{"report_id":"71ce7274-86db-4f77-8736-47b7c8e41630","version":6,"status":"done","tags":[],"date":"2026-01-11T00:18:11Z","url":{"schema":"http","addr":"bitforge.top","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"172.67.209.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bitforge.top/","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"title":"bitforge.top - BitForge.top is your free, all-in-one toolbox for the web. Access a vast collection of essential online tools for productivity, development, and daily tasks—all completely free and ready to use","dom":{"size":90902,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (787)","md5":"e9b3989700756defdb7a1671dd8a8aa4","sha1":"277f75df6e5d5c3df0db435f75ac9b47cc0983d6","sha256":"3b57351e158d5042e1225a8c15c10b38dadbd169a77f3181d04eb24e8f79ad81","sha512":"412b497c5af9bc2c0530e201f526d60f4d99564fdbd5452c08ce4c4b6d297f4274776ceae632710d1fe0fc06b3fa22941f24311f4416357265982dc09bf33338","ssdeep":"1536:w/TaLBhbdmal8v4nOIowDm3fiLyJ+k7zY6muE2FsWE5zFydVUp:wdalBjdCPip","tlshash":"e4935272d0f0287b129781855cb1372d3eb6c047d69b0da536ad5be86feaccb842725c","dom_hash":"domhashc7671b247ad530cae48f5737cefae901","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bitforge.top","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"172.67.209.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-15T00:18:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"bitforge.top","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-29","domain_rank":0,"first_seen":"2026-01-11T00:18:12.309255Z","last_seen":"2026-01-11T00:18:12.309255Z","alert_count":35,"request_count":35,"received_data":895524,"sent_data":17624,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitforge.top/themes/default/common.js","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6406c44013b6faa6e7aa007dabb02641","sha1":"6747e437fa9d52060e68d26a4b0947b46746445d","sha256":"a847727044bc779929245c1f522f61d2187fa584c2a0c836e998816042236f8e","sha512":"a5404aafa79b736abdd1ce3dbc80f530647de7d6598d68728d4954c72947bdebb3209e30dbf75f780bdca917c6b29f9e4d9ccc60968d1a37abbcf88a323f52cf","ssdeep":"48:3xGQQu203Sn3NynhM1dLH0u4bX8XFFVeMkCusNy0Dl2R1lNAZZpkdbPfKPNHCU:30/udu8M1N0u4gGMkqNqdN2ZpkdbfKPx","tlshash":"49a19659a43501bb417333b1a78b4545fa3b107b3002914a3f1c9f1a2fb9c597a61eee","size":4999,"data":"","first_seen":"2026-01-11T00:18:18.682032Z","last_seen":"2026-01-11T00:18:18.682032Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/text-diff.webp?v=1767966730","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/text-diff.webp?v=1767966730 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34958\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:51:30 GMT\r\npriority: u=4,i=?0\r\netag: \"69540312-888e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0aR44iwH0EgYzQ4SRNzbOJmroHCsXi3IuUvsPx7OaVhudcxYTSZhHIYJxHbzmqdpEVYLs8Lonxyew9jmcUH8SZTy6%2F6jSTLd3g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc47d07569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34958,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6fa09d84b127984fbfc883b7251ead0e","sha1":"664c9e2def56ccce6fc07df35f9503b938e70247","sha256":"60de0f5456426b6f38fdf6b99bb3da29a8f1a52c8aebae72e7ebe86b4957294b","sha512":"d07c5b40d92684cc8d7f9bcd333eb93bb67ba24f0c00b4f0baddaa00e28e7d913fbfcc79d6d825a2cb63a4fd8237949fd901767e1d8ffec5fe468f34a82ba9ea","ssdeep":"768:HmwwgM14kdGFXmoKMEM40LZ829+8XHZ8SCgyatFT6Ib/f:HHwz1XxMEKzX5Py2FhTf","tlshash":"72f2f148da8ce7eece974b5e8d772afd9332b0c714c353e89c069a5096927835cc9439","first_seen":"2026-01-11T00:18:18.645771Z","last_seen":"2026-01-11T00:18:18.645771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/image-compress.webp?v=1767970779","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/image-compress.webp?v=1767970779 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16298\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:54:51 GMT\r\npriority: u=4,i=?0\r\netag: \"695403db-3faa\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tr6bsGYpSZsg4ydKng7b%2FZW32iqo1d4mKm4EFTFMcGrJ%2BAwkaisTK5bNz0tsan2Ek5vZ8%2FCITtPVBk1HzBmjhIfrUHaqOjgQImM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc43cd5569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16298,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"73a9ec0dcdd297ee6e2ce79a2dd09e19","sha1":"a0a3783b396f49521c24ed087689624e32a9cbbd","sha256":"cbc7e7ea860f2213e7152f9315f57a010c9a701a23441217628af67882b9c73c","sha512":"4f92482a7398115dbeb0dfd2f195f5c0f791fb230cfcc636c5f48f285216a4fa8c0902dbf9eceb8fdd959bbd45596cbe2636e665c72f976b700235eb4a86e716","ssdeep":"384:P4dyVGTWot6HLGKQ7NySgcFnlg+dbUJUZnAQNtX/vyeK+teeCc:n946HqtcSt6+VcQAKX/vzte+","tlshash":"4872d0906847d871722b8c3ed7c3a95b5818cfd532e109c4fbb58821842728ebe4d269","first_seen":"2026-01-11T00:18:18.646721Z","last_seen":"2026-01-11T00:18:18.646721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/image-base64.webp?v=1767961810","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/image-base64.webp?v=1767961810 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27624\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:55:38 GMT\r\npriority: u=4,i=?0\r\netag: \"6954040a-6be8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCPIqZ7S4DtrqmWdVaS7P%2BYritg4luyTfXp%2BHeaIvMvyG9FfxIlZjpl1OHin%2BRmlsohKiX0TWxrWa9R9aSn1o7t41fbqqqqi3mI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc45ce7569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27624,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8be17e95ae0575c0c356bcad5d8d1c2a","sha1":"0cd906d1db0131c1288519c06d6e9043cdc151f0","sha256":"9e5872c9dd630b3c13aefc66df46fc83a142085ea8f0133b1e964c3f22ec1892","sha512":"5f444ba75a87e488b4c152d9f218a41aa8b1ca86e291e8d281afb3dc2f8a7bf61c6ea3c6dccc0caea3a92d301f3b81018a78c04fc92cef741b8062c2bccfa5c5","ssdeep":"384:brXF0NgVuTHVvV/WBJdxDrdgwoiTTGfgJdCv+aMvDZPwzFVAKPcd:bbVoKJxgliUgJdCOFPwzXdPcd","tlshash":"d2c2f117511c15c09883e913c8e929ff7e14d4ef4e98929337015e8bea52e0e6f27db6","first_seen":"2026-01-11T00:18:18.647622Z","last_seen":"2026-01-11T00:18:18.647622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/color-picker.webp?v=1767963738","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/color-picker.webp?v=1767963738 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12514\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:49:13 GMT\r\npriority: u=4,i=?0\r\netag: \"69540289-30e2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d3nrgjapNjU8XXFP1ZEV4JR9oImOdr5gld5S5v4WMEPRareOSUeKhvo0UOfgweTu9iWhJRAqTD51IZsN1WQCs54yrnuN49rZ71g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc46cf7569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c804b1c4efb0ffc970ccd37df119b5a9","sha1":"85215d4fbd7b15ab45d7e051d30554bd5fd45c3c","sha256":"dd6c310f4ec4f45373ddfe1a27d4095a7742f4e55c45e27f7162f2345f51fccf","sha512":"3a751432e4d4696b126c91f1e6eaae86dd37a6ffbb91aa2334834d69270f28bcd994e2f37601b19b42351f7ac2691235bea76ea6fa6e20d34843a6e2bfd4b845","ssdeep":"384:Prw7Tvr2hde9vxNM3MuhVW/K3WMuxEYd0hv:0PK69X/KzZYmt","tlshash":"c742c0f144fed48b625148bb06973e2ec29475411aa3aa1d2d1bb7b39bea43234214f2","first_seen":"2026-01-11T00:18:18.648533Z","last_seen":"2026-01-11T00:18:18.648533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/http-header.webp?v=1767960480","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/http-header.webp?v=1767960480 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23094\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:53:55 GMT\r\npriority: u=4,i=?0\r\netag: \"695403a3-5a36\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkA5wq067rakm87tKojfii4MFuwLfiA%2F%2ByT7q3LCgiVycZCbFahXeEz3XX5uNDY1fQtewXchsprtJN1jHX7nfKyFooeb7POCkQw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc48d12569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23094,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca5682a0ba8c80801ac55124d63302da","sha1":"4d953b1caf5c50899fef1d79c24ff06bdf7e1906","sha256":"0e9b7920f6ed0bd76c6f017601a07f302fe5477b84d31369ef4507330bba52ae","sha512":"5dded5d557e29a6cb57dbd925f64588cb59ee93a14325adf30b30f0b6170d2dcbd1b0ba16ad71c2bce6f8e0bb3f7c7358aa5e37fede4f8e229036cde0a41346a","ssdeep":"384:Y9aaXYk64L0ORZkY6xtqtg/weRxyJDF/k7daRmMOjg2KGAgRx1wLQ67cfqGC0:Sah+06KYLG7yJDVRmMOjg2QifQTq3r","tlshash":"34a2e1d5ed0d3c6df60ffc9c9fb5e152a29a4e9539816b30032abb02d36010a52aa1f5","first_seen":"2026-01-11T00:18:18.649408Z","last_seen":"2026-01-11T00:18:18.649408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/url-encode.webp?v=1767969731","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/url-encode.webp?v=1767969731 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24068\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:48:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69540245-5e04\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y1Fcp4UpQLCKvyint3gD056XigcznkmP5DPbVm6bEBOHXnrNaag768izylSqitfpA0ojzuwVxOb8pPqmCMgN0mSSntOHi6QjiJ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc45cdf569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24068,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1c9abc37a5a2a1456bf8efda988e49da","sha1":"32a0f6d8f38d848db4fdf60df7d3d05197626af8","sha256":"6027f74fb6c91e140e72b7861e1439cd21e49a68f4ffacd3b371346a4af9614a","sha512":"111e7d76bf3846a3c93c5f2d183ea436832ff8ee7b46b7eb41980b083a2b9bbbbbe60d84f61a7bff03ac87ece4c4a678177692389bae5ceabeb0581b4632be90","ssdeep":"384:a8xaJ2dHbfwTB3U6uDZgBSt2NHFh9647Mpq8Z8iTxkmyvwS86tAganHYVr2Qijqq:rxQ2dHUGXZgB/bUVpq8KdmilcXHAr2HR","tlshash":"36b2e137a06c257873f7adb7a88dac12dfdec8344091bed2c464653a6462a744d3b72c","first_seen":"2026-01-11T00:18:18.650724Z","last_seen":"2026-01-11T00:18:18.650724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/timestamp.webp?v=1767953854","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/timestamp.webp?v=1767953854 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34830\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:48:54 GMT\r\npriority: u=4,i=?0\r\netag: \"69540276-880e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XXd9uAct0AyCRQEbLVGKB89C71BVT33U9rV2RHhlYeTPfT5Xpa73Az1c5OZq6H4jtvxPTynG2%2BrqCrQk14S%2B6Z5wwttSgrw8zgY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc46cf2569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34830,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"54596c51be252f83d5ee8c5bd8642cdd","sha1":"05160de2263ae0fcde34da4db564ee2423e3e5c1","sha256":"1b14dd0b1cf5233e053d80a0ec66438957c038f4a5ea1a3717cf946854a8d70b","sha512":"c556d5638602b28d7cb1a707d029d21c56f0a4d9c56564346ad80cba87abcbde726a619bcedc1188d43eb9bfdb325346873c8e463a204dcd078d2146bdd632b0","ssdeep":"768:p5oTeU/v9xXGlEccrDQMQT+Az5zrqPNy8CMIpXJl:wTlv2lpcYhT+AtUNtIpv","tlshash":"a7f2f1e0d3a1ae79c40ce76936013a8cff57611e82560abeec0504d7ec9e19ec4d7965","first_seen":"2026-01-11T00:18:18.652191Z","last_seen":"2026-01-11T00:18:18.652191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/ip-query.webp?v=1767968502","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/ip-query.webp?v=1767968502 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17464\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:53:17 GMT\r\npriority: u=4,i=?0\r\netag: \"6954037d-4438\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fkiIu3XNWZ4By26NSwLYEbW%2F4H7Ukgguf2%2FjnfQ%2BIS5UACEBwTSBcqF4xXNRGTptM%2BRzmPyQt%2FunwnhXd5nTA9zjbiElPGPyIw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc42cc7569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9f7ee8ce0cbfc280d93c30f9e246fb0f","sha1":"27eca9f08e41503809d3d7840371f3bff6332178","sha256":"8170704b3035361c8f0b4b32b7f19e39dddf47347c1ca06e7594bccfc0c28581","sha512":"c887174e965c40d5a6723e517f585e2a4a1cf93bba13f47fdd1d48cc6a6c405c51ad446a4303d60e4225914db014ce7e30309fc27d5ab8eddffcbf6b6f41dedc","ssdeep":"384:G4xL2ylgBYLyCTSMpkC7O/pV/VIrTYCfKwANkfyLw9CYLi+6AF:G4xywJTSLCC/pV/VazByLw9C26AF","tlshash":"4472d0ae3fc371b2c0e8319acf038dd4e53cd063a56545a868d379b26ff7640a421569","first_seen":"2026-01-11T00:18:18.655773Z","last_seen":"2026-01-11T00:18:18.655773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/html-escape.webp?v=1767963095","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/html-escape.webp?v=1767963095 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18620\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:52:28 GMT\r\npriority: u=4,i=?0\r\netag: \"6954034c-48bc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3cg2miXRsrQnNsHRmdkgBRAx7%2FHymBtSc3FM5uiAWSUQ79G3fh5bQjnLMKTnD0FDlBiUDJjxYbqiu7%2FGbUju7i6wOWccpvC%2BsJ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc45ce4569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eabc54f941a0b630641d23ebf5b7b784","sha1":"a2d45c87900e8add1b3ff7cf3c0b4825e6a3c74e","sha256":"b1c00b6c3ee621a739255d38f9dc285bb54a4de1b4cdee65dfbe169bb0296d65","sha512":"e269d0700fe8e7cd6fb1c9bf77049c1a61c1bd2e9ea37d01eaef53bfc00d131a7529fa40a9b0da8fddc5aab52cd9acad2e977220e84b059f4967e019baa82aa0","ssdeep":"384:d/ZbFnxW8iFdEviThmA/HKKpSzVMYbiyKT70oxZLLKqviIpwwDh:d/ZbFxbueehmA/Xp0GyKTHLDi6h","tlshash":"da82e2266013aee304095293df7d1c27e2f44b55233bf4f1c35930ff39ca69599506a6","first_seen":"2026-01-11T00:18:18.65679Z","last_seen":"2026-01-11T00:18:18.65679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/json-format.webp?v=1767960813","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/json-format.webp?v=1767960813 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24642\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:48:25 GMT\r\npriority: u=4,i=?0\r\netag: \"69540259-6042\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZCzI%2FAXvGZ5UzE2u62bEKxRsV2m6wVGz3Is49%2BXDADz5qoE0VxwTEpRctWuIDKnk7sSi7BjsLhC1BHvuWrRyz%2BYQF3SHXBAQkOQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc45ce8569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24642,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b84015305921d2fc555bbe0794359dd0","sha1":"8d7193f402a53950d9bb00626e3c8831171b715e","sha256":"e6b39db1092c90c427bc7dc15f5a9e84f5eb222ccec061fda4db22e0cdadff3f","sha512":"8ba2a80f620322bd86487108aa623a4c5ada26be4e7ff3ecae074909b010bc7c8e11854d08b6e424d556bcf30561d44ab0036592b5a86be1a35732b209d3cd4d","ssdeep":"768:jpJsVcfg2r2jILaISFq6drwrmJN0aRJS:jHUl9jILPSA6dsqJN0aR","tlshash":"6fb2e1cd2b610a890197f2244abd3d98b635f535f413c0deafba84944263f1a588317d","first_seen":"2026-01-11T00:18:18.657895Z","last_seen":"2026-01-11T00:18:18.657895Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/case-convert.webp?v=1767948907","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/case-convert.webp?v=1767948907 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15276\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:51:09 GMT\r\npriority: u=4,i=?0\r\netag: \"695402fd-3bac\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u06E0EkdDTrZcM8BUTq1uS%2FMIJPr6j445UZXsN58EqGMuQpJMtO8DNqTJXJ2%2BLwSlC8v73BgLn2oQkOlzpvb3Z4BFyUGgz%2BsJaA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc47d06569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15276,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"91f093dfbefb1ae23aea60bf7dc24e97","sha1":"4280e78b632ca39e5922e01665237420f0af5006","sha256":"8d34857813a956fe470771c7292b11899e278f6ae753b76b735d407c584bfe0c","sha512":"2966e16661b9395319e9b8cd186c2230b59bff804b163c2d2334ab696632fb1f829b1060e30fc6f0354d9e6aff5a0e785180e2b5e68f302ff87f8323c5d62e73","ssdeep":"384:5x9Qq2PvndIByyVyGyk84+YTv4HTxY5sFYQKiLN022jFf:2qqvn60iyvYLYW5sFTKiLNN2d","tlshash":"f062c06ff2a2ebaba901d63ca603046e75d59c00770a537b20163a3d891522b1993fe9","first_seen":"2026-01-11T00:18:18.65891Z","last_seen":"2026-01-11T00:18:18.65891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/text-dedup.webp?v=1767960304","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/text-dedup.webp?v=1767960304 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17254\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:58:15 GMT\r\npriority: u=4,i=?0\r\netag: \"695404a7-4366\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AmvlrnccUA4%2FgsfzWIuelr5l3LuiDFmPMVGhWCncyMzVYbhLMjxRLChiSBwF2UiWyBvS8WK2wkG0t7xxi%2FJVBI1B%2Fgp3JHHTOmw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc47d0b569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17254,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4430dbfd8a5883d31a27c68cd7b51ac4","sha1":"16cea21d6a817aae263a0282878a88258b3cdf69","sha256":"f5d555f25b906f92efd8eae996bba506f4938cd9d0f1642800ed21aa5be3af81","sha512":"96c99e04090a6fde0ff1308ae8ceda78afb77bb1cf8f3cb6ddac09b5c695d2a74819aaf9dcdd3ee708a0410058916b7b138438ab3c88e21391d97617f7d68466","ssdeep":"384:tg+55iJKgTuglCwWvorO5Zj97Ybi06Fws2WFVffSaM:uagKq3WvhXqb+VFzM","tlshash":"4172d03448acbfb899e0eb3c834f45c2d49b9ed0023d3755d6bf5b62b5c426b40ae486","first_seen":"2026-01-11T00:18:18.659683Z","last_seen":"2026-01-11T00:18:18.659683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/favicon.ico","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:51.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 04:29:28 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5wAqYNtWobY69NYN5TTWV5FMJy7M2rRCjSwXbTvMcnfYjTgBWDYZ1RCpWOnp5AFtqKWtBDfQEGccJqwwTc93%2FT5u5BdRO0JomGA%3D\"}]}\r\netag: W/\"6955f828-4f0\"\r\ncontent-encoding: br\r\ncf-ray: 9bc03bc77ed6569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"83fd44f844ee165952f89165392a1f89","sha1":"0e1169ea5ce2fa829ec4fafecd95aa46e81ce2c5","sha256":"55c0be2fc4ed3416f6c6049e328e595d452e3e368cde8c8008148a15f8704cd9","sha512":"18a3169bd65ecbe00c1c1e7309f4cb9422aaaf1278fca373bb2e056050bdcf90af650588be453fc3b7d277c10b228379e2f6d71398dc7aea477d7316a49052ee","ssdeep":"","tlshash":"b521c84f56e291fdc1b822346d092d00eb272c2427bb750628278019a3d3d300c82bff","first_seen":"2026-01-11T00:18:18.661645Z","last_seen":"2026-01-11T00:18:18.661645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/themes/default/style.css?v=4.1","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /themes/default/style.css?v=4.1 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:50 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 08:57:14 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"695636ea-963f\"\r\nexpires: Sun, 11 Jan 2026 12:17:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8JwGRpPgzX6Ia7QIzXtBKRVUF1vLS%2BawBG03Q1Jft3r0grx%2BVn2w1xbxDJXlQAOIaundDsBw8%2BrUQx2Y0CLZZSJlYALz%2BlZycs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc28bb5569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38463,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"cee4ae37024cac93117aadd931109942","sha1":"e320c2c4de7e74c8b514bb6aedbb15fdc16885b2","sha256":"3e77de4afbcf8aa00850c4971d088ce27712649f49d15cab92f77f2d919e5f43","sha512":"066c74330a1bce00b0eb19f047d910c18d0db8b267d6c8c1f26c68a6cad15bb18ed759b19a6dd681c5e7b08bb961999bda61981442f159bb06d7cc3973f6597c","ssdeep":"768:Kky3MnllovCkJUqjhoHMYlQpGWq3y3KZUqriTln:03MnfDkJUqjhoHMYQMWq3yufran","tlshash":"a00354989a731841744b44686ba7a7d4327c8047cd4ecd7c7fdab3148f8e399b4a2b9c","first_seen":"2026-01-06T10:49:26.409666Z","last_seen":"2026-01-11T00:18:18.662616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/md5.webp?v=1768035487","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/md5.webp?v=1768035487 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17346\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:46:55 GMT\r\npriority: u=4,i=?0\r\netag: \"695401ff-43c2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oNYmcumGOlCIqi5WLNjnBTo0JCTp4xvQ%2FC7q4sK3CKtiEcmNnrshvmcGbHXM%2BjY0lQVQR7HUmacTytQk8P2HhGMHujsUfcWPQUk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc43ccf569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17346,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bc8171827b782f483a9d720d23bfdbe6","sha1":"8f8f608323523ab0022266b0d8ff089700797ed8","sha256":"daed751e0d80a50271dc0b043099f708b9a3d5207f36a218cc57ad2937a1a554","sha512":"2dcdaf19fa480045be20d1e320c7a83e929617a071ea6afd351be69a6c63c982a4ce96275d07e0d3ac052b04f4fa6e0b4f27d62c291647a188f4866966a3eaec","ssdeep":"384:HM0IOHOixFSv16psvVNFlQEX+Uq4q7BFf2VZdJI9vczTMf4xkldC+EyQp4wA2Coi:sH5OMNbFlQfN7WtJI9gMf2oETp+oc9","tlshash":"c572d014a421fa31db5a895ce5519a3a07cc2f1525b8a6f0f19ca6305de3ffd3cc91b2","first_seen":"2026-01-11T00:18:18.664568Z","last_seen":"2026-01-11T00:18:18.664568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/word-count.webp?v=1767961251","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/word-count.webp?v=1767961251 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19966\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:50:41 GMT\r\npriority: u=4,i=?0\r\netag: \"695402e1-4dfe\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBLiv%2B7wEIoD1Vyccy3qZIx8n4DUZ37CBZ1PO8o2%2BtQVtlfPwuUKEuirnn9r%2FMYpOmMl6lwr4J4mW2FeAS75UTvtvznIf3HQRBw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc47d05569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cc75da6c1085e63eeb114139e1a3fab1","sha1":"e1adb731036b153b56b7af4fa905c6c538edb4d6","sha256":"f40d853ad63ee0bfcac6767a6a5f8db84a4b7b73bf50732f492ab9a624d4e116","sha512":"b0e32bb1e474e8094d2507dd24c29cc332bae9271fa5b337f91e4150ba6a264689d6c7b016e1779486acbe18c6f6013821b23ffe2a5360bdd25f6c4360f65aee","ssdeep":"384:8BKN7Jbd+wE7YT/V89JbgwPVpVtHkBRaKbVzwQlgAq36Bs1+EebA99mH4B5UeJvM:8BKN9o4V89CeVNHkSQVzikVEd8y5Uet","tlshash":"d592d157faab2031ee6894f5427f4af1df10646718ff97ced46882661b0ced25c36900","first_seen":"2026-01-11T00:18:18.665603Z","last_seen":"2026-01-11T00:18:18.665603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/regex.webp?v=1768035488","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/regex.webp?v=1768035488 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15252\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:52:49 GMT\r\npriority: u=4,i=?0\r\netag: \"69540361-3b94\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDvGEylsJHcMMur7aqNtuIBgAST4TyVBwGPuhbdNpxJJUDJbSZuZusGcG9lUjy3vWQomTiSOVeCDVDxceZcX26Sw0wO9tIOpazs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc47d0f569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a3df5dcd1bfa74d358d4c329328bbd0b","sha1":"342c4add45768f7e9e355f67fad5a6dd1f702772","sha256":"2232074bf1d5171edfc7820353e93c608fff14e0d9df68bae9404dcf70039e3b","sha512":"11c9c55a13a02190b6e2da53dc62f1c7cc3d8376280802e36408f08e466f0671d580e0f68328c8b95f94d15d9937cea7ba2a228dfdbcb1ec8b6b7fdeade5ba45","ssdeep":"384:5k3uqz15+5juSN3zce/c/6RRYs52oxUrfZuEXrO:5k+qA3zOYKu2oxULZuWq","tlshash":"6262b012859e3da2d267a9e356221c827eab5bec3a4775b53c133e14a30235c4f523ec","first_seen":"2026-01-11T00:18:18.666996Z","last_seen":"2026-01-11T00:18:18.666996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/image-convert.webp?v=1768042841","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/image-convert.webp?v=1768042841 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28338\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:55:12 GMT\r\npriority: u=4,i=?0\r\netag: \"695403f0-6eb2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5B2dT3sa0h9TTJL%2BGqr8yWwf5zcncOlgAOXiHsTfPmgboNhYgpzx7rL41b1%2FuZnBuTt4i362vG2j%2Fu3DW%2FwyJswxqpcfONma%2Bs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc43ccd569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28338,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3cfc2d72201a87d7ca2d68f540a19da1","sha1":"08a27d032072e9f9162fcb1c252ae83e200971ef","sha256":"56d8d727ce9a7c39e6a3adda46148ab60bf09ffe07b115972a5c43e5d296e8e1","sha512":"4acf17f790d1f0e3571595a872ee5a867c904f6bd96102b8fc500e9776aea71156705f4da18345de4b32056ea3eed75bc6693e9b720a155c2c015e1848207061","ssdeep":"768:u8X2eYkiX/S45djwqZBF9kJGskZg4pIXOqT:F1ipdjwgcGMPOg","tlshash":"b5d2e1dd3b5b21af3ae1f40f20d032f585cade366b2dc76e169d9d32a64b0a04ec0514","first_seen":"2026-01-11T00:18:18.667899Z","last_seen":"2026-01-11T00:18:18.667899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/js-minify.webp?v=1767962131","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/js-minify.webp?v=1767962131 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14890\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:56:22 GMT\r\npriority: u=4,i=?0\r\netag: \"69540436-3a2a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgAbPfzbInIO1TBQNhhpvs46wyP39qoeBzXto0HNRAQYdHLHe3bRM3Irh5LIFG%2BxQI3L9xhvOPLecutLBDBGMR8gWmYvd2RrjVU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc46cf0569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14890,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"624b911a8ccaecaa7f7b2571dbe79704","sha1":"1138043412639eda6a2f308e340ca29bbde0f3f2","sha256":"907ab9563b98c02a3c8d16ecbd515e3f0e02aa1bfc728109d5baee501e760360","sha512":"bfedb62cd304b438f15477514087ace685226f8994e7bac4647cda92c2ff330ac2e9486de64ffcde8a8fa86f4ea7afccaded002092f5436dc0b656d4062e4f12","ssdeep":"384:Dv9VsJzqKXX/5CpZyisE+Pq62VwXKCyxRL:Dv9VsJzZXX8wB2VMKCuRL","tlshash":"a762c03aa0fd6b501dbaa52632b521855f00cdf129c2dc231e0cd78fa4cd67d794de52","first_seen":"2026-01-11T00:18:18.668902Z","last_seen":"2026-01-11T00:18:18.668902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/html-minify.webp?v=1767958646","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/html-minify.webp?v=1767958646 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50000\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:56:44 GMT\r\npriority: u=4,i=?0\r\netag: \"6954044c-c350\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P3VYA3Vri917Hh2q6gHNyeyigzQpTr86hal5yi69%2FhWNeC88EruHryMgZ9iwvtYzYMTcPK260nzQ5hyO1FQKReWHouVBzl%2Bo3bQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc46cf1569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a10b79ee6e71933feb1823e4216cd9bc","sha1":"09b296dfbb715f752ca66615afa1013e11df2a49","sha256":"7c6c590955933dec55aff16333faa4995b0a7d3f581cc8032694876d6a3c3afe","sha512":"ae360594aac38204ccf0873aa5f524e0c5e8c562cebc4d97930c4cd988f5a3ada9c6433c6718b50666c879a4acc1b9f903c675ff671cd2252a3de484f4a723fa","ssdeep":"1536:4/SjT23BJq1cIvO5E0eM21xrmNBMtsA3Gn1:cAcBJbI25E0eM2vrSiWx1","tlshash":"1923f2de21aa0cbffdaacdbb65b018cbceccd133ffabe8151a35524969055c520584b1","first_seen":"2026-01-11T00:18:18.67109Z","last_seen":"2026-01-11T00:18:18.67109Z","times_seen":1,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/qr-code.webp?v=1767957146","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/qr-code.webp?v=1767957146 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16108\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:49:32 GMT\r\npriority: u=4,i=?0\r\netag: \"6954029c-3eec\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wJaDlrMrSDT1dh62tPkTm0fOTTUXxbdMzw78cU6xJiyK2bD7SnMq3j8%2Ft3tki731k%2FzMxoW8FFYhBCeByKDAp2XLB0XPPaLQYXw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc46cfa569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16108,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eb0b3d1dee7988c17a6e1d37e827aed0","sha1":"404b1b4b1debfcbf54c5617a6d91505b9ebc2c97","sha256":"b9d56d5fd204b4f91c4c707f82b1ca192deab5051a707c62d6585e16f04741f5","sha512":"fe6917782dd194a7ca93ed717cc7b5d95d18b9a529b0ebbd117024bfd471f16a71ab33e42359e327b060ff093779d12e05cc392d3896154a3446683b22bb8329","ssdeep":"384:SFSJ6pO7jIqJJ2YOsp5CaipJ2fR38+iO90hRR33cgyp:o46pO7NJJ2/splK2fpviOknFW","tlshash":"b972c103039507bf2c2fc1f2828bbe77d57a55f95b261a4554e8f1e802232fa5d31275","first_seen":"2026-01-11T00:18:18.673167Z","last_seen":"2026-01-11T00:18:18.673167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/uuid.webp?v=1768035488","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/uuid.webp?v=1768035488 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66602\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"695402ba-1042a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S6cXGkcS0oDTW9TEaMAGNLYmfmTz%2FfJ%2BFyzYOzfsAFsteSny72%2BTe65ghJNn0uP70YTe9DUmevCMY3MlaVKunTWKmrD6gCuHcIU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc46cfc569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4c0d39d8fe7a545ed9d573f520346974","sha1":"78d2a95de427dc0a9b94c4d94b7577cddcb8b6ec","sha256":"e5972495643da8d18c1beb029ae6b5f50d8a2ab1b76013a43964b02096ed9d52","sha512":"a7bb7f5d7bc4d860845442bb50a0866435cf2a41a4adac4dc244471224fbe50c397bce49489cd166fd75674216c1b6e4e523bcfd89087dc12454078dce96c68c","ssdeep":"1536:xx7NrFdeCRmzYu3y7WA0F8TX0i+Cy0tfecvocfI1nZWrZks3P4k7ha1tEQr:xxJrFde4KYu3MWPFvJ09ecvA1Zo93P34","tlshash":"325312ed57a1a3b4f3c576ff0beebc076169b5010839a1b0d388183547ae28458c9a5d","first_seen":"2026-01-11T00:18:18.675092Z","last_seen":"2026-01-11T00:18:18.675092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/password.webp?v=1767959480","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/password.webp?v=1767959480 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11372\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:50:20 GMT\r\npriority: u=4,i=?0\r\netag: \"695402cc-2c6c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IR0loXBFJIAsCLBw0qPaTNMtaJS0v6obvRd6pv%2BJX5O5l8ZA78tFKry11Qzk1wLZnExPnpF8XWHXNaWYL%2F0sblBomrAiRvIKqKc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc47d03569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11372,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c3eaa4ec49d29d41488475ca013a64ea","sha1":"927d7c5e9e4cd8159ccdce7f8c97cd2e40528cd1","sha256":"cec5db9a47e4dc98de65681a136d2131ad4c4c4f570caa85712a23c221960fec","sha512":"4a681757ae187dc27d38c336702c5d702806e12ba11ec0d264f80bc92ac8683edda71ebcac22909a9c5d5f3b8f5a3e9d743cef6ffc49ab2f8755ab7ab78edc1c","ssdeep":"192:g8WoVbSYo2YKd723QfUwT664692px7ZaiUCh7RTUXxiqVT0wJYI4xqm6H4I1A:g8WDAY8oBwT664692XoizdwXxiqV3Yx3","tlshash":"2632d0342eae820e9c70cd31520b90f6845c6482377e7798a7b54f43e9f32363bda561","first_seen":"2026-01-11T00:18:18.677728Z","last_seen":"2026-01-11T00:18:18.677728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/markdown.webp?v=1767958409","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/markdown.webp?v=1767958409 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16506\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:51:50 GMT\r\npriority: u=4,i=?0\r\netag: \"69540326-407a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ksL2HrA4bND75r0p%2BVUQREw6UYA0REbv7Drqvcg9zDxuQMH%2Ft7tpqpmblZTGdnAI0RTuYOXJNQ4ybP7PErdfzbs6D%2F6sJZuzaD8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc47d0c569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16506,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9741b4cad2110590f80a6c7f687dcc99","sha1":"390d40ed9e856ad9852c74bb8b0a0e07b420cfc3","sha256":"447d8e6d0eb16b0c41a996df99dd1729e1bf47ff33d5f9b2d62101c113823c6c","sha512":"e1d0b54ce301a75fda86af1edc78c9c8841b6053dcf01a4cd33b018aebae5ee9dfbd1c7daffef4ed64473a6f610606cdec223e7d6bc97031fd8b1b1fbbede179","ssdeep":"384:igz618Ix9N1v0wTsJXp2/exOgHWqrCZjuxfMTKpdbDGd8:Rz618uqGKOgtr44dbD3","tlshash":"0a72d010d7a8e8f4770188904ad7d91bf3b9b8aca3b092870cf9be459d3f06859465b7","first_seen":"2026-01-11T00:18:18.679103Z","last_seen":"2026-01-11T00:18:18.679103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-11T00:17:49.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u3RIgGaMTUn3WxhiG54sdQulaNKxIXrpkicA9Ql1q1oTqqhmv%2F6k%2FUZByTm04MKoH4WDfJerNRGudMNrwxOLwqKqkmvvG40qXM0%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bc03bbfcda55694-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87108,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (749)","md5":"35fcc0746cc21aadf54b809c0924aa58","sha1":"b4c676c696c20e07dc2f8e98bd77c232073e9106","sha256":"5af583e2085d6d685817af83ae84f8e0501048a81aa3b5fe58a64f9c3a226235","sha512":"275f516a68c8c93064a4677de1c5372967d42d6940b5627f9952840a7e2c99fe3687cb6cbfbad8f55f8cd400177b235cdab3a2bd0144bee6f98438ee5f683a80","ssdeep":"1536:OzTaLBhbdwNqF6+n6IGw1mVfqnsxw8ZlAioaQQ50I8F1L41ha7:OxNqxv7shC7","tlshash":"58831f72d0f5387b129681951db1372e3eb2c047d69f0a6435ac5be86feaccb842725c","first_seen":"2026-01-11T00:18:18.68044Z","last_seen":"2026-01-11T00:18:18.68044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":271,"dns":252,"connect":1,"send":0,"wait":261,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/themes/default/common.js","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /themes/default/common.js HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 07:38:34 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694b987a-1387\"\r\nexpires: Sun, 11 Jan 2026 12:17:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZgiA3g3HqvqVaOP3wsdVG2a1PYUDOeavZH9C%2F0Kv780441Y8uYHqz1sEjCK7AF5jf0xU8wTp0AluUjfNGaJUNYYdQ7ZKBYuc2g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc28bb6569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4999,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"6406c44013b6faa6e7aa007dabb02641","sha1":"6747e437fa9d52060e68d26a4b0947b46746445d","sha256":"a847727044bc779929245c1f522f61d2187fa584c2a0c836e998816042236f8e","sha512":"a5404aafa79b736abdd1ce3dbc80f530647de7d6598d68728d4954c72947bdebb3209e30dbf75f780bdca917c6b29f9e4d9ccc60968d1a37abbcf88a323f52cf","ssdeep":"48:3xGQQu203Sn3NynhM1dLH0u4bX8XFFVeMkCusNy0Dl2R1lNAZZpkdbPfKPNHCU:30/udu8M1N0u4gGMkqNqdN2ZpkdbfKPx","tlshash":"49a19659a43501bb417333b1a78b4545fa3b107b3002914a3f1c9f1a2fb9c597a61eee","first_seen":"2026-01-11T00:18:18.682032Z","last_seen":"2026-01-11T00:18:18.682032Z","times_seen":1,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/sha256.webp?v=1767959356","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/sha256.webp?v=1767959356 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13020\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:47:25 GMT\r\npriority: u=4,i=?0\r\netag: \"6954021d-32dc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CkS98UNZknr271XFBdH42E0pV%2FzlIyzD5iVNCp26FzqyX05eko2lIhQjh90VJjYtYBgdooJoqNiABBRbBq5xYN57tvK0q6%2BVxoI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc42cc9569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13020,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1eba44df1674326e662c36023ab960ff","sha1":"092dbe92608f2727cc034e6f05cc16a872ed0d42","sha256":"d359b7ef3af31235d7a9f889c443f983a461b5d75d4e9866632648ac939f5abe","sha512":"264d4e4f225ca13158233f66f05ce5d517e218ac8970d4484d9b15d547dd690e9798c5c45a789c9ca3530fda9b877fff699197f90ef776234ff1ebf52db9666a","ssdeep":"192:xWrsjFazDg7N3SINK+vd8y7/aCS/uuH5VIV9Zg8M7qGSWhljZuMBfcRQ5jGBG5:orsJaePNKy7/rSmubK9x89SWhljBcejv","tlshash":"bc42d0c74d17a33b5b09e2a1c3a983dac7f71825c771076169ea7a114dbc3ec629e1e0","first_seen":"2026-01-11T00:18:18.68343Z","last_seen":"2026-01-11T00:18:18.68343Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/css-minify.webp?v=1768083362","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/css-minify.webp?v=1768083362 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10840\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:56:03 GMT\r\npriority: u=4,i=?0\r\netag: \"69540423-2a58\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8aUhP6O9Cb6128ZiRmMyrQ9cR4eVi%2Foqwx2KR%2Fk5BJQD8OFSbBmQup%2FvVxfwIunuQrM8cGYKZGsyioQk6jpRI9zYGZeZ68OXt0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc45cee569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10840,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b4446f2bc5f51ed0ae79b2c5f752787c","sha1":"6963af97bdabcb9c4f281cd422febdc79332b601","sha256":"d526237dae7c404e06398609f85b0c88bfb289b3bb6526ee8965529e6d6519fd","sha512":"e0ba3611338960465e271d32a952b4cbe6775752aa62d71b676e883fcb3ede43b1aee61f373fccdd2ad0239fa1354c098f82492a986ed4ee6eefdea290a23823","ssdeep":"192:uYIEINMkkNNyKFLGWn4cqlQ79prerNCI3FEyijeX9BKOAChQsijC:uYUqkkNNzFLdCQ79prYNC+FEyiaX9zAg","tlshash":"ec22c0b2866e723fc4b6da89b529f875d9cd8829fc26871c736cd99782840c7d20209d","first_seen":"2026-01-11T00:18:18.684637Z","last_seen":"2026-01-11T00:18:18.684637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/number-base.webp?v=1768084281","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/number-base.webp?v=1768084281 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 70794\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:57:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69540461-1148a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lv4pk%2FmQgQeJEBAwiw6OoSyJV3Y%2FG94EXDDGgJBNxzQGbMwTpCiX1jxDt3PDg%2BRxYNfIs1nFF1Q8qO9ztJxAPl4oN4p8K7LsEbc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc46cf3569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70794,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dcd5d6005176f0343feef1c875b54493","sha1":"63efb3bbaff5ed66d245e0ab0a1e8791ddc3b0b7","sha256":"9c4bdbd58aef05a8861d6d31abddd4255c1ed95151f3033732b3f4b685d1ab06","sha512":"498c713cca5d5f29457a52b5eaed267907108e08a7382651324bff9cb34348860d5344e6aeeeca701cf4e6a2a9bfb4006d53a1f64932fe3cfbd88516600daeee","ssdeep":"1536:v86aifkvKZ47K9t2yelUiTZXLRiYAY2/+3Ug+2rL:v8skvKC7K9UldXSY2/+3T/","tlshash":"1e630264caeb927f1f2597c6542de971e518ee344fd2cbb0082840899f973dbe32614e","first_seen":"2026-01-11T00:18:18.685765Z","last_seen":"2026-01-11T00:18:18.685765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/char-count.webp?v=1767964060","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/char-count.webp?v=1767964060 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21770\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:57:56 GMT\r\npriority: u=4,i=?0\r\netag: \"69540494-550a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zIKEHBmOd8oZsVyE363FJiGy3RtV%2B%2FgfIcwIPbbLYyUUQ3yrkUUhqIxv8AqGqtQs%2BjvCh%2FPVXll0%2BhCGJZFqVHWwbG%2BUb1OwnQI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc47d09569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21770,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cd50d6a5ed1810571daddacadbaab50c","sha1":"c051e42cb785d0db206b164430fe3f44c40b5c8a","sha256":"79f6f5869ef2072f367886f18d4a53f1d2849472a829ac914a195ec1c4d785ae","sha512":"1df07ebdd30b9203548e13ff43bdf2900bfa8bef90d44f7ce54717a0a4958094e4ab1ea53137939dda111f653db940e313235b2ec4baf1bfe1ce955952f481df","ssdeep":"384:SlefjFpEJpxSL9pv5vZC06O/sHJcf28c8Kr+5i4UVO:gEjHEJHSppvEO/Kg2v+56VO","tlshash":"c5a2d0d6f677d1b787348c8e64542a863856511bd20a4f9c3163adeaf4bbc9a0293ccc","first_seen":"2026-01-11T00:18:18.686968Z","last_seen":"2026-01-11T00:18:18.686968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/dns-lookup.webp?v=1768042246","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/dns-lookup.webp?v=1768042246 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26254\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:53:36 GMT\r\npriority: u=4,i=?0\r\netag: \"69540390-668e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVC2HGohYKdt%2Br%2F%2F2t1HLMFKnPo8aCrEDXD8fzyNbivmMGw%2BJq4G%2FlYkwnV3kMKBScKcpyabibjy7Q953klm4%2Fi%2BlVWEzf6668Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc47d10569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26254,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5bfff42a066a6de943c9a70d440b5165","sha1":"f7193c122a6a77c30451bc23f079c47778e12666","sha256":"80a6bb10d6122194ccfcdabf304416ee961e41cb7032e8950b3b8f1fc9ecf74b","sha512":"40e9d0fde8ad1a7131ced0a4f2356d27346a51d53885060ebd94ef49238022b0ef2aa45ff52f45fbd8f6db9f46a75381fc0f37257737f67787325ce84ed5b0ed","ssdeep":"768:dWPYF/4VmGSpEUwLpsuIktMQGVk7bsY9GqzPVH39Wyes:gP6KmwmkoVcsY91bes","tlshash":"e0c2f13688dfd1108e425362bfe3e2717a934bab94059d71ed3094d164b9dc3e083b6b","first_seen":"2026-01-11T00:18:18.692544Z","last_seen":"2026-01-11T00:18:18.692544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/apple-touch-icon.png","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:51.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 04:29:28 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6955f828-6280\"\r\nexpires: Tue, 10 Feb 2026 00:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CtwZmiyf3bwfl%2B%2BZ5pCFmadmm5ubqblirKICazdH3CgDKy2yb6Ya3wDZy2bCjVdBxVOqlcVyQugWpv5W8imcG%2B1rHRvwBfVa%2B%2B8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc76ed4569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25216,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"45410d136a8fbe7421fc37c05871119d","sha1":"e3227a7abed64b23f672f6519172d5bce5fae2ef","sha256":"f2d0c7384c47e10ecc09ee0f80b1e55a1cae890deb07ebcb8c98df5fa3fd1df5","sha512":"cbc7fc3de45361ac18e666fb392e45f0c254cacd73dc1d26ed7a83e7bb3ad7858c1affadf961c2b6557f1e81fdf01550d61f80ba61251728aeb5104bf67153bc","ssdeep":"384:M8p+wKXbTvFhAj36NTu2bbDSrfQz+wuc6K+hXVabzpFIdGGZqOS1D2g2sZnakQdD:kXbTvFh1u2bKfJ3CwdGGs8unyd1x","tlshash":"2fb2e14384e05898045628c154a3e29a2f57f1e452f1f76ebaf99f6b0d328b3333a747","first_seen":"2026-01-11T00:18:18.693533Z","last_seen":"2026-01-11T00:18:18.693533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/user-agent.webp?v=1767956148","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/user-agent.webp?v=1767956148 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16862\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:54:22 GMT\r\npriority: u=4,i=?0\r\netag: \"695403be-41de\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7bZPGRulwnk5wEajxt%2BbCdF4Qyqypjc7zH5Mh8Ku3e9Lmau4Ki6RvVzFnJiou%2FpnRHI4r45LLk8iH8iND6gh19r%2FzfnmNhO%2BnKI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc43cd2569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e38f1293dc61e4fd528504db3379e896","sha1":"51d0f21774a1240ab083f4ab1d96831e8e14f479","sha256":"4048dea91a88d297d2be2b73aa0936ed01d8a8f76a58b30ab7f02242406d7833","sha512":"2676f77673428a3f857897066e2728ac6c795dcc761086f0eb22ad59b69c4e817f0fce098927e83a2f85eefdfbc7508d2174499ce56b46cf8172191e8b0a1b7c","ssdeep":"384:3N0MFSnaOEyQKbdZI9Ls7Amqji+oOlEBACoTJL99LqlUmg:3ysSF6S/Ci+oEsANLqlUmg","tlshash":"8772d0c74f70537ab34f01e6236a893b77e2ee4509872255aec635d526f2f20e7460d2","first_seen":"2026-01-11T00:18:18.694521Z","last_seen":"2026-01-11T00:18:18.694521Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/base64.webp?v=1768035489","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/base64.webp?v=1768035489 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19962\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:47:45 GMT\r\npriority: u=4,i=?0\r\netag: \"69540231-4dfa\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n67hKACZs%2BF4w3h3REcvs2wsXsDTOWmE6%2FAkfsY%2FPK4AR1qtZh3%2FJz%2F9RtOewlu1tDie5nPRuhRztqZOE1CikvInMOIfHWOIn8s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc45cdd569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19962,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07e11c25a899af2a567cd4ef33468b03","sha1":"21c7e88d354afb7248eb3344ad0bbd7fafef9150","sha256":"1a2b114c555a018bf5cc9458a776c5c715757c5f2e6a37eb509d2a6c272b7ac7","sha512":"bf4d816ef075994a7824f32df67405052c5ac0bfff30fe590102a537ebcf38d8756d1627db47b57b76be8c77659e02fe376419ba928f16396f96552d58f58ee1","ssdeep":"384:1s/FUKkPm/gD8jxXf8iGphYMfNGAlJ+IwTu/4ahLP79qjwmWe1oeqqvATaBt:1sGrPmJkRNGAloxTTahLULDvou","tlshash":"4892e12a24c1525cf459e03e1b9be621a184c57dea77753aadc87214f0fc076bce1b85","first_seen":"2026-01-11T00:18:18.696044Z","last_seen":"2026-01-11T00:18:18.696044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitforge.top/uploads/tools/unit-convert.webp?v=1768090366","fqdn":"bitforge.top","domain":"bitforge.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitforge.top/","date":"2026-01-11T00:17:50.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitforge.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 08:30:55 GMT","end":"Sun, 29 Mar 2026 09:26:51 GMT"},"fingerprint":{"sha1":"C5:FB:B9:51:FA:06:F8:EE:4F:0A:43:E1:0C:85:70:83:30:2B:F8:96","sha256":"0E:3F:D1:0D:22:EF:4C:6F:EC:9A:59:F0:DE:F3:75:93:62:7B:0E:D5:0D:34:42:17:F2:20:DD:A5:AB:43:21:EE"}}},"request":{"raw":"GET /uploads/tools/unit-convert.webp?v=1768090366 HTTP/1.1\r\nHost: bitforge.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitforge.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8m77s9ro8s5k84gelonsvgqsdf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 00:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10146\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 16:57:25 GMT\r\npriority: u=4,i=?0\r\netag: \"69540475-27a2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRNECX2MJyotOH0MllzwlkFrjeHsWkjjx8EwW1dOQ65OpAqkULK9UAzg5MHXCL9fo4I6cdd0QbrssPfe%2BQcqFXJ9xGcLUHRLM7g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc03bc46cf6569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10146,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"db09dcc127abf8e4365cf81e1df2cf3e","sha1":"c9318addd2dc606b51922d25f96cec228f314ecd","sha256":"1a7da444eb39f1f7289632820a48f27b4068bc52529dea952cfd7ad361551dec","sha512":"3304f2cb9eb4d645bd252e9e123b61dd78081e6503001d37cbafa666757a8c25a10b4c021bfe17ec13e039250bf46dfe4938752d4ebe3647f35f3fe056ad222d","ssdeep":"192:VJ7quQYjBEBIVaUl/wBs0pZxetTT2OcZZrAITfpjsuKR:VJWPeBoo7g7TxedT5c/rRj1KR","tlshash":"2922cfe60257c73a83d437ede0d3922fdc5964d1d5fc9863a4bab2b3e4d93106206c11","first_seen":"2026-01-11T00:18:18.697559Z","last_seen":"2026-01-11T00:18:18.697559Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"bitforge.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}