ0sOAyhM6EoIwh27jV6M1yEcknt8:Lv3qFIwC+C4TKbri3IwqcjJbN6vIPJqV","tlshash":"b10412ebc836396530c6b51e7c7a27f20fe925ad46c8b770d6a6ee62b13352f1c51600","first_seen":"2025-12-27T20:43:52.876505Z","last_seen":"2026-04-23T16:05:30.44015Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2153,"timings":{"blocked":0,"dns":0,"connect":351,"send":0,"wait":359,"receive":732,"ssl":710},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/resource/fonts/Arial.ttf","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc2.byfedai.com/assets/index-C9GjGIRV.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Wed, 01 Nov 2023 13:05:28 GMT\r\netag: \"65424d18-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-30T19:44:59.556937Z","times_seen":2202,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":780,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-DQOytnWl.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-DQOytnWl.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-15a6\"\r\nexpires: Fri, 24 Apr 2026 04:04:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5542,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5537)","md5":"5c6f310eff3710b32b825a921ec78343","sha1":"3ae851ef55410e18a673a89fbe8087319e36da45","sha256":"dabf9f87e67cc74dd4dc9991cae18070d271b45f4426989c5e1188aedb549ebf","sha512":"d5ac2597a293be73bc2180c6086d12bde8409d158f9d6f66f53e9850f3e6dedd7eeea2d9f4e4cf38c8259e40f00c1b6ed9a44dc95f4c539cd11aae0d2fea5038","ssdeep":"96:a3pwzaARFIAcbwDW9qvYmKqCwzokffEwFbFMF0wx7WrdeZcyJJZw0B/8lxM3hjPw:epwzaARhcbwDWYYbqCwzVEwFbFMF0wxu","tlshash":"18b1d69ab8128979eab3518444590020b25d3ffa612c88b5f7feac16777ce78c3d2735","first_seen":"2026-04-23T16:05:30.441766Z","last_seen":"2026-04-23T16:05:30.441766Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/BNB.png?2.0.1774018953478","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/BNB.png?2.0.1774018953478 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:58 GMT\r\nContent-Type: image/png\r\nContent-Length: 10415\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA432A70494833371B982D\r\nAccept-Ranges: bytes\r\nETag: \"B5787E7F12B9832AD65C96A4B271309B\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8325378625068589541\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: tXh+fxK5gyrWXJaksnEwmw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b5787e7f12b9832ad65c96a4b271309b","sha1":"37cda6785aba8faa381ce10cd2070ca184ec554a","sha256":"86dda9dc4570e15b86cb85cf723bd65b9d738efdcffae9838ffa0f7c2d8153cc","sha512":"858047d98ac77634577ec7f939f362c710a3518b1c53e1c1d2c5c3b9a85d7035a643495cc754bbce7ce2cf2b3db50c66e04a501092fc31a178478b8d6eb4092d","ssdeep":"192:hHJnq/KKHUjwHSS5Z+FgO2jEwHAfzcI9SZc6vhf6Fbnqqv13UQoQJR5/Rm7M1W8g:/q/KgswHSoA2jEUAfWcE6FenQNTRgH","tlshash":"0022bfa2183d4cf4db59b6096f08f11a3588de7dc982769c034cafe4d99406eda23d2f","first_seen":"2025-11-02T12:35:02.142523Z","last_seen":"2026-05-20T11:21:40.048539Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1600,"timings":{"blocked":1279,"dns":0,"connect":0,"send":0,"wait":320,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/SOL.png?2.0.1774018953478","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/SOL.png?2.0.1774018953478 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:58 GMT\r\nContent-Type: image/png\r\nContent-Length: 9713\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA432AAA029835346FF8FE\r\nAccept-Ranges: bytes\r\nETag: \"4DCA7BE14022BBE8AB3AABEF4A5D3C53\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12394239773823965148\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Tcp74UAiu+irOqvvSl08Uw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"4dca7be14022bbe8ab3aabef4a5d3c53","sha1":"a00e49f088a95489e7c3110689335dc9409e8e40","sha256":"96beb2351fa32acd1bf21afb6fd4247038d976db14ca1e8339c7d4e806aca3b8","sha512":"d20db74331e6da26c03b8f54e8aabfab2d4a89f708da3e401640492449a408cbe325bff5c18196753ffd476fe910e18ad04cd71cd70afab7606a7d992827bc74","ssdeep":"192:6S5/euHgVldR4FUniO1wmPNBXPKfLXJS1gUXagNSASNP9F+:15/D7oLnN9wL5S1hXagU7rF+","tlshash":"4a12cfd58900c0baee59511b5b494c32d9612afcebde0564d9e6ca5bc8cc19833c223a","first_seen":"2025-11-02T12:35:02.118379Z","last_seen":"2026-06-26T06:04:26.824292Z","times_seen":48,"resource_available":false,"data":null}},"time_used":1659,"timings":{"blocked":1322,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.romebit.com/api/common/getAllSetting","fqdn":"webapi.romebit.com","domain":"romebit.com","tld":"com"},"ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.romebit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 06:35:19 GMT","end":"Thu, 09 Jul 2026 06:35:18 GMT"},"fingerprint":{"sha1":"32:C4:B8:33:B8:0C:6E:9F:48:3B:0E:0F:5E:37:D2:A2:8C:F4:5A:E2","sha256":"03:71:8F:4D:24:53:76:7B:65:5D:0C:D5:93:D0:70:04:AB:DA:6D:4E:2E:35:17:DB:23:A5:85:3C:B9:08:20:53"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.romebit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://btc2.byfedai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 23 Apr 2026 16:04:56 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btc2.byfedai.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15161,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bf7a2069570c00ae9a3c8bef4ea2cdcd","sha1":"6e5f24d06843ed1cd6af08a2104f551325275e60","sha256":"4072d550521b417566b1db380a10129436b934f634a2ff79345518ba93b48bf0","sha512":"999c1884c0f3ab29343612dd62b1e5a6f82f21c95f59ae1d6fb9685e0c2def805085f33ec3c809df418486a11088a428eee4614c9a932afbe47f8558f5b96cb9","ssdeep":"192:NG4ZzC/S8QRR+kD+RbAuc2hsSH/VU5pbAi3woqaIqgzc2sYZssqsCttzMNGGFGs1:c6uKHqQ29QM/876ga8ynYTK","tlshash":"8062664a37e8cc7d82d61ec5d0ab3a49bedc347be980ec54e5a7af5c84995b6040f10e","first_seen":"2026-04-23T16:04:47.038274Z","last_seen":"2026-04-23T16:05:30.457371Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-GK2GMJon.css","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-GK2GMJon.css HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-2933\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10547,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10546)","md5":"99b684a04036554a8218b18cd760126f","sha1":"ea09b03dc44cce8774c321f60665b2f90285e477","sha256":"d7a0be75cddff834494d6027b55e32b0c9081ff3776b494c6ab464f0083b5258","sha512":"0996cd902afe2e18e3f913a0dfcef67fe9c9ad6357e5d37994a7af8984b550bef95ddf2f50924740e0921dbbdd4d5c2b74c9e5307cd1a63748be35da591c06b6","ssdeep":"96:HlAGZezOETj8XMp5mXUVM2tL0a5OyO0Z62rceGg4dqK7L3+guSc:HXZePfpYvk974qK7L3+ge","tlshash":"ce22856cf7e42639bc37d159abd80accf119fe11d6639da5e9678a620ccb5e3163008c","first_seen":"2025-12-27T20:43:52.866456Z","last_seen":"2026-04-23T16:05:30.458113Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1043,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1043,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-DvUVBAOa.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-DvUVBAOa.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-3609\"\r\nexpires: Fri, 24 Apr 2026 04:04:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13833,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13832)","md5":"4284b75be7d4721e9211b6fedeeccb1c","sha1":"e76055491953914a502cd4b2eb968f53b4cae5fe","sha256":"a019b64eec5f05c0b7d78edac67ad8cdeb2864a3bac95ddf7e30efa2557a8412","sha512":"04059a527aed4e13704228d254a8831c56bf65a56f1cce860d1673da71558c0e5ca57f747e180f819484a26e5a3331f05d75002eb8dcc0a0d99b3226ae7a9e75","ssdeep":"384:sjBzkCb2uLRzVgQv+8mdPtwnzjZj/QvNxtJpehRC0PpyQc:SzkWLb1+8mdPr5JpehRC0PpTc","tlshash":"8752c999f9069d3df5bba051408c08103219bfef900f8da2b5fe5d826366fb8b75d614","first_seen":"2026-04-23T16:05:30.458656Z","last_seen":"2026-04-23T16:05:30.458656Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.romebit.com/api/common/type/defi_activity_type","fqdn":"webapi.romebit.com","domain":"romebit.com","tld":"com"},"ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.romebit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 06:35:19 GMT","end":"Thu, 09 Jul 2026 06:35:18 GMT"},"fingerprint":{"sha1":"32:C4:B8:33:B8:0C:6E:9F:48:3B:0E:0F:5E:37:D2:A2:8C:F4:5A:E2","sha256":"03:71:8F:4D:24:53:76:7B:65:5D:0C:D5:93:D0:70:04:AB:DA:6D:4E:2E:35:17:DB:23:A5:85:3C:B9:08:20:53"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.romebit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btc2.byfedai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 23 Apr 2026 16:04:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btc2.byfedai.com\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T01:46:59.028862Z","times_seen":17682142,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/FEDAI.png?2.0.1774018953478","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/FEDAI.png?2.0.1774018953478 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/png\r\nContent-Length: 3440\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA4329704948383252972D\r\nAccept-Ranges: bytes\r\nETag: \"660FA1487365D0BF312F7357319B94C4\"\r\nLast-Modified: Mon, 15 Dec 2025 11:04:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3108647260460025466\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Zg+hSHNl0L8xL3NXMZuUxA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3440,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"660fa1487365d0bf312f7357319b94c4","sha1":"674eec05b54ea20903fafbc3e64c456baff62d17","sha256":"e8f8d2130f014dc00ab224948aa0afafd0dc219f5701549c4e62676d0a6b5585","sha512":"1bbe3a17361f7eb0755f87290aca63a6bb02ed1645b9003e8a7f8265aaedf26cc9ac9d7236e2aa27461d8a7678da5b8e0b7262929b5cbe763b77a4f47324d46d","ssdeep":"","tlshash":"94610949ed239c005a8fed5869f9616362770fc46a05e8c1fcdd49120e720bcce945de","first_seen":"2025-12-27T20:43:52.873671Z","last_seen":"2026-04-23T16:05:30.459693Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1351,"timings":{"blocked":-1,"dns":0,"connect":333,"send":0,"wait":335,"receive":0,"ssl":683},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/LTC.png?2.0.1774018953478","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/LTC.png?2.0.1774018953478 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:58 GMT\r\nContent-Type: image/png\r\nContent-Length: 7415\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA432AE173EA3835D70AE6\r\nAccept-Ranges: bytes\r\nETag: \"85A6D609E605F3A8EB4C3E6AAC1EEA0D\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13437065633320091620\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: habWCeYF86jrTD5qrB7qDQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"85a6d609e605f3a8eb4c3e6aac1eea0d","sha1":"dc8811b4343dbda100a6b6bc943419b6514addde","sha256":"1eeb8294b1987d95d666338fc21eef1536c128292a169447adc07fca7f2ef34a","sha512":"78c9ffb9c8c60c4858bda722af47a7dd2d04b4524bee224a15242e426ecd3b303f4f40ff191c3d3ded55a9e96e0a3a545050b54c5b169d20d6dfd1a6aa1569d9","ssdeep":"192:a3+1g/fdyMHBgpyldXWkjCDM0tc8j18zIQ6+Ub:a3+1gQMHWpylMkjCI0tc8g6+g","tlshash":"0ee19f5b849484e5c72a08a88c6ef23d45ba81caf61bd308d05aa0415fd9bfe99452ec","first_seen":"2025-11-02T12:35:02.15788Z","last_seen":"2026-05-20T11:21:40.113607Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1594,"timings":{"blocked":1266,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/filters-BxUGO4mK.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/filters-BxUGO4mK.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-c06\"\r\nexpires: Fri, 24 Apr 2026 04:04:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3077)","md5":"a14d94662b28de1ffef940bf386899e2","sha1":"e02c3f85f772a6bae9f5f6c6342596366f2c8a1e","sha256":"06d61f575405874436ebea25ec77a1de77eeb24c9ddc071f27924f97e202e9fb","sha512":"c397f67d6d8630bb25c53f65ebda36c9c809a1e2d23f73e8b069730b7df27fe152fe18b3c15722eb246a0957b560d161f16006cebbeb8f2a154f56fcc3aa2172","ssdeep":"","tlshash":"8c5155fdfcd3a03346f95df940288514728ebe24686e0a4de55bd0456933888d0bfb78","first_seen":"2026-04-23T16:05:30.460997Z","last_seen":"2026-04-23T16:05:30.460997Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0dbed02da73e34b8dbcdcc926a5da1127.jpeg?2.0.1774018953478","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0dbed02da73e34b8dbcdcc926a5da1127.jpeg?2.0.1774018953478 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 614\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA4329E6135831336D7E3C\r\nAccept-Ranges: bytes\r\nETag: \"288529B0E33D3B66A2731D058A0EDB26\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12140603420238383984\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KIUpsOM9O2aicx0Fig7bJg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":614,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"288529b0e33d3b66a2731d058a0edb26","sha1":"45e95e851bc5f5ecf47f60051a2f337c4618b343","sha256":"c0a8c66763227f10f381f4aa054b2a851693e6519fd8daa435c326c4831bb34b","sha512":"47bd6e3b05c428e8fd039220d02a9e5498a8027c1aab085a7d04024472b2c88644e7b5097ddac8d2593c4d1ab7681ea57891066e36f782cbb28f34fef388432b","ssdeep":"","tlshash":"cff04751dff9f27d6bc1b051a7cd1027f2397c51403428308a18541cf01849afc56202","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T14:35:33.329022Z","times_seen":162,"resource_available":false,"data":null}},"time_used":1899,"timings":{"blocked":806,"dns":1,"connect":268,"send":0,"wait":280,"receive":1,"ssl":541},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-E8b8Xccy.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-E8b8Xccy.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-16199\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90521,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60295)","md5":"265bf776887730562a3c6fabaa6d99a4","sha1":"03de94f5b5b1e0536a0c6e15426237b298a8f54d","sha256":"15a7d93830deb6fb9d069a7ac6df902db0759cc6d2fe3a8a119fb8e1530d3afc","sha512":"7a05ce78115acf890d595bb399e7be4fc4d882fb79a7ab0c744b87643e47c0835a070f489cec306483352356650203638b6245ba95f6c0f46dcdab95c8bc7947","ssdeep":"768:ZAmR6jmhg+j+TOLvznz10ckqymHzYaRx5MIgrp9a9NuDsyP2Adh/ghr8P8nFLq1v:ZrqaLbngvmmK0ghwPYMXH1wCKu1","tlshash":"ef935d45d90a0dff65be04983a6a190031280fd7d9888c63b779ed5a37face4b39d718","first_seen":"2026-04-23T16:05:30.462368Z","last_seen":"2026-04-23T16:05:30.462368Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-opb2qyt5.css","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-opb2qyt5.css HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-ff9\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4089,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4088)","md5":"ceb7181f6a717f3463634b3b5b654739","sha1":"8e9bd5c81a1e635f31bc560d9a34340beeb98ae0","sha256":"3ee3a3635810e52819c5c12be1946ee32cc0c47e51a8a1d59dbf226f1d2d7dcd","sha512":"61348812be51f43303a3d018a60ea395969aaf12ba6003059e58eb83ad1c02b7c6c3a0cbc0d73330453086eb45f0674af2024270a9504fad8a3d7532b421b213","ssdeep":"","tlshash":"3381424efb9531395d77e48e7e598e4ca1187e83e1cbdec0e5434a0208dfae73929249","first_seen":"2025-12-27T20:43:52.899023Z","last_seen":"2026-04-23T16:05:30.463623Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1044,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1044,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.09e9ba6ad8ad8400391a8843e186d9853.jpeg?2.0.1774018953478","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09e9ba6ad8ad8400391a8843e186d9853.jpeg?2.0.1774018953478 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 525\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA43296AFD36333990DC29\r\nAccept-Ranges: bytes\r\nETag: \"39EF9D38FE0AAB83585DD87672DB2F9F\"\r\nLast-Modified: Tue, 14 Jan 2025 05:55:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17681862502574744688\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Oe+dOP4Kq4NYXdh2ctsvnw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"39ef9d38fe0aab83585dd87672db2f9f","sha1":"73beb0a9847b3f98e5e96b384767896452dfaa33","sha256":"ab447108bbc8e802ba2d67626f51554cb9f1fab5db2bfeabfc8371eff71204cd","sha512":"5a1441bce9b88fbc5f0ecac5aee541406dd05eec641a6d2db62c6c38d7d59365d5568aeb95efdacacd125d808fd0d9e64c7954305b6da00dab35ec659b7a75c6","ssdeep":"","tlshash":"b7f00ce9f558cc65461855e6cf79742100fefc5cd57cf81c8d45f564f54d41259502c1","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T14:35:33.309706Z","times_seen":162,"resource_available":false,"data":null}},"time_used":1679,"timings":{"blocked":829,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":566},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.romebit.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.romebit.com","domain":"romebit.com","tld":"com"},"ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.romebit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 06:35:19 GMT","end":"Thu, 09 Jul 2026 06:35:18 GMT"},"fingerprint":{"sha1":"32:C4:B8:33:B8:0C:6E:9F:48:3B:0E:0F:5E:37:D2:A2:8C:F4:5A:E2","sha256":"03:71:8F:4D:24:53:76:7B:65:5D:0C:D5:93:D0:70:04:AB:DA:6D:4E:2E:35:17:DB:23:A5:85:3C:B9:08:20:53"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.romebit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btc2.byfedai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 23 Apr 2026 16:04:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btc2.byfedai.com\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T01:46:59.028862Z","times_seen":17682142,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-23T16:04:54.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-1531\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5425,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, CR, LF line terminators","md5":"ee1595abcdb58c25a59b071f8b5be798","sha1":"d6adf9df3f3b7c9b068df6a12dfca5ee986dbc31","sha256":"20eeb9430cce0e8eb4a81c8bfa9cc4aa93947c10e14cdde21594efda5ca5e85d","sha512":"5088a44c6cbe153aeac575a3c5d01691f69dc723901576e10a4d035221d7b96a7fbbde7f689e7cc1a669d7edb41c94a8e4a4cf7efd15070e3a996be682d34dc3","ssdeep":"96:+r82oaBf53uSPEAERdxt/Vur6TCZydHRH/gq2mUsGKAiowGmuB1niHwiiHnH/2:+FH9PE7KZCxf72nfD3bmuB1niQiiHf2","tlshash":"92b141b75ca0881a23b2062befd7f018eb61529384199854b4cc50ee9fa1fd6c4db736","first_seen":"2026-04-23T16:05:30.464602Z","last_seen":"2026-04-23T16:05:30.464602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":174,"dns":114,"connect":26,"send":0,"wait":26,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/vendor-9BTQQzSj.css","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/vendor-9BTQQzSj.css HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-16993\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92563,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b0892180e18d9dadd0235bd5184e8142","sha1":"e59dd0931701f8abe1e3af4a893a8e5bc8b6ec38","sha256":"db463c3f416495aaab1cf129cdd7046485f5573094b14d0a0653decf9ddaf359","sha512":"f5b2ef240463e10453bbf9e3fe06c124f32b72803bca0713b98bd61b1f70eb20ba76487ddb7287ddddace427b4ed44ebf7da155d7b9fc08528dc7a41e1108b27","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnXzX:ZdN0rxmNH9yDWjX","tlshash":"9093c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2026-04-23T16:04:47.051874Z","last_seen":"2026-04-23T16:05:30.465498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.romebit.com/ws/fa28af6e-6058-41e5-98bf-a040e535fb35","fqdn":"webapi.romebit.com","domain":"romebit.com","tld":"com"},"ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.romebit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 06:35:19 GMT","end":"Thu, 09 Jul 2026 06:35:18 GMT"},"fingerprint":{"sha1":"32:C4:B8:33:B8:0C:6E:9F:48:3B:0E:0F:5E:37:D2:A2:8C:F4:5A:E2","sha256":"03:71:8F:4D:24:53:76:7B:65:5D:0C:D5:93:D0:70:04:AB:DA:6D:4E:2E:35:17:DB:23:A5:85:3C:B9:08:20:53"}}},"request":{"raw":"GET /ws/fa28af6e-6058-41e5-98bf-a040e535fb35 HTTP/1.1\r\nHost: webapi.romebit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://btc2.byfedai.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: R6ZMR89LwdCKHBUrc5qzXw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 23 Apr 2026 16:04:55 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btc2.byfedai.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: uCzUlZaEbtNt/Pogna5EglsSb9c=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T01:46:59.028862Z","times_seen":17682142,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":25,"send":0,"wait":35,"receive":2,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-lGaYinkx.css","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-lGaYinkx.css HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 232\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\netag: \"69bd6188-e8\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":232,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fd9e5f6754cc84284b802d58be4ecb36","sha1":"e5e41c0608f0c3415b1c04980f93378c006f932b","sha256":"099d26095a788d11b1f8ae4c481c08c67d4b5f0ccf27e2a4cc3d832b86f26f14","sha512":"5ec5b6470a7499c8a45f8cb2cd428f3a64edda6b7db45bca320dd1830613f03e69575b1e661aecfc85410e5ef0dc87bc47b9ab399f657d4e9095345dc292e623","ssdeep":"","tlshash":"a8d0a73e966a7011a23788aaff019c199c486d21b197df50ff434d0755eba1f3b90317","first_seen":"2025-12-27T20:43:52.854984Z","last_seen":"2026-04-23T16:05:30.465983Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1050,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1050,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/currencyItem-BtWHgslt.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/currencyItem-BtWHgslt.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-4b6\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"7e66ad44b2b4b5f0ecde4753eef67705","sha1":"09383f23cf7a22360811c49e1d1b0fdacd431dd4","sha256":"26becbbb77e869ab6203b4bc91a5e2107f9508d1b7f3439d54f263561cd843fd","sha512":"d9967328557b0c02f7bf31ddd0bd973488454aafe54b31223096e02df662065e1ef151789f8d070544caa29c2eb6c9e88974f47823943b4f6fe0f8d5299820a3","ssdeep":"","tlshash":"0521df9aaa01c7b1cbbe9162857d5414170d7fda700185c2ebed148a3b8b6fcd728b31","first_seen":"2026-04-23T16:05:30.466542Z","last_seen":"2026-04-23T16:05:30.466542Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1038,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/nesy.png?2.0.1774018953478","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/nesy.png?2.0.1774018953478 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/png\r\nContent-Length: 352\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA4329704948333710972D\r\nAccept-Ranges: bytes\r\nETag: \"0BF47A0FEBA1F8E68202E7FC29FED743\"\r\nLast-Modified: Mon, 13 Apr 2026 12:08:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 50722347791479226\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: C/R6D+uh+OaCAuf8Kf7XQw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 4-bit colormap, non-interlaced","md5":"0bf47a0feba1f8e68202e7fc29fed743","sha1":"e2df3bc97f7787f425db00bcbfc9baf6314685d5","sha256":"e7469b8f5e95efd43da015f656e3fd53c2ca2e6ce49d238820a63cdffcafcea5","sha512":"f3f2113fd458bd7098271be93f22e8f2fa3196cfcf38c060b6356cb4fb90be88bbb3751084b25e6d9e82a2e3ba306212e431a5f6a82db757c17b817597bd210f","ssdeep":"","tlshash":"14e0f82b875ecd47e8a101336a0682c305a22a2bf19282634482ea031c0160308d8407","first_seen":"2024-10-18T13:48:19.560645Z","last_seen":"2026-07-31T03:02:33.974678Z","times_seen":155,"resource_available":false,"data":null}},"time_used":1279,"timings":{"blocked":-1,"dns":0,"connect":318,"send":0,"wait":320,"receive":0,"ssl":641},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-BkGh6s6X.css","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-BkGh6s6X.css HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\netag: \"69bd6188-18d\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-29T22:52:22.70849Z","times_seen":1464,"resource_available":false,"data":null}},"time_used":1046,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1046,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.romebit.com/api/common/getAllSetting","fqdn":"webapi.romebit.com","domain":"romebit.com","tld":"com"},"ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.romebit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 06:35:19 GMT","end":"Thu, 09 Jul 2026 06:35:18 GMT"},"fingerprint":{"sha1":"32:C4:B8:33:B8:0C:6E:9F:48:3B:0E:0F:5E:37:D2:A2:8C:F4:5A:E2","sha256":"03:71:8F:4D:24:53:76:7B:65:5D:0C:D5:93:D0:70:04:AB:DA:6D:4E:2E:35:17:DB:23:A5:85:3C:B9:08:20:53"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.romebit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://btc2.byfedai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 23 Apr 2026 16:04:55 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btc2.byfedai.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15161,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bf7a2069570c00ae9a3c8bef4ea2cdcd","sha1":"6e5f24d06843ed1cd6af08a2104f551325275e60","sha256":"4072d550521b417566b1db380a10129436b934f634a2ff79345518ba93b48bf0","sha512":"999c1884c0f3ab29343612dd62b1e5a6f82f21c95f59ae1d6fb9685e0c2def805085f33ec3c809df418486a11088a428eee4614c9a932afbe47f8558f5b96cb9","ssdeep":"192:NG4ZzC/S8QRR+kD+RbAuc2hsSH/VU5pbAi3woqaIqgzc2sYZssqsCttzMNGGFGs1:c6uKHqQ29QM/876ga8ynYTK","tlshash":"8062664a37e8cc7d82d61ec5d0ab3a49bedc347be980ec54e5a7af5c84995b6040f10e","first_seen":"2026-04-23T16:04:47.038274Z","last_seen":"2026-04-23T16:05:30.457371Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":2,"connect":29,"send":0,"wait":56,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/platform/dev/logo_144.png?2.0.1774018953478","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1774018953478 HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Aug 2025 16:09:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a5f342-3789\"\r\nexpires: Sat, 23 May 2026 16:04:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14217,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"a3726201a9e1b36279a2365acc246736","sha1":"5c1f45cd85981e0a90356667438e744631cd3fe2","sha256":"11da067f353539dcaa9494060850c62be24d7cf3f74cc6be62439484d54ee2d6","sha512":"055f4b396f489e6e08459b74dba3487dd640d2b340a8a6cef13f096d99706468bfa919cf3a3725d50dee4e1fcf1eab906da3f9ccf5e7a2103a1e1f05c6593e91","ssdeep":"384:GVGLB5f9k8YNDjAzSCy0WHP6oV/QvbFowre9tz0MZVnpDr295/qXbLCPEu:FLB5fOtj4D1oV4vTaBZnq9VqnCMu","tlshash":"fb52cf55faf41ea08ae9b2eec5243f9dea680acf1cd18c49ff83947b943b0415874257","first_seen":"2025-11-02T12:35:02.133349Z","last_seen":"2026-05-20T11:21:40.089949Z","times_seen":47,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/platform/dev/favicon.ico?2.0.1774018953478","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1774018953478 HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4901\r\nlast-modified: Wed, 20 Aug 2025 16:12:12 GMT\r\netag: \"68a5f3dc-1325\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4901,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8574618eb8307e7d2caf32a997d0060c","sha1":"89c50d617bde6415d334ae263b1947c48cc49b05","sha256":"616970e238846e050699331b1406f28933a042f9e840445ecdc0a79392cd6af0","sha512":"99fc82b33c3e22fad2da5cf78a92d65522c569ccedb6cd21f8e5c4515a1e98db95878d1bde49188e15b5e0193f70fbae7153e0911729bbad51d1f37c08ec634f","ssdeep":"96:mJ6n+a9yc6JpE/eiyIlDON6ZEMNmLoyspCijOhEMj2yL4gmr1v0U:mEnl9yBJiWPIgNjUEC8iEjd6r1H","tlshash":"d9a17db1a44ace59d35d91a4e2c3614147f91c3c150c9e3a49425cfbd22c5f84badbca","first_seen":"2025-12-27T20:43:52.850022Z","last_seen":"2026-04-23T16:05:30.469009Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/ETH.png?2.0.1774018953478","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/ETH.png?2.0.1774018953478 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/png\r\nContent-Length: 1100\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA4329704948323148972D\r\nAccept-Ranges: bytes\r\nETag: \"8658D5935AB59EE39D15C39226279D46\"\r\nLast-Modified: Mon, 18 Aug 2025 07:53:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 533354087542411518\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hljVk1q1nuOdFcOSJiedRg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-08-02T14:27:27.372047Z","times_seen":1855,"resource_available":false,"data":null}},"time_used":1349,"timings":{"blocked":-1,"dns":0,"connect":330,"send":0,"wait":332,"receive":0,"ssl":686},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.romebit.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.romebit.com","domain":"romebit.com","tld":"com"},"ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.romebit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 06:35:19 GMT","end":"Thu, 09 Jul 2026 06:35:18 GMT"},"fingerprint":{"sha1":"32:C4:B8:33:B8:0C:6E:9F:48:3B:0E:0F:5E:37:D2:A2:8C:F4:5A:E2","sha256":"03:71:8F:4D:24:53:76:7B:65:5D:0C:D5:93:D0:70:04:AB:DA:6D:4E:2E:35:17:DB:23:A5:85:3C:B9:08:20:53"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.romebit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btc2.byfedai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 23 Apr 2026 16:04:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btc2.byfedai.com\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T01:46:59.028862Z","times_seen":17682142,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-C9GjGIRV.css","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-C9GjGIRV.css HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-4ab2f\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305967,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"1ea2e791f63b2c636c47f003c373880c","sha1":"543eedc04434e859dc67333f5b62217f2aada0ba","sha256":"d898d23deb9bbd3c1882eadcbd606bc07b615cb2a23e3533f26b83572a47648f","sha512":"27acbb4191065ea151aca3ae170ce38b015caccebb4189c0ca0eefa5bb79ab37985bb2efbe01135badd12f159404e65136906afb76445acc88a6e0b7831fdc79","ssdeep":"6144:nfN/9SpPXbkkZ8w71ZACkFDS3vyf58rBeV05TH:fN/4b9Z8w71ZACkFDS3vyf58rBeV05TH","tlshash":"8654d7a9a59011bc6f27aa7597ce5ad8f23ce6719c118de8f201600a4fc3ff91363617","first_seen":"2026-04-23T16:05:30.470084Z","last_seen":"2026-04-23T16:05:30.470084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-DQOytnWl.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-DQOytnWl.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-15a6\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5542,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5537)","md5":"5c6f310eff3710b32b825a921ec78343","sha1":"3ae851ef55410e18a673a89fbe8087319e36da45","sha256":"dabf9f87e67cc74dd4dc9991cae18070d271b45f4426989c5e1188aedb549ebf","sha512":"d5ac2597a293be73bc2180c6086d12bde8409d158f9d6f66f53e9850f3e6dedd7eeea2d9f4e4cf38c8259e40f00c1b6ed9a44dc95f4c539cd11aae0d2fea5038","ssdeep":"96:a3pwzaARFIAcbwDW9qvYmKqCwzokffEwFbFMF0wx7WrdeZcyJJZw0B/8lxM3hjPw:epwzaARhcbwDWYYbqCwzVEwFbFMF0wxu","tlshash":"18b1d69ab8128979eab3518444590020b25d3ffa612c88b5f7feac16777ce78c3d2735","first_seen":"2026-04-23T16:05:30.441766Z","last_seen":"2026-04-23T16:05:30.441766Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.romebit.com/api/common/type/defi_activity_type","fqdn":"webapi.romebit.com","domain":"romebit.com","tld":"com"},"ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.romebit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 06:35:19 GMT","end":"Thu, 09 Jul 2026 06:35:18 GMT"},"fingerprint":{"sha1":"32:C4:B8:33:B8:0C:6E:9F:48:3B:0E:0F:5E:37:D2:A2:8C:F4:5A:E2","sha256":"03:71:8F:4D:24:53:76:7B:65:5D:0C:D5:93:D0:70:04:AB:DA:6D:4E:2E:35:17:DB:23:A5:85:3C:B9:08:20:53"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.romebit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://btc2.byfedai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 23 Apr 2026 16:04:56 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btc2.byfedai.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-07-28T19:32:04.761168Z","times_seen":800,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.022a27043bab143ebbdcf2feec3f0bcdf.png?2.0.1774018953478","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.022a27043bab143ebbdcf2feec3f0bcdf.png?2.0.1774018953478 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1696\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA43294C8B373438B8DEEB\r\nAccept-Ranges: bytes\r\nETag: \"6B415DB0E9421893AC9138D29C9508C2\"\r\nLast-Modified: Tue, 14 Jan 2025 05:54:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6343616017940680678\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: a0FdsOlCGJOskTjSnJUIwg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"6b415db0e9421893ac9138d29c9508c2","sha1":"0aa816a7e2be813f871f4dd45e561349d5a1caf8","sha256":"41d3b9b935e805a680e9b6091106ea27663185f3b41ea952afcaae111b411795","sha512":"c1e26f24cf03efd69f406cc5840f6e7336c382e54f00fe5f18e435e9d74d9827411cdc096cc4857adc70cd608b2b30b530cd8f2c302ec2b8917ecdbff7c6ae5c","ssdeep":"","tlshash":"5931b8caf550b7c0a74559912cf1c871996b4850e7e0d0b5b98ec0268f355b244ba9ce","first_seen":"2025-11-02T12:35:02.129225Z","last_seen":"2026-05-20T11:21:40.059606Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1879,"timings":{"blocked":797,"dns":0,"connect":267,"send":0,"wait":278,"receive":0,"ssl":535},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/BTC.png?2.0.1774018953478","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/BTC.png?2.0.1774018953478 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/png\r\nContent-Length: 10225\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA4329E173EA38358609E6\r\nAccept-Ranges: bytes\r\nETag: \"2DB914A7CD7E95E621E8C6583F1BC157\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10337996312582732758\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: LbkUp81+leYh6MZYPxvBVw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"2db914a7cd7e95e621e8c6583f1bc157","sha1":"27eb2f92bf6b850f2df817924bae573e3be1b683","sha256":"391b9837814e7f8a602d8e4f30f69b1bbaf7874314396e5c543a309a453e26e7","sha512":"2c49505e6037b73687e81642387766e819448422decb73acc8655868ae6a0b833b1126c8c8a3c51b2a9916be5ae52330eb5e8584e2518abf0b5e740b7390a5f6","ssdeep":"192:K7ckTNck3A/9kk6fDIRHHFWGkb04ZMuOtaePoQwREtHiDjqrDuBftqx97E:MckTek361isRFtj49Ota4oj2MHxBlA9Y","tlshash":"0422be57458d172df7978b2363656f322126dc27f37efb8b58e824a880cc5403cad55a","first_seen":"2025-11-02T12:35:02.151453Z","last_seen":"2026-06-26T06:04:26.78005Z","times_seen":48,"resource_available":false,"data":null}},"time_used":1296,"timings":{"blocked":-1,"dns":1,"connect":322,"send":0,"wait":324,"receive":0,"ssl":648},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/resource/svg/light/zu447.svg?2.0.1774018953478","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1774018953478 HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-1a4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-07-28T19:28:06.581256Z","times_seen":462,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/charting_library/charting_library.min.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Nov 2023 13:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65424d18-2a6b\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-29T22:52:22.712247Z","times_seen":1299,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/filters-BxUGO4mK.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/filters-BxUGO4mK.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-c06\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3077)","md5":"a14d94662b28de1ffef940bf386899e2","sha1":"e02c3f85f772a6bae9f5f6c6342596366f2c8a1e","sha256":"06d61f575405874436ebea25ec77a1de77eeb24c9ddc071f27924f97e202e9fb","sha512":"c397f67d6d8630bb25c53f65ebda36c9c809a1e2d23f73e8b069730b7df27fe152fe18b3c15722eb246a0957b560d161f16006cebbeb8f2a154f56fcc3aa2172","ssdeep":"","tlshash":"8c5155fdfcd3a03346f95df940288514728ebe24686e0a4de55bd0456933888d0bfb78","first_seen":"2026-04-23T16:05:30.460997Z","last_seen":"2026-04-23T16:05:30.460997Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1039,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.romebit.com/api/common/getCoinList","fqdn":"webapi.romebit.com","domain":"romebit.com","tld":"com"},"ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.romebit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 06:35:19 GMT","end":"Thu, 09 Jul 2026 06:35:18 GMT"},"fingerprint":{"sha1":"32:C4:B8:33:B8:0C:6E:9F:48:3B:0E:0F:5E:37:D2:A2:8C:F4:5A:E2","sha256":"03:71:8F:4D:24:53:76:7B:65:5D:0C:D5:93:D0:70:04:AB:DA:6D:4E:2E:35:17:DB:23:A5:85:3C:B9:08:20:53"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.romebit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://btc2.byfedai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 23 Apr 2026 16:04:55 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btc2.byfedai.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26560,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d9df3a11f50c65161830c3bc790032e5","sha1":"fa2cdfee505771e8dd96c656e356e66df3700914","sha256":"b9fcab27257bac17ddb2d5c49930cac9c58a2469348e13263e5d6e4690efd68a","sha512":"0ee15afc9120beb6e29763477e30cd9464d7789e5479e292babf052d2db47b7db8ede495cf689ba3ee943cdc423e895c8c9a5290f36e91d0bf50cddb6ec9f250","ssdeep":"192:tge2X9j52XNlge9X0NHgewwCPgeTXYOXZAgerXkHgerXH1dXlwge7XxhgeHXSXDh:msh141pURD","tlshash":"b5c21e85163896adc679d0d02f6f7902529c31afacc68d2bc7cd4d8c8ed4bf5260af06","first_seen":"2026-04-23T16:05:30.474733Z","last_seen":"2026-04-23T16:05:30.474733Z","times_seen":1,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":73,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.09c082cb9e6e04968ab10af7c8dada9b8.jpeg?2.0.1774018953478","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09c082cb9e6e04968ab10af7c8dada9b8.jpeg?2.0.1774018953478 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 619\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA43294C8B37343802DFEB\r\nAccept-Ranges: bytes\r\nETag: \"6CFE73F06DA3C5604FFE6B41D284540D\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1104380098065402225\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bP5z8G2jxWBP/mtB0oRUDQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"6cfe73f06da3c5604ffe6b41d284540d","sha1":"9e9fa8144a7cb0f1da7daa4e5858fa49106c171c","sha256":"c0f3d5204944bd902aa03323ff6d9543ce33f9c8a523ef06b9953dabcd5e1556","sha512":"db8346b7c7d8216db595641f02a1fecccbbe268f7384be291647e939883348696f6d8b2d6754b62559eaf23a47ed50322013c87837c674745a05556bc64f665c","ssdeep":"","tlshash":"fbf0685df3fc843d5be15b598535f1b5d414ce3bc4e151080bd06891522b4553851b11","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T23:35:41.495034Z","times_seen":177,"resource_available":false,"data":null}},"time_used":1358,"timings":{"blocked":1090,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/XRP.png?2.0.1774018953478","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/XRP.png?2.0.1774018953478 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/png\r\nContent-Length: 8560\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA4329AA0298353469F7FE\r\nAccept-Ranges: bytes\r\nETag: \"E5317EA83F31CABD72384EBFE9AD4D19\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12202450021848313861\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 5TF+qD8xyr1yOE6/6a1NGQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"e5317ea83f31cabd72384ebfe9ad4d19","sha1":"1b86b9a1cc9b2fc526b0633c9c05bf254aeea492","sha256":"408631d9c94d043df50ee2a54e8f155972fb034dd2fa34a362f8ed9f3a5e9e80","sha512":"8f5e959a587a319ee4379149fb8e46c4f09064652739b35e15211067d7efcd6c0b7f25c5320713ab56274a607a36abf83033d2cce872ec3f3acc620a641785ee","ssdeep":"192:x1T2zB7RZPwLv8u0idTXTUOoTey39GASdPPuHJAs/Pt:x1i/PVk7wnd3zSdPPsF","tlshash":"7102bfef7f7829a5f75dcae909a73b5a8c3e8f190a2b77ddca1800548487806085f325","first_seen":"2025-11-02T12:35:02.16133Z","last_seen":"2026-05-20T11:21:40.103876Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1332,"timings":{"blocked":-1,"dns":0,"connect":326,"send":0,"wait":328,"receive":0,"ssl":678},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/TRX.png?2.0.1774018953478","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/TRX.png?2.0.1774018953478 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:58 GMT\r\nContent-Type: image/png\r\nContent-Length: 11426\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA432AAA0298323378F8FE\r\nAccept-Ranges: bytes\r\nETag: \"4234F3496B5BF50441F5EB6D019CE29B\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13538433219395450952\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QjTzSWtb9QRB9ettAZzimw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":11426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"4234f3496b5bf50441f5eb6d019ce29b","sha1":"3aef5eeb051f641447c451c683e387b6f12640ad","sha256":"6ee8e2c697eb32101badc2f05faf5bf0da673f3740063a43012d5bacdf70fe7b","sha512":"314bb1f429a1c4501df2fc95fd5faa21c699bd65dfb7726da2a9440961b8408fd91286b0fb1359cabc4ab56bb5f3e79c744fa5afd04f79eae826e1793f686ce5","ssdeep":"192:859hN7i15EjwKD6QHtWD33KYpPsRchfVZMm8BG14Adqq3T2+3aE1Ovjv5otmn:c76Ka33Y0ZMnw3C+3F1Ftmn","tlshash":"e532bf83d1693928ec53f1f80452d962c2f59d620b15b3528420a4ea7e87c1a6dffcef","first_seen":"2025-11-02T12:35:02.147505Z","last_seen":"2026-05-20T11:21:40.062961Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1678,"timings":{"blocked":1326,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/vendor-UVi9_HUV.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/vendor-UVi9_HUV.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-913f5\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":594933,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"db4a055babb80d5b93bae8515c2a778c","sha1":"22c7295f54cdcff1b1a4c5154b1abeace3fadb9c","sha256":"1310f644fe311957774e65e9a26bfa6646606fd982b3a965ad05404ce55bd163","sha512":"4a2d74f29f7f69239e8cade28b646c01aa1155f3ef940e81ae784f441c90b6f2159e797b30d6e17f87709ca1e41c6af6141f90f33dcd79611e820e52d5e45f37","ssdeep":"12288:bzeeMRHdcpGhbApQVguh9IQN3kfLzEPTKvcihU/9xHMfsa+B8MhvWdrkZ9:3eeMRHdkuFeutBkfLzEPTKvZU/9xMfsT","tlshash":"53c408d93692b02553bb14e6007b0006f33e6e59780d84a4f1add8db7d7ad8992b7f2c","first_seen":"2026-04-23T16:04:47.034834Z","last_seen":"2026-04-23T16:05:30.433403Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-DvUVBAOa.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-DvUVBAOa.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-3609\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13833,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13832)","md5":"4284b75be7d4721e9211b6fedeeccb1c","sha1":"e76055491953914a502cd4b2eb968f53b4cae5fe","sha256":"a019b64eec5f05c0b7d78edac67ad8cdeb2864a3bac95ddf7e30efa2557a8412","sha512":"04059a527aed4e13704228d254a8831c56bf65a56f1cce860d1673da71558c0e5ca57f747e180f819484a26e5a3331f05d75002eb8dcc0a0d99b3226ae7a9e75","ssdeep":"384:sjBzkCb2uLRzVgQv+8mdPtwnzjZj/QvNxtJpehRC0PpyQc:SzkWLb1+8mdPr5JpehRC0PpTc","tlshash":"8752c999f9069d3df5bba051408c08103219bfef900f8da2b5fe5d826366fb8b75d614","first_seen":"2026-04-23T16:05:30.458656Z","last_seen":"2026-04-23T16:05:30.458656Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-DhoGj4Y2.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-DhoGj4Y2.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 508\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\netag: \"69bd6188-1fc\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (507)","md5":"98d3678566543abcd158283d95f83b32","sha1":"79ef8016e82a2a529080e00ac21209a32ead513e","sha256":"9422e910782fb0e1a4655f283bac417d0dbf27cd0fab2a79c6ede5e6e9b2202f","sha512":"4699953a95ac946cab044d3a2c56788fe19dfbbdb29ccbdb52ef4b028d342dd6bdfb034f6f3ceeb646157c7d59651596e7f1c1014ac87b8d4ed938dc45671e1d","ssdeep":"","tlshash":"31f0052fb96dc0720bf38498d1231810fa1d1b963b50d5d4d9861b11db748e7d19f624","first_seen":"2026-04-23T16:05:30.478022Z","last_seen":"2026-04-23T16:05:30.478022Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/resource/svg/light/mengbanzu12.svg?2.0.1774018953478","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1774018953478 HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 802\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-322\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-29T22:52:22.742379Z","times_seen":983,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/ADA.png?2.0.1774018953478","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/ADA.png?2.0.1774018953478 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:58 GMT\r\nContent-Type: image/png\r\nContent-Length: 13140\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA432A70494838324D982D\r\nAccept-Ranges: bytes\r\nETag: \"D5C7005AE6E637C5DE46CE7489229926\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7485655218430012688\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1ccAWubmN8XeRs50iSKZJg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":13140,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5c7005ae6e637c5de46ce7489229926","sha1":"3ff1b2ad1bc1fc06edecdaa8f3e72338b3b4868e","sha256":"116c99207078f482197b4ecee95f702cfa4392fdf76c745cbceffe07cabcf048","sha512":"6a9dcd42ccd8985f6575bf3b559f072dab2d4d5daf6e2a1662cb57a2cc178040f297cf35a38a0e06552794bb12ef91930047e36e8ab0e7978dd9c02a0bef1d0d","ssdeep":"384:1gR/SosvBuYAIFCYB9tMeKkDmdEX4NZNmuW/AMCWIV:yR/SoWBuYAxhldEKrW/0WIV","tlshash":"3c42bfb8bed12432fa289b2194cd1d9a3edc54420e95618d5e5ad1358b80ffd30f26d6","first_seen":"2025-11-02T12:35:02.113557Z","last_seen":"2026-05-20T11:21:40.080158Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1680,"timings":{"blocked":1332,"dns":0,"connect":0,"send":0,"wait":347,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.romebit.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.romebit.com","domain":"romebit.com","tld":"com"},"ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.romebit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 06:35:19 GMT","end":"Thu, 09 Jul 2026 06:35:18 GMT"},"fingerprint":{"sha1":"32:C4:B8:33:B8:0C:6E:9F:48:3B:0E:0F:5E:37:D2:A2:8C:F4:5A:E2","sha256":"03:71:8F:4D:24:53:76:7B:65:5D:0C:D5:93:D0:70:04:AB:DA:6D:4E:2E:35:17:DB:23:A5:85:3C:B9:08:20:53"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.romebit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://btc2.byfedai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 23 Apr 2026 16:04:56 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btc2.byfedai.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":467,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"de79e636496d68d0e23714e98cc57e67","sha1":"e0d96f5d8a7ff2faf566be7ae298d9693b4e2bad","sha256":"10d6a1f2c980d6d3240cb180f8e368ff2bcea5ea556d9949e3c4627d449fbc0a","sha512":"0ebd6152c99ad84e6a87a10d4a48804dde22384b3cd2af47172aa794834932b2ea02450ed832f95d964f95f5af4f0042499af3b5b39d8d2149ce035ce392954a","ssdeep":"","tlshash":"daf0550e043c8e3a880b44c716ccbec952be1393d660cd348a5bcf2c82f52b5072aa08","first_seen":"2025-12-27T20:43:52.865521Z","last_seen":"2026-04-23T16:05:30.480556Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.02a1a902ab11d4bc4a5e9f1b9e6220bf6.jpeg?2.0.1774018953478","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.02a1a902ab11d4bc4a5e9f1b9e6220bf6.jpeg?2.0.1774018953478 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1353\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA4329BC6A5B34311A2512\r\nAccept-Ranges: bytes\r\nETag: \"3374D8DCC672161C3E942D71643DD6DF\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18229691747106943305\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: M3TY3MZyFhw+lC1xZD3W3w==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"3374d8dcc672161c3e942d71643dd6df","sha1":"1eb89d286896e972f6f9e433541e1a406d336db1","sha256":"26a7521cd56d484b5a9775d11c173e6f67c45c68c2bde5feee095b3ff5be0bdd","sha512":"02c86573b4cf743a1576007a70029a3808734d6893546fde74c13a3912a6ad2e850309c5eb0130492321eba8a73b7256f402ea483c861761934463a14eb6aaf9","ssdeep":"","tlshash":"c921084493f1682c99fe6034d1fa5a10dc9de10e392cc8a2ffb9a804722142adcb11b1","first_seen":"2024-08-19T20:18:19.617177Z","last_seen":"2026-07-25T23:35:41.508948Z","times_seen":152,"resource_available":false,"data":null}},"time_used":1894,"timings":{"blocked":804,"dns":1,"connect":266,"send":0,"wait":285,"receive":0,"ssl":536},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.romebit.com/api/common/getAllSetting","fqdn":"webapi.romebit.com","domain":"romebit.com","tld":"com"},"ip":{"addr":"8.208.98.47","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.romebit.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 06:35:19 GMT","end":"Thu, 09 Jul 2026 06:35:18 GMT"},"fingerprint":{"sha1":"32:C4:B8:33:B8:0C:6E:9F:48:3B:0E:0F:5E:37:D2:A2:8C:F4:5A:E2","sha256":"03:71:8F:4D:24:53:76:7B:65:5D:0C:D5:93:D0:70:04:AB:DA:6D:4E:2E:35:17:DB:23:A5:85:3C:B9:08:20:53"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.romebit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://btc2.byfedai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 23 Apr 2026 16:04:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://btc2.byfedai.com\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T01:46:59.028862Z","times_seen":17682142,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"webapi.romebit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"byfedai.com/","fqdn":"byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-23T16:04:54.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:15:31 GMT","end":"Fri, 29 May 2026 12:15:30 GMT"},"fingerprint":{"sha1":"FD:CE:CA:98:B7:47:5B:FF:1B:47:9D:66:F8:1D:A8:7D:AC:EA:47:5B","sha256":"48:52:9D:8B:AE:9F:A9:D5:D7:FB:94:C4:1B:E8:0E:A4:74:2E:C8:9D:8F:73:F1:A8:2E:7B:25:A9:44:A3:ED:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":240,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"7933ff3a4381a1ae845c2f090d750111","sha1":"93cc45ce8dc1e2d887e7c96a9c9c73b314eb41ff","sha256":"5812636b154cea608b89196c65067a5d3f5750c63dcfeed8f6156906230d949b","sha512":"8eae3b9d5f7c30f7dbac8588f391cd64621b286e062f10c3a4fa88589e6ccabeaa2b874d8e8ba10beb3dd9929357945050a34ab61085e6bfd58bccb7f5f94632","ssdeep":"","tlshash":"12d0a793a9815c421333975118cbb5019577ae925cc8d89c85f2a05b7ce5f12c7837b0","first_seen":"2026-04-23T16:05:30.481864Z","last_seen":"2026-04-23T16:05:30.481864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":138,"dns":89,"connect":24,"send":0,"wait":25,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-qL_x3Eds.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:55.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-qL_x3Eds.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 777\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\netag: \"69bd6188-309\"\r\nexpires: Fri, 24 Apr 2026 04:04:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":777,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (776)","md5":"c8e06ded6696f50b48ebd4779005619d","sha1":"286c3e9189ec1b2fb419cefdcc85e3bdf8c7bbc4","sha256":"b15f997eb52c9169879a8b8f04028218b552bf8bf679697c8d9d03470cfccce3","sha512":"29cc1390c5b78a2a010620a5e2f519f063d36fde3e178155f3c7bbc23ed272d896124d7c2084f8e3b657a57ddcb0e3aab54bcc861d743d26744de87f2632de3b","ssdeep":"","tlshash":"8301fdf8fd0c9e771fb309501291360120095fddf92015e158977e252be1a80cbceb2d","first_seen":"2026-04-23T16:04:47.061769Z","last_seen":"2026-04-23T16:05:30.483074Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1040,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-DhoGj4Y2.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-DhoGj4Y2.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 508\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\netag: \"69bd6188-1fc\"\r\nexpires: Fri, 24 Apr 2026 04:04:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (507)","md5":"98d3678566543abcd158283d95f83b32","sha1":"79ef8016e82a2a529080e00ac21209a32ead513e","sha256":"9422e910782fb0e1a4655f283bac417d0dbf27cd0fab2a79c6ede5e6e9b2202f","sha512":"4699953a95ac946cab044d3a2c56788fe19dfbbdb29ccbdb52ef4b028d342dd6bdfb034f6f3ceeb646157c7d59651596e7f1c1014ac87b8d4ed938dc45671e1d","ssdeep":"","tlshash":"31f0052fb96dc0720bf38498d1231810fa1d1b963b50d5d4d9861b11db748e7d19f624","first_seen":"2026-04-23T16:05:30.478022Z","last_seen":"2026-04-23T16:05:30.478022Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/currencyItem-BtWHgslt.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/currencyItem-BtWHgslt.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd6188-4b6\"\r\nexpires: Fri, 24 Apr 2026 04:04:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"7e66ad44b2b4b5f0ecde4753eef67705","sha1":"09383f23cf7a22360811c49e1d1b0fdacd431dd4","sha256":"26becbbb77e869ab6203b4bc91a5e2107f9508d1b7f3439d54f263561cd843fd","sha512":"d9967328557b0c02f7bf31ddd0bd973488454aafe54b31223096e02df662065e1ef151789f8d070544caa29c2eb6c9e88974f47823943b4f6fe0f8d5299820a3","ssdeep":"","tlshash":"0521df9aaa01c7b1cbbe9162857d5414170d7fda700185c2ebed148a3b8b6fcd728b31","first_seen":"2026-04-23T16:05:30.466542Z","last_seen":"2026-04-23T16:05:30.466542Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc2.byfedai.com/assets/index-qL_x3Eds.js","fqdn":"btc2.byfedai.com","domain":"byfedai.com","tld":"com"},"ip":{"addr":"8.208.15.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc2.byfedai.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 12:20:43 GMT","end":"Fri, 29 May 2026 12:20:42 GMT"},"fingerprint":{"sha1":"68:FC:D4:C7:52:A8:4D:B5:9F:AE:CC:92:F6:D7:3B:EA:65:F1:B0:09","sha256":"9E:E8:CB:67:4F:5F:FA:B9:43:98:96:26:F2:E5:45:6B:DD:B5:4A:29:BF:C6:39:E1:62:10:E0:33:D8:71:9B:80"}}},"request":{"raw":"GET /assets/index-qL_x3Eds.js HTTP/1.1\r\nHost: btc2.byfedai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Apr 2026 16:04:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 777\r\nlast-modified: Fri, 20 Mar 2026 15:02:32 GMT\r\netag: \"69bd6188-309\"\r\nexpires: Fri, 24 Apr 2026 04:04:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":777,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (776)","md5":"c8e06ded6696f50b48ebd4779005619d","sha1":"286c3e9189ec1b2fb419cefdcc85e3bdf8c7bbc4","sha256":"b15f997eb52c9169879a8b8f04028218b552bf8bf679697c8d9d03470cfccce3","sha512":"29cc1390c5b78a2a010620a5e2f519f063d36fde3e178155f3c7bbc23ed272d896124d7c2084f8e3b657a57ddcb0e3aab54bcc861d743d26744de87f2632de3b","ssdeep":"","tlshash":"8301fdf8fd0c9e771fb309501291360120095fddf92015e158977e252be1a80cbceb2d","first_seen":"2026-04-23T16:04:47.061769Z","last_seen":"2026-04-23T16:05:30.483074Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"btc2.byfedai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.01bfef044560f45e786e98bdec1295ec8.jpeg?2.0.1774018953478","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc2.byfedai.com/","date":"2026-04-23T16:04:56.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.01bfef044560f45e786e98bdec1295ec8.jpeg?2.0.1774018953478 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 23 Apr 2026 16:04:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1907\r\nConnection: keep-alive\r\nx-oss-request-id: 69EA4329BC6A5B3431732512\r\nAccept-Ranges: bytes\r\nETag: \"9459A1B16A6346A8DAF9E2E700D8A0AF\"\r\nLast-Modified: Tue, 14 Jan 2025 05:54:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17079821215456291766\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: lFmhsWpjRqja+eLnANigrw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"9459a1b16a6346a8daf9e2e700d8a0af","sha1":"7aeef8fb0483dd8f7089324bf338a8baff19c377","sha256":"fdbb68edeff25fa09404179dfc144d6343af95599093ad71043bd44939983a04","sha512":"87f2d69526f66e1169d4ca8a4ede4337e912b04ceab6438d0cb29021f3687a3e6802fc103fb77f7af9ad5ec1ebba3e404794cf0daf8a13f2c05c2be05c7e1376","ssdeep":"","tlshash":"c141f9a8f7a5f50fec540152146b69040df94844b560c04f06df94be4aa7af38c9f584","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T23:35:41.527495Z","times_seen":147,"resource_available":false,"data":null}},"time_used":1354,"timings":{"blocked":1086,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}