{"report_id":"88735c31-40f5-4c94-ae20-77dd2171b114","version":6,"status":"done","tags":[],"date":"2026-05-07T16:32:05Z","url":{"schema":"https","addr":"bybititjue.com/","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bybititjue.com/#/pc","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"title":"Home","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bybititjue.com/","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-11T16:32:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":20,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":37806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.603730+0000\",\"flow_id\":1259927556358634,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":37806,\"dest_ip\":\"47.79.80.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"moviefile.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6401,\"start\":\"2026-05-07T16:31:44.098794+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.18","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":39380,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.611556+0000\",\"flow_id\":1741852951739689,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":39380,\"dest_ip\":\"47.79.80.18\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"bigw-in1.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-05-07T16:31:44.097577+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.18","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":39364,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.613196+0000\",\"flow_id\":1061856549566422,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":39364,\"dest_ip\":\"47.79.80.18\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"bigw-in1.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6401,\"start\":\"2026-05-07T16:31:44.096214+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":37786,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.613741+0000\",\"flow_id\":141522367424649,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":37786,\"dest_ip\":\"47.79.80.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"moviefile.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-05-07T16:31:44.075913+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":37796,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.614709+0000\",\"flow_id\":1600093261161797,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":37796,\"dest_ip\":\"47.79.80.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"moviefile.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-05-07T16:31:44.091461+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":37824,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.617206+0000\",\"flow_id\":1762322765876341,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":37824,\"dest_ip\":\"47.79.80.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"moviefile.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-05-07T16:31:44.101493+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":37810,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.629151+0000\",\"flow_id\":1454386495653712,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":37810,\"dest_ip\":\"47.79.80.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"moviefile.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6401,\"start\":\"2026-05-07T16:31:44.100176+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":37838,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.636017+0000\",\"flow_id\":747357569323974,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":37838,\"dest_ip\":\"47.79.80.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"moviefile.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":907,\"bytes_toclient\":1634,\"start\":\"2026-05-07T16:31:44.103366+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.18","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":39384,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.701995+0000\",\"flow_id\":2042371813466410,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":39384,\"dest_ip\":\"47.79.80.18\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"bigw-in1.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2026-05-07T16:31:44.188714+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.18","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":39388,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.727001+0000\",\"flow_id\":353990104640886,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":39388,\"dest_ip\":\"47.79.80.18\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"bigw-in1.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6401,\"start\":\"2026-05-07T16:31:44.191862+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":37856,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.867333+0000\",\"flow_id\":842400900594400,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":37856,\"dest_ip\":\"47.79.80.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"moviefile.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6401,\"start\":\"2026-05-07T16:31:44.342752+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":37868,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.868058+0000\",\"flow_id\":203979781865871,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":37868,\"dest_ip\":\"47.79.80.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"moviefile.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-05-07T16:31:44.360847+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":37850,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.873569+0000\",\"flow_id\":504288190201154,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":37850,\"dest_ip\":\"47.79.80.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"moviefile.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6401,\"start\":\"2026-05-07T16:31:44.326978+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":37872,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.882022+0000\",\"flow_id\":573797940888047,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":37872,\"dest_ip\":\"47.79.80.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"moviefile.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":907,\"bytes_toclient\":6401,\"start\":\"2026-05-07T16:31:44.360943+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":37858,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.890243+0000\",\"flow_id\":314261657113855,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":37858,\"dest_ip\":\"47.79.80.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"moviefile.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":907,\"bytes_toclient\":4662,\"start\":\"2026-05-07T16:31:44.349439+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.18","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":39390,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.891163+0000\",\"flow_id\":1411449707579830,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":39390,\"dest_ip\":\"47.79.80.18\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"bigw-in1.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-05-07T16:31:44.346550+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":37882,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.904468+0000\",\"flow_id\":216370762515165,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":37882,\"dest_ip\":\"47.79.80.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"moviefile.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-05-07T16:31:44.361181+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.18","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":39402,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.916032+0000\",\"flow_id\":257134297108679,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":39402,\"dest_ip\":\"47.79.80.18\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"bigw-in1.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6401,\"start\":\"2026-05-07T16:31:44.348359+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.18","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":39420,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.978886+0000\",\"flow_id\":876700509454072,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":39420,\"dest_ip\":\"47.79.80.18\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"bigw-in1.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6401,\"start\":\"2026-05-07T16:31:44.442104+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-07T16:31:44Z","timestamp":1778171504,"ip_dst":{"addr":"47.79.80.18","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":39418,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-07T16:31:44.979185+0000\",\"flow_id\":2114514379124620,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":39418,\"dest_ip\":\"47.79.80.18\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"bigw-in1.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":6176,\"start\":\"2026-05-07T16:31:44.438156+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bybititjue.com","ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-05","domain_rank":0,"first_seen":"2026-05-07T16:32:10.103643Z","last_seen":"2026-05-07T16:32:10.103643Z","alert_count":170,"request_count":34,"received_data":9277895,"sent_data":15061,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"bigw-in1.oss-ap-northeast-1.aliyuncs.com","ip":{"addr":"47.79.80.18","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2023-09-06T15:57:29Z","last_seen":"2026-05-07T16:31:58.70871Z","alert_count":0,"request_count":4,"received_data":137037,"sent_data":1920,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-04-02T03:19:28.132293Z","last_seen":"2026-05-07T16:31:58.989806Z","alert_count":0,"request_count":13,"received_data":22951,"sent_data":6422,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"bybitit.tynnp8.com","ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2026-04-07T14:05:48.04476Z","last_seen":"2026-05-07T16:31:58.789124Z","alert_count":0,"request_count":10,"received_data":95574,"sent_data":5100,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-05-03T22:45:14.235278Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s3-symbol-logo.tradingview.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-03-20","domain_rank":110931,"first_seen":"2020-11-23T08:22:37Z","last_seen":"2026-05-01T11:40:41.819656Z","alert_count":0,"request_count":2,"received_data":3548,"sent_data":918,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bybititjue.com/assets/index-50d701a3.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"294676b36732b666409859f9c7af9aa3","sha1":"bdf1a9e73c931d67e37c6e7db17c7f30cc148293","sha256":"4142655d78be62dc3d9f01e55abb743ff04b87837f328fce716e178f30436056","sha512":"613040c4d8f33d417708507f474979d0980dce37881fc35804dc774e149daba386add8eab69b0f8afc2bf04652c0cae1b3e8fcf41773b831ca811d8b7c9d1b64","ssdeep":"192:y9ITFFatFl5F/UsiDlkvbLiBsVlsvb1/uk5ISh8uuLBbcRvnjJ:y9nl5FylqbeBsV2tuKjh8uu6RvnjJ","tlshash":"0e1208c5f2c5a1728bab6885f0e68051a55d4b08b41e90d1e07f9d003f9eec0bab9f2d","size":9851,"data":"","first_seen":"2026-05-07T16:32:05.189444Z","last_seen":"2026-05-14T19:07:34.541601Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/qrcode.vue.esm-190705d7.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f8a17e7cf2788c1d46863f7a872c8004","sha1":"dc2b086441c16aecae2294a2459e8ac8931cd6bd","sha256":"a4100a93d2d863c4fd0fedcc49868d9f4b859725f4d3732aca74e38c6cf65c74","sha512":"98e475e2cfa8606773e996a19abcc82a3fdfc8adb5144983fe79c1e011f2c28e084369cd37eb20a9f25b850e23d1102291a4ff4b442cc6999437ccd633f8015e","ssdeep":"384:6WJMbBZ/jgwHbc+bHno81t8eL89G9aNdBtump098XfUxCFMOPoeovV:6YMdJsGXtL89GmdBn0mfusu","tlshash":"6282e8997254206b73ab9ae84caf240d53bae9557404c8ecbf44e2d27cbcc98513ef35","size":18808,"data":"","first_seen":"2026-05-07T16:32:05.183157Z","last_seen":"2026-05-14T19:07:34.532316Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-07-22T20:55:00.873697Z","times_seen":78296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-4972cb46.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd094c6fa58df5cf125bf6ba121810b0","sha1":"867417e83ffe4c5cb26ede849dcc19ec08ba972f","sha256":"a42179459989310d3e11a99e21294aa14770744042530df1d2d5e51762985761","sha512":"fa201e4f9d64cfd0570e2f5606f0780c72fc225e5f1422d7aeb29ca3134fda91d7ace746fbd016cc8336dac1c324539314965744dc6438b7f80319c948f17023","ssdeep":"49152:SgA/dmxgDCA1YswdsGpI4SeTm+Z6igkkfP9qOc8+5iXEknta2V4T8DBCcwOgloU0:WcT64Bt87l","tlshash":"902635a4b4cbe4a443d7c98454ba01a0b2189e527248e8f3dcf9cc5bbce5975c2b7f19","size":4682071,"data":"","first_seen":"2026-05-07T16:32:05.213834Z","last_seen":"2026-05-14T19:07:34.570118Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-df66f799.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7d893a4f7e15ca60b19c89413c07ef67","sha1":"4c892a65308fe740f97c88bb234085607b33c5b0","sha256":"4a31d910e3a480e0def2d37e4e7cea573971e6e66591b6a9960e885e5fbddb85","sha512":"26cf9901d1da70f5578b332e3a565326460bae304d880405c333858af8866110560486b0183e80b97f6ec3c46ac36f047d2bcbe365861eee62ee8dac452550e8","ssdeep":"","tlshash":"1411c0897643f563431ec21de67f013bd1fce654e42919609f04d2923e2aa3de03b944","size":1064,"data":"","first_seen":"2026-05-07T16:32:05.173448Z","last_seen":"2026-05-14T19:07:34.54057Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/use-id-9f1818e2.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bbecda0114c3b379c6b02da003fce6d4","sha1":"f6cc67f8c7a4739d074d7fda8d622bdb6866861e","sha256":"cda7751b9b53a176dc49d7dfc624005647bb15373560ba6d45ff572478f06d5b","sha512":"744c9d929d5c679a759ca3f3170b75cd9ff4674b949e2e84bb5ecccabd1ca9fa8c71cba6770b8519e599712839bd7c78d674ca5166b1c57d2feefca8b85eb445","ssdeep":"","tlshash":"4ec08c6a744820e22a090cd9e22606aac22a7c10571a99f0f268071609b227a83faf10","size":152,"data":"","first_seen":"2026-05-07T16:32:05.18842Z","last_seen":"2026-05-14T19:07:34.539273Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/jiang-f9e25abb.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"db2127c6f9e3705fa3cd05c5a0c0e79f","sha1":"85f5044740a9d80d0b47b1bd1c7f40498807b13b","sha256":"c58bb9bcf11727899adf9fea3bf3104628a4eaa0e0df0d79bbb1081b4133dc43","sha512":"e4de4e27d9a9561eef35d56376bcf20dee716d8e08aa8a84de2083907570da5fac71c882ecb5b18c4942eee2fdb42f2a5df6d748d12bbe734ec93a02085cc6ca","ssdeep":"","tlshash":"70b01265c80938e347044870793fcd24d04c2056d212c286630b7c16c3104008412d09","size":87,"data":"","first_seen":"2026-04-02T03:19:35.296469Z","last_seen":"2026-07-18T19:59:43.418925Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-7f7ddfd5.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"42b8d66a0ae1b1aca6cba87bb4098f20","sha1":"4668c976db1f880e91bd772035b9252a50c98fde","sha256":"d0a489398b61e9cf4398fe44c5682e7a626d71f341d07ba852887b25b1d04456","sha512":"d9597aeeb8f7fdf4a1fb0c920f5f169ea9ed61346c74d9352713c5967d1b5c1a87e596a164f2c7b4899e2cec4b054ac9ce97d5e2b540af324d329533c2c9d7d9","ssdeep":"192:KB0G0SV36P/uGuN2tgIEZGsT98yg6t80SAQ+zys3pDgtrutdy6XDA9TYUXBrXfAn:KB6y3NNtpUtrutLMLfAC/FPHV/ro5","tlshash":"7e425444e4269efb94a7d5987554d004f00cbfaac232c276f2fc5c227ac1dba0b5579d","size":12487,"data":"","first_seen":"2026-05-07T16:32:05.170392Z","last_seen":"2026-05-14T19:07:34.531781Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"311e1c35db4a102616d71fd60c30acf7","sha1":"c0d74698d4eaa92e2bc6391826598627e9e71ffd","sha256":"891f5b0f18907c6ccf1eb0435a45ad79c8efdae856a07d13b5baeebc074c5052","sha512":"fc8937b791a23cf792cc177186d4a5fd5af352430ce6503a3bb89cd1ef20034a8553b2df81181997ddee3cd530ea814ecc6fa753379e427931842810e88d60d8","ssdeep":"","tlshash":"7a11346a12a4547002abf27d69df9244753540db64082e1cbd1d6f45bf28a3c47f2fce","size":1079,"data":"","first_seen":"2025-04-25T05:33:00.913294Z","last_seen":"2026-05-26T23:51:13.846118Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/loginHeader-adaad4c8.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6bc93ca65c0ea9f4c51ac5e2e74b7479","sha1":"e79b88ef1f130f1316b09a88a910b9b449faf5b1","sha256":"b6252fa64c5995b3d4016a6930ed93af77779e5ff8e886ff64c52bdb46f8671b","sha512":"cc3ee0132e079b11ee671d8f04b9df66cd845bb36656c1a4f207f26a557a78933128eb7aff9cca691b4fd7ada985eeb1cd99bad89bdc41fd62fc6b3d15006b25","ssdeep":"96:UUe7X1NTLT8MgosE4L/7LNiXnpRcVodlWMkXu7jqIeGcWBse:HeD1NTLIoe/7LUXn4odXkXHIxcWBse","tlshash":"e3b1960d74359dbaeab751043038c442f005efcd813ac956a2fc6c062e86d769eebb76","size":5233,"data":"","first_seen":"2026-05-07T16:32:05.171594Z","last_seen":"2026-05-14T19:07:34.514254Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-a16ef6a2.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a3215ff49ceeecd0dd903d63f4ca2961","sha1":"83ef6b4608ae2bbdb4afb3b682e994713b4693b9","sha256":"02f44561aabf4547c5d692c9506ad75608b09902b49a5393880380fe506aca8c","sha512":"2d3acc59724dd47f649fdbfae1e35eab894b866037fdddf3ff568995a0ed2c99e244a516b95df4986e739a58eb02748f350f065dedf843cd7cceb972841bc907","ssdeep":"","tlshash":"06319a466007d6be4d532954391a559cf00cefd8c560d949f2fd402a3bc7ce58b1dba5","size":1580,"data":"","first_seen":"2026-05-07T16:32:05.14241Z","last_seen":"2026-05-14T19:07:34.52764Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bybititjue.com/assets/index-7f7ddfd5.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/index-7f7ddfd5.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bybititjue.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-30c7\"\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd36b01b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12487,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (12370)","md5":"42b8d66a0ae1b1aca6cba87bb4098f20","sha1":"4668c976db1f880e91bd772035b9252a50c98fde","sha256":"d0a489398b61e9cf4398fe44c5682e7a626d71f341d07ba852887b25b1d04456","sha512":"d9597aeeb8f7fdf4a1fb0c920f5f169ea9ed61346c74d9352713c5967d1b5c1a87e596a164f2c7b4899e2cec4b054ac9ce97d5e2b540af324d329533c2c9d7d9","ssdeep":"192:KB0G0SV36P/uGuN2tgIEZGsT98yg6t80SAQ+zys3pDgtrutdy6XDA9TYUXBrXfAn:KB6y3NNtpUtrutLMLfAC/FPHV/ro5","tlshash":"7e425444e4269efb94a7d5987554d004f00cbfaac232c276f2fc5c227ac1dba0b5579d","first_seen":"2026-05-07T16:32:05.170392Z","last_seen":"2026-05-14T19:07:34.531781Z","times_seen":6,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/images/coinex/news.png","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:43.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /images/coinex/news.png HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:43 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bd9d-1077\"\r\nexpires: Sat, 06 Jun 2026 16:31:43 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd7a838b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4215,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 57, 8-bit/color RGBA, non-interlaced","md5":"b4723d43b9f2c51d56818cb0fadea4b0","sha1":"21d33d79597b289679e54d696b642989b6f78723","sha256":"aa903a46aa23af3393436e8413ec43bb0104ccdcad5b61129cbb72f08246bbdb","sha512":"ac88be3ed536430066195bab7b4501025de7360d41520f30a1544caaedec0520c1ee16dc19afda3a80a0816d7dfa7153791184c15af7805a3ceaffd015c63104","ssdeep":"96:DS/knmWInR2S9cnHOsLny0I6zw+iJ4uqdokVRTE76U5nVvRzM4bUe3lL5u:DS/knxukXI0w+iqun2QnNRQ+u","tlshash":"a3913d6bb652948063debd949eea3a82a6032780cfc065c528dd7d0b8d305fd1549bcb","first_seen":"2026-04-02T03:19:35.291031Z","last_seen":"2026-07-18T19:59:43.398479Z","times_seen":27,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/favicon.ico","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\nexpires: Thu, 07 May 2026 19:31:42 GMT\r\ncache-control: public, max-age=10800\r\ncontent-encoding: gzip\r\ncf-ray: 9f819dd27a1bb4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58288,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"b6305f53b4d3432d561eb748f4af25fd","sha1":"e01e5117f6fa0d6b1a82ae3c45839d8097d119b5","sha256":"dc676cc52046a252ee86c463e49bce5b517c932ab100f21cb62e231cb3d7ed7a","sha512":"18f3435e92ce082fc5d52e8c8b3e3186c86bd499afdf405b842d1b0aef771a4d14359bf39d142b591469cc4c4a2016c2f4c6fd646662318cee2ad0f966470b83","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdomx:cmDD6oeFUycwpk06hWp1b99c7Vz","tlshash":"0443021803de40a2cd9978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1ea","first_seen":"2024-05-06T13:26:20Z","last_seen":"2026-07-21T04:42:45.386411Z","times_seen":1913,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-df66f799.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/index-df66f799.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bybititjue.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-428\"\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd37b14b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1064,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1063)","md5":"7d893a4f7e15ca60b19c89413c07ef67","sha1":"4c892a65308fe740f97c88bb234085607b33c5b0","sha256":"4a31d910e3a480e0def2d37e4e7cea573971e6e66591b6a9960e885e5fbddb85","sha512":"26cf9901d1da70f5578b332e3a565326460bae304d880405c333858af8866110560486b0183e80b97f6ec3c46ac36f047d2bcbe365861eee62ee8dac452550e8","ssdeep":"","tlshash":"1411c0897643f563431ec21de67f013bd1fce654e42919609f04d2923e2aa3de03b944","first_seen":"2026-05-07T16:32:05.173448Z","last_seen":"2026-05-14T19:07:34.54057Z","times_seen":6,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/images/apple.png","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:43.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /images/apple.png HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:43 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bd9d-971\"\r\nexpires: Sat, 06 Jun 2026 16:31:43 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd7a845b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2417,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"585bf6f6bdbec1eda2bd4ca3e50407a2","sha1":"0cd8d1b1721b60f6e24baf77e362c4d6a136284d","sha256":"8ce81e85b4a8e8f5cee511a50e6379625821ca86979b3c1059e6858a7dab837c","sha512":"18aaf8586662070a25d979817018a26a1c12e12fbdfe41b7b518c2fe50da7726bb0f5e76d394eed20cae68b7d80106190c5b2dafdde25b4451004db49c63a81d","ssdeep":"","tlshash":"54412a876d6690711dc0817d945f7b4dd954214d3640f7a90cbdc5d92136c3e0947d5e","first_seen":"2026-04-02T03:19:35.328509Z","last_seen":"2026-07-18T19:59:43.374726Z","times_seen":27,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigw-in1.oss-ap-northeast-1.aliyuncs.com/hashkey/1724489130614647498.png","fqdn":"bigw-in1.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.18","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /hashkey/1724489130614647498.png HTTP/1.1\r\nHost: bigw-in1.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/png\r\nContent-Length: 1390\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71BC253031374FA85F\r\nAccept-Ranges: bytes\r\nETag: \"4A0E5E239B274E9EC4A17AC738AB46BB\"\r\nLast-Modified: Sat, 24 Aug 2024 08:45:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3832428648710468520\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Sg5eI5snTp7EoXrHOKtGuw==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"4a0e5e239b274e9ec4a17ac738ab46bb","sha1":"ba18ca71aeb54d5d2b3f197fdf2bb9b7ecbacab7","sha256":"1cb080bee7d509d8ec9e8eebbd89fd838c36fab0438dedf3d178158fff34eabe","sha512":"0b88ef9224480bde1211e74ee3c32dcb9f36b7dd185c1b22871aa8dee3581c04944964c867bc7c83fcc81337a2a78f0d86d40b2501fcb7e85e17a2b07cd2b826","ssdeep":"","tlshash":"f4210be3c3569f41f71e9ee6c1d809e61c24b441b02127529f05ba15dd2cbc4a6e2fc7","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-07-18T23:25:11.735663Z","times_seen":363,"resource_available":false,"data":null}},"time_used":1818,"timings":{"blocked":775,"dns":1,"connect":256,"send":0,"wait":262,"receive":0,"ssl":519},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moviefile.oss-ap-northeast-1.aliyuncs.com/coins/images/202305204405790629188116480.jpg","fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /coins/images/202305204405790629188116480.jpg HTTP/1.1\r\nHost: moviefile.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3069\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71D1811A3537F35EFF\r\nAccept-Ranges: bytes\r\nETag: \"AB0C2954EE766A88A1BADB6799EB5AD3\"\r\nLast-Modified: Sat, 20 May 2023 09:41:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17872567369089130853\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: qwwpVO52aoihuttnmeta0w==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3069,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"ab0c2954ee766a88a1badb6799eb5ad3","sha1":"c8ee624ed9cf794fe0b07fd2d9ab05665ebe505a","sha256":"2b0d59d7451600139011509846b561b9bb74b69d20d323d8e332f1ca9ba79048","sha512":"89707a32dd96713703e5a86dc5041ffc65670b5a0c9a8cc54c3e6aebd48bd72ffc4451cb38467c8ca4afe65f6229c3e18b3797f3a05e99f508e9f0ef402f0355","ssdeep":"","tlshash":"5b514bf9c678c02b5f83743b445c5830912c1be7148138216aa86592fe6e27ded07f08","first_seen":"2024-11-06T16:41:01.006859Z","last_seen":"2026-07-18T19:59:43.376635Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1238,"timings":{"blocked":984,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moviefile.oss-ap-northeast-1.aliyuncs.com/coins/images/202305204405790113750097920.jpg","fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /coins/images/202305204405790113750097920.jpg HTTP/1.1\r\nHost: moviefile.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1008\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71002F623236D22396\r\nAccept-Ranges: bytes\r\nETag: \"1D8873B15CE7E65A262D1788F19912EF\"\r\nLast-Modified: Sat, 20 May 2023 09:41:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10605487744494310156\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: HYhzsVzn5lomLReI8ZkS7w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"1d8873b15ce7e65a262d1788f19912ef","sha1":"ef5b427eafdcd42ba4e2a785a49bbfb13fb0c1e0","sha256":"93d103ab945f2972cbdd53050d239c6b9df3d430e9343a21143e805b280e3967","sha512":"1d09a7cf6e12da2a6a2d7a16cba54408f3a90dd58acef01b268b37c3f0545b0541aca6725b894862af1de877dd6c7d2ab9cec94baa7584536e9011e6c5553dcb","ssdeep":"","tlshash":"5a11c461b9beb91ac362083381c121b0ca066c3b4120f2e7cc08b210a23c00ad7c782e","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-21T11:23:30.490862Z","times_seen":396,"resource_available":false,"data":null}},"time_used":1250,"timings":{"blocked":986,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigw-in1.oss-ap-northeast-1.aliyuncs.com/hashkey/1718471917129265486.svg","fqdn":"bigw-in1.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.18","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /hashkey/1718471917129265486.svg HTTP/1.1\r\nHost: bigw-in1.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 38176\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71ACB1D33334805785\r\nAccept-Ranges: bytes\r\nETag: \"D6C367CB1E39EB3181E144CF53F7E35D\"\r\nLast-Modified: Sat, 15 Jun 2024 17:18:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2646971498195436581\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1sNnyx456zGB4UTPU/fjXQ==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":38176,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6c367cb1e39eb3181e144cf53f7e35d","sha1":"3ca7b4b72523ef403a844da6f9cf7825dbc72194","sha256":"8c0d559ecb3222cf7c43df033508de486f48df91a7e71a1699243ce88bbd7f3a","sha512":"d5191d8fd46c0a2dc6622515fb8133695e8d959ad32923eda0d6d8adfcf1d7108ba33f3008f56b574b26b4d4a6558d28c5d08c6e4ba083c1d841fad51ec772d5","ssdeep":"768:uoNj2rxRBDPX2uVt+a7NHa36oFwKrcn4NQfUKVZ5VMca6dNuXu4:uqj2rxR9PXNVt+q1oTAn4eTVZw60","tlshash":"9803e1b166a97ee1827c5434046a24e7e22cdc821ecc4a909df973ee3bdf9d3493451b","first_seen":"2025-07-05T16:42:06.954908Z","last_seen":"2026-07-18T19:59:43.399293Z","times_seen":78,"resource_available":false,"data":null}},"time_used":1201,"timings":{"blocked":11,"dns":1,"connect":254,"send":0,"wait":511,"receive":1,"ssl":507},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/null","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:43.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /null HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 07 May 2026 16:31:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: 9f819dda5b77b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58288,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"b6305f53b4d3432d561eb748f4af25fd","sha1":"e01e5117f6fa0d6b1a82ae3c45839d8097d119b5","sha256":"dc676cc52046a252ee86c463e49bce5b517c932ab100f21cb62e231cb3d7ed7a","sha512":"18f3435e92ce082fc5d52e8c8b3e3186c86bd499afdf405b842d1b0aef771a4d14359bf39d142b591469cc4c4a2016c2f4c6fd646662318cee2ad0f966470b83","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdomx:cmDD6oeFUycwpk06hWp1b99c7Vz","tlshash":"0443021803de40a2cd9978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1ea","first_seen":"2024-05-06T13:26:20Z","last_seen":"2026-07-21T04:42:45.386411Z","times_seen":1913,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/images/coinex/sheng.png","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /images/coinex/sheng.png HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 268\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:53 GMT\r\netag: \"69f7bd9d-10c\"\r\nexpires: Sat, 06 Jun 2026 16:31:44 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9f819ddc8df3b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 16, 8-bit/color RGBA, non-interlaced","md5":"ff1d3e532de80763bb26b4f58ade878a","sha1":"5d6eeec44863133283d1a0e135d456da3cde91c2","sha256":"2f4d0c56c5d8a826631fe4a2bfaf56a34c28c5cd2775c3426a23f4484dd309de","sha512":"095ee51cd80d192b33915193b5d27d96940d79f058e3e6a35331b61fa9538c82279855e99e929d6115ced0e831b24bb4ca3e13c2d8d123cdd8de611e9e732d8a","ssdeep":"","tlshash":"ecd0ebd32058ac9dceca5a290a08009020730288018a3082a288ecf6ef81b26d0329c9","first_seen":"2026-04-02T03:19:35.302652Z","last_seen":"2026-07-18T19:59:43.356669Z","times_seen":27,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moviefile.oss-ap-northeast-1.aliyuncs.com/coins/images/202305204405789973744230400.jpg","fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /coins/images/202305204405789973744230400.jpg HTTP/1.1\r\nHost: moviefile.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 894\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71002F623138D32396\r\nAccept-Ranges: bytes\r\nETag: \"A53CFB070EEBB9A41E942328DB6F08B7\"\r\nLast-Modified: Sat, 20 May 2023 09:41:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5745280632666502230\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pTz7Bw7ruaQelCMo228Itw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"a53cfb070eebb9a41e942328db6f08b7","sha1":"8bf5ecd85b99d18dc0030051da66844f5a979a1d","sha256":"a9edda4d36929c281cf08a07abaa09d9950fb9545c001851a82229e53af78472","sha512":"cea73e5fdf649fd0da5ecece5449dd71e0eff4e020308b7af8e03a9d3fea12dd14df6791eb44b1ddbcaa92de4a9b78ac511a04240253789e4bf10dbf38e34488","ssdeep":"","tlshash":"311167dbcfb108cb6605746a86f07135f742d19d1695d8fa413be6a102d3919564f30a","first_seen":"2024-11-06T16:41:01.091862Z","last_seen":"2026-07-21T11:23:30.64641Z","times_seen":204,"resource_available":false,"data":null}},"time_used":1255,"timings":{"blocked":994,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/qrcode.vue.esm-190705d7.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/qrcode.vue.esm-190705d7.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bybititjue.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-4979\"\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd37b16b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18809,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18555)","md5":"f8a17e7cf2788c1d46863f7a872c8004","sha1":"dc2b086441c16aecae2294a2459e8ac8931cd6bd","sha256":"a4100a93d2d863c4fd0fedcc49868d9f4b859725f4d3732aca74e38c6cf65c74","sha512":"98e475e2cfa8606773e996a19abcc82a3fdfc8adb5144983fe79c1e011f2c28e084369cd37eb20a9f25b850e23d1102291a4ff4b442cc6999437ccd633f8015e","ssdeep":"384:6WJMbBZ/jgwHbc+bHno81t8eL89G9aNdBtump098XfUxCFMOPoeovV:6YMdJsGXtL89GmdBn0mfusu","tlshash":"6282e8997254206b73ab9ae84caf240d53bae9557404c8ecbf44e2d27cbcc98513ef35","first_seen":"2026-05-07T16:32:05.183157Z","last_seen":"2026-05-14T19:07:34.532316Z","times_seen":6,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-a16ef6a2.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/index-a16ef6a2.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bybititjue.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-62c\"\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd37b17b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1580,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1579)","md5":"a3215ff49ceeecd0dd903d63f4ca2961","sha1":"83ef6b4608ae2bbdb4afb3b682e994713b4693b9","sha256":"02f44561aabf4547c5d692c9506ad75608b09902b49a5393880380fe506aca8c","sha512":"2d3acc59724dd47f649fdbfae1e35eab894b866037fdddf3ff568995a0ed2c99e244a516b95df4986e739a58eb02748f350f065dedf843cd7cceb972841bc907","ssdeep":"","tlshash":"06319a466007d6be4d532954391a559cf00cefd8c560d949f2fd402a3bc7ce58b1dba5","first_seen":"2026-05-07T16:32:05.14241Z","last_seen":"2026-05-14T19:07:34.52764Z","times_seen":6,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/qrcode.vue.esm-190705d7.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/qrcode.vue.esm-190705d7.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/assets/index-7f7ddfd5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-4979\"\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\nage: 23771\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd3fb91b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18809,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18555)","md5":"f8a17e7cf2788c1d46863f7a872c8004","sha1":"dc2b086441c16aecae2294a2459e8ac8931cd6bd","sha256":"a4100a93d2d863c4fd0fedcc49868d9f4b859725f4d3732aca74e38c6cf65c74","sha512":"98e475e2cfa8606773e996a19abcc82a3fdfc8adb5144983fe79c1e011f2c28e084369cd37eb20a9f25b850e23d1102291a4ff4b442cc6999437ccd633f8015e","ssdeep":"384:6WJMbBZ/jgwHbc+bHno81t8eL89G9aNdBtump098XfUxCFMOPoeovV:6YMdJsGXtL89GmdBn0mfusu","tlshash":"6282e8997254206b73ab9ae84caf240d53bae9557404c8ecbf44e2d27cbcc98513ef35","first_seen":"2026-05-07T16:32:05.183157Z","last_seen":"2026-05-14T19:07:34.532316Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/images/coinex/home_3.png","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:43.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /images/coinex/home_3.png HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:43 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bd9d-2968\"\r\nexpires: Sat, 06 Jun 2026 16:31:43 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd7a844b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced","md5":"bb04aa1d35229360a5f1726cd77a52a1","sha1":"fb413e9e1a19dd1445d063766a0744e20d8c4d25","sha256":"c52179332fe96e4b6e32834f40a8664e95ebfa03ca3e9a77223e97aa6418a6d6","sha512":"b58dc6757b896097ae8f3a606dc50d92939a73f5fe9791e2cb986549f0c42386c22547e255c23d167bf0c4c2f6de84d0a04c8d64fa0b2dec6e8f7b17060539a7","ssdeep":"192:brIIHUCD4wa3SfkanfDEMzBYMRqNLlMM0OHRGoHvWgi4mVgpbIveSMY:bF0wDsan/YMRqNLltHkH4mSpbIve4","tlshash":"b622d0cbec76c6ad9249d7cc760fe947d32f6868638a710d8abc417e60258660c1bf43","first_seen":"2026-04-02T03:19:35.317504Z","last_seen":"2026-07-18T19:59:43.421916Z","times_seen":27,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-e8dd5194.css","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/index-e8dd5194.css HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\ncf-cache-status: HIT\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\nage: 36135\r\netag: W/\"69f7bda0-11d\"\r\ncontent-encoding: gzip\r\ncf-ray: 9f819dd36afcb4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"deeed0020db920f78e93058d2042dca9","sha1":"ec4c1137a382380bd4904f44cd77c47e28a005c5","sha256":"e8dd5194c71304a25aa884a06da1cd68cc7ed958afb6033f30c10c7d708e826c","sha512":"fb512ee8126ee87afbb50d99e938f0bb415e50e7124a513b315b9665ea06c99642b63d5dc75cdf9b02ff7ea2582e043e9549631db9e35f1a422518b049e34cce","ssdeep":"","tlshash":"39d07d9632c46365f413deed24449114001ad323c9420f84da5aa0d0c64bd83e646001","first_seen":"2026-04-02T03:19:35.315273Z","last_seen":"2026-07-18T19:59:43.434341Z","times_seen":32,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-7f7ddfd5.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/index-7f7ddfd5.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/assets/index-4972cb46.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-30c7\"\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\nage: 23771\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd3cb63b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12487,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (12370)","md5":"42b8d66a0ae1b1aca6cba87bb4098f20","sha1":"4668c976db1f880e91bd772035b9252a50c98fde","sha256":"d0a489398b61e9cf4398fe44c5682e7a626d71f341d07ba852887b25b1d04456","sha512":"d9597aeeb8f7fdf4a1fb0c920f5f169ea9ed61346c74d9352713c5967d1b5c1a87e596a164f2c7b4899e2cec4b054ac9ce97d5e2b540af324d329533c2c9d7d9","ssdeep":"192:KB0G0SV36P/uGuN2tgIEZGsT98yg6t80SAQ+zys3pDgtrutdy6XDA9TYUXBrXfAn:KB6y3NNtpUtrutLMLfAC/FPHV/ro5","tlshash":"7e425444e4269efb94a7d5987554d004f00cbfaac232c276f2fc5c227ac1dba0b5579d","first_seen":"2026-05-07T16:32:05.170392Z","last_seen":"2026-05-14T19:07:34.531781Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/loginHeader-adaad4c8.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/loginHeader-adaad4c8.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/assets/index-7f7ddfd5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-1471\"\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\nage: 23771\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd3fb8db4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5233,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5172)","md5":"6bc93ca65c0ea9f4c51ac5e2e74b7479","sha1":"e79b88ef1f130f1316b09a88a910b9b449faf5b1","sha256":"b6252fa64c5995b3d4016a6930ed93af77779e5ff8e886ff64c52bdb46f8671b","sha512":"cc3ee0132e079b11ee671d8f04b9df66cd845bb36656c1a4f207f26a557a78933128eb7aff9cca691b4fd7ada985eeb1cd99bad89bdc41fd62fc6b3d15006b25","ssdeep":"96:UUe7X1NTLT8MgosE4L/7LNiXnpRcVodlWMkXu7jqIeGcWBse:HeD1NTLIoe/7LUXn4odXkXHIxcWBse","tlshash":"e3b1960d74359dbaeab751043038c442f005efcd813ac956a2fc6c062e86d769eebb76","first_seen":"2026-05-07T16:32:05.171594Z","last_seen":"2026-05-14T19:07:34.514254Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/use-id-9f1818e2.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/use-id-9f1818e2.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/assets/index-7f7ddfd5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\ncf-cache-status: HIT\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\nage: 23771\r\netag: W/\"69f7bda0-98\"\r\ncontent-encoding: gzip\r\ncf-ray: 9f819dd3fb93b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"bbecda0114c3b379c6b02da003fce6d4","sha1":"f6cc67f8c7a4739d074d7fda8d622bdb6866861e","sha256":"cda7751b9b53a176dc49d7dfc624005647bb15373560ba6d45ff572478f06d5b","sha512":"744c9d929d5c679a759ca3f3170b75cd9ff4674b949e2e84bb5ecccabd1ca9fa8c71cba6770b8519e599712839bd7c78d674ca5166b1c57d2feefca8b85eb445","ssdeep":"","tlshash":"4ec08c6a744820e22a090cd9e22606aac22a7c10571a99f0f268071609b227a83faf10","first_seen":"2026-05-07T16:32:05.18842Z","last_seen":"2026-05-14T19:07:34.539273Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/images/coinex/home_1.png","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:43.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /images/coinex/home_1.png HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:43 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bd9d-2b87\"\r\nexpires: Sat, 06 Jun 2026 16:31:43 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd7a83fb4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced","md5":"dd7dcc6ba1ff9088068ef82a9a90886a","sha1":"6125b7b17ddefb0d658c4af5381ae6a8950362a2","sha256":"861c2a8f21a7cb0c1337f6471510272c9a4bf146d33571183738afe9c8ce576b","sha512":"f4fc91a8a630e493d7883d9ea57722376008aa74af16dd7683b512f99ab8504f2cb49a86e43e66c197585a20d7714f58346ba4c43beb366999b20e9a0c04a9b4","ssdeep":"192:brIIHUCD4wa3SZ2znDHlDDJVe16/PlqhvrRJQEiVP5vCy4RKsUhG77r9+2e:bF0wDknRPJVEiPevrrQE4vC5ssXA2e","tlshash":"8e32af08c4c82fba30ad0bb99e1f5c029529ad496f8e0d0cb6d5528e2c37d52f8953df","first_seen":"2026-04-02T03:19:35.306454Z","last_seen":"2026-07-18T19:59:43.389738Z","times_seen":27,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybitit.tynnp8.com/api/goods?limit=20","fqdn":"bybitit.tynnp8.com","domain":"tynnp8.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:58.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tynnp8.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 09:15:45 GMT","end":"Wed, 17 Jun 2026 10:15:27 GMT"},"fingerprint":{"sha1":"B3:45:AE:1F:AB:D7:69:E6:17:E6:0B:D0:BB:7A:42:68:1B:6B:08:92","sha256":"00:C0:4F:4F:EF:B5:4A:D3:5B:5A:1A:2D:90:00:2E:73:9B:C3:7B:6A:64:B0:C0:9C:09:2B:0C:16:3C:07:97:B6"}}},"request":{"raw":"OPTIONS /api/goods?limit=20 HTTP/1.1\r\nHost: bybitit.tynnp8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://bybititjue.com/\r\nOrigin: https://bybititjue.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:58 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=e.gBjyXyJbQOw39P0zgQz0tIpSwAf9wmNHunBV48bIU-1778171518.4016433-1.0.1.1-E17bTkyiRRTXaUMwY4IdsbMOB5dyeYxlLShFCsra4lg; HttpOnly; SameSite=None; Secure; Path=/; Domain=bybitit.tynnp8.com\r\ncf-ray: 9f819e360cea56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-157968a6.css","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:41.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/index-157968a6.css HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-9dff6\"\r\nexpires: Fri, 08 May 2026 04:31:41 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\nage: 36936\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dcd7cdbb4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":647158,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9548373c984c76462f9ad6fa3eab7e51","sha1":"4c9b5f39eb2bd032c3d164db93514f900293bf62","sha256":"157968a67d26ca40577512a3fbfd7b67e97d4624ee1fa52a5b658dfebba03777","sha512":"5f112b6d4a93128e81127cbfde5d2d60c956ec258dad9a8034a8179e69f87449948aa7492a1c9032c1bcc09224f955c189317df2eb694658612387c31229af22","ssdeep":"6144:LPmIIHwA+sajvxsahJFzTSI0MGuhT7M8EcH7pTVkad36fFhsSIcO3jVMa/4uta7j:5jv1Nzn4X9","tlshash":"c9d4d855e753513f2e17e67dabc5d9d8bb28ee90dd11cba1f640a00849c3af102a3d2b","first_seen":"2026-05-07T16:32:05.204972Z","last_seen":"2026-05-18T11:52:00.777599Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-07T16:31:40.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=191,cfOrigin;dur=1\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: 9f819dcac9eab4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2173,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (497)","md5":"7b2fda7dedc33923ea4a6222f99e6446","sha1":"8a7c06c474c460388f1275b8e40954a174c69b3a","sha256":"d0b4c58916e3b7adb04bf90b2b72f7ea6266f518cd7540040a41376a96795494","sha512":"9b014d5af44c44a40f3cfe9dc6e39862fb1716ab4e95e1775449f35bd85e81475d6049996dbee5731fd74899de724341e8228a5f0443bad3f67434201b6b6b7d","ssdeep":"","tlshash":"e441834a4020406082d7a33c68dbe744367580eb9509ae187d6dbe14ef5473c86f7b8e","first_seen":"2026-05-07T16:32:05.191875Z","last_seen":"2026-05-14T15:32:16.118629Z","times_seen":5,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":306,"dns":289,"connect":1,"send":0,"wait":197,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/jiang-f9e25abb.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/jiang-f9e25abb.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bybititjue.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\ncf-cache-status: HIT\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\netag: W/\"69f7bda0-57\"\r\ncontent-encoding: gzip\r\ncf-ray: 9f819dd37b1ab4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"db2127c6f9e3705fa3cd05c5a0c0e79f","sha1":"85f5044740a9d80d0b47b1bd1c7f40498807b13b","sha256":"c58bb9bcf11727899adf9fea3bf3104628a4eaa0e0df0d79bbb1081b4133dc43","sha512":"e4de4e27d9a9561eef35d56376bcf20dee716d8e08aa8a84de2083907570da5fac71c882ecb5b18c4942eee2fdb42f2a5df6d748d12bbe734ec93a02085cc6ca","ssdeep":"","tlshash":"70b01265c80938e347044870793fcd24d04c2056d212c286630b7c16c3104008412d09","first_seen":"2026-04-02T03:19:35.296469Z","last_seen":"2026-07-18T19:59:43.418925Z","times_seen":32,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-df66f799.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/index-df66f799.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/assets/index-7f7ddfd5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-428\"\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\nage: 36936\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd3fb90b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1064,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1063)","md5":"7d893a4f7e15ca60b19c89413c07ef67","sha1":"4c892a65308fe740f97c88bb234085607b33c5b0","sha256":"4a31d910e3a480e0def2d37e4e7cea573971e6e66591b6a9960e885e5fbddb85","sha512":"26cf9901d1da70f5578b332e3a565326460bae304d880405c333858af8866110560486b0183e80b97f6ec3c46ac36f047d2bcbe365861eee62ee8dac452550e8","ssdeep":"","tlshash":"1411c0897643f563431ec21de67f013bd1fce654e42919609f04d2923e2aa3de03b944","first_seen":"2026-05-07T16:32:05.173448Z","last_seen":"2026-05-14T19:07:34.54057Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/images/coinex/home_2.png","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:43.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /images/coinex/home_2.png HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:43 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bd9d-2bc8\"\r\nexpires: Sat, 06 Jun 2026 16:31:43 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd7a842b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11208,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced","md5":"d691d25272622dc18e4bab3a0e02f976","sha1":"459ad7487a8438ce51664e0430f7bdfd0e95e3b7","sha256":"5de890c082907b2dfabd9780c81a2f7e6d6b070c3b0679a4253fe8bd4bc815eb","sha512":"a28a7cd956d67dca955158a6d59050e99dfa5c63ea71fac083a639f257c38dfd701ba5c72f37c20fd691e55e73c90b55c4aa08177b39b1d8b4dd6ab1faaf6475","ssdeep":"192:brIIHUCD4wa3SQ9cw/EoNa/VtXDLDpEc2XfasBVzzCr48EOguNjJhxXe3gCb+:bF0wDGcQEoNaTzLDpEc2v7BVzzkvEOgA","tlshash":"b232d07f413846c6a4af8b2b2a57d0804e72c6ea8b741b05cfde499f9b14e0439135d3","first_seen":"2026-04-02T03:19:35.299972Z","last_seen":"2026-07-18T19:59:43.383824Z","times_seen":27,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moviefile.oss-ap-northeast-1.aliyuncs.com/coins/images/202305204405789760715530240.jpg","fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /coins/images/202305204405789760715530240.jpg HTTP/1.1\r\nHost: moviefile.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2560\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71ACB1D33237855785\r\nAccept-Ranges: bytes\r\nETag: \"CB84D3CA48A52E3DF1025731A8BEF4EC\"\r\nLast-Modified: Sat, 20 May 2023 09:41:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6590887318613304211\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: y4TTykilLj3xAlcxqL707A==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-07-22T23:22:13.635135Z","times_seen":1578,"resource_available":false,"data":null}},"time_used":1032,"timings":{"blocked":-1,"dns":0,"connect":257,"send":0,"wait":257,"receive":0,"ssl":518},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moviefile.oss-ap-northeast-1.aliyuncs.com/coins/images/202305204405790044250480640.jpg","fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /coins/images/202305204405790044250480640.jpg HTTP/1.1\r\nHost: moviefile.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1110\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71ACB1D33237BF5785\r\nAccept-Ranges: bytes\r\nETag: \"155F85DFE1FE971302126E81ECBEEDA0\"\r\nLast-Modified: Sat, 20 May 2023 09:41:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17537158629280557879\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: FV+F3+H+lxMCEm6B7L7toA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"155f85dfe1fe971302126e81ecbeeda0","sha1":"a41ab8f31d2461f114a1a0625ab6a9520c7f90fb","sha256":"b15f065d7ef77728658b464df170ed55c4592b33fbd5114a6c9ba6959c4fc9ff","sha512":"c6e452c6fe1d358a72107c34475ddf3de212e4bc2ef539bedcb655643313154b68ede92cc37c68e9a2c55adf219821059bfdf9a67f33572c49687f30dd8b34e9","ssdeep":"","tlshash":"2711ecd5b3cacee484b9380fd583059d0d98454bd1304bdc54bd5336d5914cc1a07f67","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-21T11:23:30.502642Z","times_seen":174,"resource_available":false,"data":null}},"time_used":1293,"timings":{"blocked":1035,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:41.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bybititjue.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:41 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9f819dcd9f65b515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-07-22T20:55:00.873697Z","times_seen":78296,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":13,"dns":0,"connect":1,"send":0,"wait":16,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybitit.tynnp8.com/api/goods?limit=20","fqdn":"bybitit.tynnp8.com","domain":"tynnp8.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:43.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tynnp8.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 09:15:45 GMT","end":"Wed, 17 Jun 2026 10:15:27 GMT"},"fingerprint":{"sha1":"B3:45:AE:1F:AB:D7:69:E6:17:E6:0B:D0:BB:7A:42:68:1B:6B:08:92","sha256":"00:C0:4F:4F:EF:B5:4A:D3:5B:5A:1A:2D:90:00:2E:73:9B:C3:7B:6A:64:B0:C0:9C:09:2B:0C:16:3C:07:97:B6"}}},"request":{"raw":"GET /api/goods?limit=20 HTTP/1.1\r\nHost: bybitit.tynnp8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: it\r\nOrigin: https://bybititjue.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:44 GMT\r\ncontent-type: application/text;charset=utf-8\r\ncontent-length: 4322\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncontent-encoding: br\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=IODAO13AZZJBeVVWjhyG5T5s0_iM2scP8XkWWrOXyZY-1778171503.7073014-1.0.1.1-2TqQQWp.Iwg4XP2hpfxsWGxL83_lefabEYul1acp9NQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=bybitit.tynnp8.com\r\nvary: accept-encoding\r\ncf-ray: 9f819dda2e1456c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22232,"size_decoded":0,"mime_type":"application/text; charset=utf-8","magic":"ASCII text, with very long lines (22232), with no line terminators","md5":"c0e691430cc8b3a77e1068d2ad7c5a7d","sha1":"24b2f21d0629be50a475ecd04e39b3f11b93bf7a","sha256":"ec576612c0d701a32f9d276fea45995d6e08fa38e7b4ecf6778b401bf60dbae0","sha512":"613da550ac1c22ad4bf08c75492d2a39b175ccb1f1e83bb50dbe32ee027e3e04ff3ecfc8e21a573f0f938390a05082844e6fb27f49adde571f95b30fc6fa8553","ssdeep":"192:atQVEd/TYh9/ISyUWOSoHDmB9dhpDdh9DOJhx5NVYB5VWhXhYaZqkIhCli0EoaBn:HaIDY9yBR216+","tlshash":"e0a2bec3a74c0f91f62b32bad066b5dc9e0098ca276559883737d0ab875f0f0599b13b","first_seen":"2026-05-07T16:32:18.71942Z","last_seen":"2026-05-07T16:32:18.71942Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":357,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moviefile.oss-ap-northeast-1.aliyuncs.com/coins/images/202305204405789688279900160.jpg","fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /coins/images/202305204405789688279900160.jpg HTTP/1.1\r\nHost: moviefile.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1125\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71BC2530313352A85F\r\nAccept-Ranges: bytes\r\nETag: \"75F196B437F9D87FDC198BC904C66C4C\"\r\nLast-Modified: Sat, 20 May 2023 09:41:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10138601249240458443\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dfGWtDf52H/cGYvJBMZsTA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-07-22T23:22:13.584111Z","times_seen":1787,"resource_available":false,"data":null}},"time_used":1888,"timings":{"blocked":808,"dns":1,"connect":267,"send":0,"wait":270,"receive":0,"ssl":540},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moviefile.oss-ap-northeast-1.aliyuncs.com/coins/images/202305204405789882434232320.jpg","fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /coins/images/202305204405789882434232320.jpg HTTP/1.1\r\nHost: moviefile.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 988\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71BC2530313382A85F\r\nAccept-Ranges: bytes\r\nETag: \"96661AE9839CB25D5CCD5CA628EDFA64\"\r\nLast-Modified: Sat, 20 May 2023 09:41:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5471959168277679892\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: lmYa6YOcsl1czVymKO36ZA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":988,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"96661ae9839cb25d5ccd5ca628edfa64","sha1":"4b39c2aded636e57cefccf39d190d5274c26e534","sha256":"95ba109bb6073cfd498eddd377de0792a78027def314b0e6751d37d03773ef02","sha512":"1119ef04adc7aabb7ccd44154a2213d8ced88e85804b8368275569bfca34f6bb24c71ef2bc5ecd0bfba0232ea9510a938cddf2d7c4a4c6e11bf428a934c6855c","ssdeep":"","tlshash":"491154d7a5cdbd98df10d4f04e38cb8598b022ed9115bd832c5665119957302ddd2393","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-07-18T19:59:43.391264Z","times_seen":122,"resource_available":false,"data":null}},"time_used":1258,"timings":{"blocked":988,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-4972cb46.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:41.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/index-4972cb46.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-477157\"\r\nexpires: Fri, 08 May 2026 04:31:41 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dcd7cd7b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4682071,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26403)","md5":"2d6e2d28cb5e8f9f0ba6affc3b048837","sha1":"6f4422e8d0f86c7ed89d42d023f4f463420d9d1c","sha256":"f828fdf56efbef250b9ef586b3cf2875ff707347aeb412247c437690e1e3bcda","sha512":"e175f1fd699836d33bdf8930b02bfcc875add2a0850e60536f89f902eb7b5440d591ccbe9fe1839212794b2557905a05db8d812a559a25d7b6ace0d04b6de22d","ssdeep":"6144:K1gATs+A7yxpmxgDCA1lApEkHAwTdA+In9qbpxYtLITbf8BDUpdNyKK4Jd3:SgA/dmxgDCA1YzAwdInGpB/f8qdNg4f","tlshash":"b8451964b5dbe5a443cbc98015ba12b1b5149e523248a8f3ccf8cc8bbce4975c6b7f19","first_seen":"2026-04-07T14:06:19.012675Z","last_seen":"2026-05-14T15:32:16.136604Z","times_seen":8,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/images/bux/pc/andor.png","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:43.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /images/bux/pc/andor.png HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:43 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bd9d-dee\"\r\nexpires: Sat, 06 Jun 2026 16:31:43 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd7b849b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced","md5":"8973c2ab83fe874907fb0a025677ea45","sha1":"b73505baad12b22c419348b8bbd6a651079a51ca","sha256":"df3270630238640e490a0b00b8ffa31e40b71cace648a13e0aaf83fb5d9a4592","sha512":"0f25648635610fff81e04f04a7d26b686f0270a71bad2b76d4699d489be6b6abe897370edceb487bfbfaf802fec69fcf818317fefdfd627706b34640b24ba022","ssdeep":"","tlshash":"57715caa30eff0146d990b2e80e0bda1145936ae4c478ddb4984f76e579c61fa064ef3","first_seen":"2026-04-02T03:19:35.309928Z","last_seen":"2026-07-18T19:59:43.375817Z","times_seen":27,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moviefile.oss-ap-northeast-1.aliyuncs.com/coins/images/202305204405789905419018240.jpg","fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /coins/images/202305204405789905419018240.jpg HTTP/1.1\r\nHost: moviefile.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 404\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71002F623138992396\r\nAccept-Ranges: bytes\r\nETag: \"5E22A9302A4383454BFE530F0DDFFB53\"\r\nLast-Modified: Sat, 20 May 2023 09:41:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18276743004581408811\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: XiKpMCpDg0VL/lMPDd/7Uw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-22T23:22:13.602169Z","times_seen":1011,"resource_available":false,"data":null}},"time_used":1820,"timings":{"blocked":773,"dns":0,"connect":260,"send":0,"wait":261,"receive":0,"ssl":523},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigw-in1.oss-ap-northeast-1.aliyuncs.com/hashkey/171847192692985711.svg","fqdn":"bigw-in1.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.18","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /hashkey/171847192692985711.svg HTTP/1.1\r\nHost: bigw-in1.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 90045\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71ACB1D33137A75785\r\nAccept-Ranges: bytes\r\nETag: \"DF87D0261EC103F97412B45C60BB1CE9\"\r\nLast-Modified: Sat, 15 Jun 2024 17:18:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 235080018086412257\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 34fQJh7BA/l0ErRcYLsc6Q==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":90045,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df87d0261ec103f97412b45c60bb1ce9","sha1":"8e130d903046671b0cd1666189fbc2b8abdb3364","sha256":"1d86a624dcb3581254aaa0f0ea74e94346542dd65be60d2980c4cf2686296978","sha512":"6865d52dec7c3df9f172d525f1cdf4ad0f4b4a9236a5ee6be528dc12f69ee4ac74603c3059b3b7e2ea2368a63305f6b234138b5284975dfe4b6f181bb81de188","ssdeep":"1536:PiuqiNqYKnb/MzJy8hTNqYt/r/EZpBoS7s0TU6tlgeC6RKKe9qetJibf:auqisIzXhcYJct7NnAKekeD4f","tlshash":"b893029a0b17ed72df3489f9075b245a93c0cb5adc849fc4d410a1e26b60f62edc2e1a","first_seen":"2025-07-27T22:20:37.399027Z","last_seen":"2026-07-18T19:59:43.373649Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1878,"timings":{"blocked":11,"dns":0,"connect":264,"send":0,"wait":535,"receive":531,"ssl":537},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/metal/gold--big.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /metal/gold--big.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"92412250874344fabcfa16baa39e1650\"\r\nlast-modified: Wed, 08 Sep 2021 09:03:09 GMT\r\ncdn-cachedat: 08/09/2025 14:36:17\r\nx-amz-id-2: QzT9POGIb8rzpa2NIKnWnbKXbAFPd5n9hZ1CVSlK0twiz4PaVrD6AkZbVXRSlJSO4Z1YdiLazqY=\r\nx-amz-request-id: GXDSX3PQCRGGCC1R\r\nx-amz-meta-hash: 92412250874344fabcfa16baa39e1650\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ccda4f609a5f8424b66922f0565969b1\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":908,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (908), with no line terminators","md5":"92412250874344fabcfa16baa39e1650","sha1":"8074901d45204e38aab6a9b5baf3d40718d67ca5","sha256":"2e7d7fb86d4e85c02385cf16848ebef892059199bda7291fe3368897028fece6","sha512":"ac01703244a50a983b8d0de7201fa833e7ffb5b031f047c6c8014616d0f2483c07278607b58f0acb31a6f2f1e4e78558729d42e670f048ea817d95131dafd391","ssdeep":"","tlshash":"2f119ce7e7c894989519cfc49d1268dd276d29d97de082cbd3344f34a314b6dea80d38","first_seen":"2024-11-05T04:41:28.398116Z","last_seen":"2026-07-19T04:12:35.885495Z","times_seen":90,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":36,"dns":1,"connect":1,"send":0,"wait":1,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moviefile.oss-ap-northeast-1.aliyuncs.com/coins/images/202305204405790865537146880.jpg","fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /coins/images/202305204405790865537146880.jpg HTTP/1.1\r\nHost: moviefile.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 945\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71002F6232369B2396\r\nAccept-Ranges: bytes\r\nETag: \"4CDC822DCA748CD714F486B49B0459A4\"\r\nLast-Modified: Sat, 20 May 2023 09:41:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4088276766809375716\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: TNyCLcp0jNcU9Ia0mwRZpA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"4cdc822dca748cd714f486b49b0459a4","sha1":"e0be1cb77d432c94763da06e2ca65a0a17b67376","sha256":"20515ed9f05ff225becc128e112e7fffe48b53dc229a3fa08f82e6211168da3f","sha512":"c6860430f579c2021658149a97ed2326aeb75bd2415324a93911d31ab286de7ea803ea7808306e1cf63f87cadbc9c737a6175d6087873bf52bcaa79bc1815ab7","ssdeep":"","tlshash":"2711c8d4831bdca9b4f10644c90b2075ac347e89a2cc91d18f66045a291f8cee1251cb","first_seen":"2026-04-02T03:19:35.324947Z","last_seen":"2026-07-18T19:59:43.390595Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1847,"timings":{"blocked":788,"dns":0,"connect":263,"send":0,"wait":264,"receive":0,"ssl":530},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/jiang-f9e25abb.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/jiang-f9e25abb.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/assets/index-7f7ddfd5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\ncf-cache-status: HIT\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\nage: 36936\r\netag: W/\"69f7bda0-57\"\r\ncontent-encoding: gzip\r\ncf-ray: 9f819dd3fb94b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"db2127c6f9e3705fa3cd05c5a0c0e79f","sha1":"85f5044740a9d80d0b47b1bd1c7f40498807b13b","sha256":"c58bb9bcf11727899adf9fea3bf3104628a4eaa0e0df0d79bbb1081b4133dc43","sha512":"e4de4e27d9a9561eef35d56376bcf20dee716d8e08aa8a84de2083907570da5fac71c882ecb5b18c4942eee2fdb42f2a5df6d748d12bbe734ec93a02085cc6ca","ssdeep":"","tlshash":"70b01265c80938e347044870793fcd24d04c2056d212c286630b7c16c3104008412d09","first_seen":"2026-04-02T03:19:35.296469Z","last_seen":"2026-07-18T19:59:43.418925Z","times_seen":32,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/cdn-cgi/rum?","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 642\r\nOrigin: https://bybititjue.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://bybititjue.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 9f819dd52cf4b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybitit.tynnp8.com/api/webConfig","fqdn":"bybitit.tynnp8.com","domain":"tynnp8.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tynnp8.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 09:15:45 GMT","end":"Wed, 17 Jun 2026 10:15:27 GMT"},"fingerprint":{"sha1":"B3:45:AE:1F:AB:D7:69:E6:17:E6:0B:D0:BB:7A:42:68:1B:6B:08:92","sha256":"00:C0:4F:4F:EF:B5:4A:D3:5B:5A:1A:2D:90:00:2E:73:9B:C3:7B:6A:64:B0:C0:9C:09:2B:0C:16:3C:07:97:B6"}}},"request":{"raw":"GET /api/webConfig HTTP/1.1\r\nHost: bybitit.tynnp8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: it\r\nOrigin: https://bybititjue.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:43 GMT\r\ncontent-type: application/text;charset=utf-8\r\ncontent-length: 317\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncontent-encoding: br\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=jESUPAUi9RYou4xsROlMPErKQghAZX7B_iQ7Prm5h7I-1778171502.9288385-1.0.1.1-Aaa9Jrp9zVogdU84FCJpKVzun.t_LQJRSYv6_tI4K9E; HttpOnly; SameSite=None; Secure; Path=/; Domain=bybitit.tynnp8.com\r\nvary: accept-encoding\r\ncf-ray: 9f819dd548f556c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":500,"size_decoded":0,"mime_type":"application/text; charset=utf-8","magic":"ASCII text, with very long lines (500), with no line terminators","md5":"836151e6ce96cb8ce6ef5f4bce910cdd","sha1":"1f9625093f8beac5b8829e0e2b6927fafaac56d4","sha256":"86ff6f9630d3c57f2bc30d70c42f8a4d836daec22081f4b86b5411a322077686","sha512":"6a2bebcf07a326b1755eaa5c401a8f0fa569bdc97ab570e6abc5db4f52efd306de55fbe27cff83ae5255972a6e3604adc0d0285af720bc5e9db172f04e41e07c","ssdeep":"","tlshash":"caf0e2c1b69c2b90f13e7195c26565ce1844a8ba2f2584ad3777c0bb832a0e648ea028","first_seen":"2026-04-02T03:19:35.290234Z","last_seen":"2026-07-05T11:45:18.808821Z","times_seen":16,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybitit.tynnp8.com/api/goods?limit=20","fqdn":"bybitit.tynnp8.com","domain":"tynnp8.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:43.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tynnp8.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 09:15:45 GMT","end":"Wed, 17 Jun 2026 10:15:27 GMT"},"fingerprint":{"sha1":"B3:45:AE:1F:AB:D7:69:E6:17:E6:0B:D0:BB:7A:42:68:1B:6B:08:92","sha256":"00:C0:4F:4F:EF:B5:4A:D3:5B:5A:1A:2D:90:00:2E:73:9B:C3:7B:6A:64:B0:C0:9C:09:2B:0C:16:3C:07:97:B6"}}},"request":{"raw":"OPTIONS /api/goods?limit=20 HTTP/1.1\r\nHost: bybitit.tynnp8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://bybititjue.com/\r\nOrigin: https://bybititjue.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=_D9l9A2zKitTXxL6ygj0Eff3Ds30T9tpOHgrT5GrEVY-1778171503.4268985-1.0.1.1-.isRxq44NBAkzDirlHO2N0joge1e6PitbCitZ8tUwkw; HttpOnly; SameSite=None; Secure; Path=/; Domain=bybitit.tynnp8.com\r\ncf-ray: 9f819dd86c7456c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybitit.tynnp8.com/api/goods?limit=20","fqdn":"bybitit.tynnp8.com","domain":"tynnp8.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:48.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tynnp8.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 09:15:45 GMT","end":"Wed, 17 Jun 2026 10:15:27 GMT"},"fingerprint":{"sha1":"B3:45:AE:1F:AB:D7:69:E6:17:E6:0B:D0:BB:7A:42:68:1B:6B:08:92","sha256":"00:C0:4F:4F:EF:B5:4A:D3:5B:5A:1A:2D:90:00:2E:73:9B:C3:7B:6A:64:B0:C0:9C:09:2B:0C:16:3C:07:97:B6"}}},"request":{"raw":"OPTIONS /api/goods?limit=20 HTTP/1.1\r\nHost: bybitit.tynnp8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://bybititjue.com/\r\nOrigin: https://bybititjue.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=qve.faROhekxm7ycUEGjOZaBd.h208onancfp5tcRss-1778171508.399537-1.0.1.1-4eS38qKssEbiZyahewFXJNlZgeow1ZmazAw5CWm8Tfc; HttpOnly; SameSite=None; Secure; Path=/; Domain=bybitit.tynnp8.com\r\ncf-ray: 9f819df7799b56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybitit.tynnp8.com/api/webConfig","fqdn":"bybitit.tynnp8.com","domain":"tynnp8.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tynnp8.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 09:15:45 GMT","end":"Wed, 17 Jun 2026 10:15:27 GMT"},"fingerprint":{"sha1":"B3:45:AE:1F:AB:D7:69:E6:17:E6:0B:D0:BB:7A:42:68:1B:6B:08:92","sha256":"00:C0:4F:4F:EF:B5:4A:D3:5B:5A:1A:2D:90:00:2E:73:9B:C3:7B:6A:64:B0:C0:9C:09:2B:0C:16:3C:07:97:B6"}}},"request":{"raw":"OPTIONS /api/webConfig HTTP/1.1\r\nHost: bybitit.tynnp8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://bybititjue.com/\r\nOrigin: https://bybititjue.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=1TU8DViEnby4PylNT5KTUxfG5nQEkI62abLicg.Aa_g-1778171502.6385179-1.0.1.1-ifnkyJp5Iwx_668EIV1TB3DuvUBw91he9EP0gWZx54k; HttpOnly; SameSite=None; Secure; Path=/; Domain=bybitit.tynnp8.com\r\ncf-ray: 9f819dd37f6256c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/loginHeader-adaad4c8.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/loginHeader-adaad4c8.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bybititjue.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-1471\"\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd37b0db4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5233,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5172)","md5":"6bc93ca65c0ea9f4c51ac5e2e74b7479","sha1":"e79b88ef1f130f1316b09a88a910b9b449faf5b1","sha256":"b6252fa64c5995b3d4016a6930ed93af77779e5ff8e886ff64c52bdb46f8671b","sha512":"cc3ee0132e079b11ee671d8f04b9df66cd845bb36656c1a4f207f26a557a78933128eb7aff9cca691b4fd7ada985eeb1cd99bad89bdc41fd62fc6b3d15006b25","ssdeep":"96:UUe7X1NTLT8MgosE4L/7LNiXnpRcVodlWMkXu7jqIeGcWBse:HeD1NTLIoe/7LUXn4odXkXHIxcWBse","tlshash":"e3b1960d74359dbaeab751043038c442f005efcd813ac956a2fc6c062e86d769eebb76","first_seen":"2026-05-07T16:32:05.171594Z","last_seen":"2026-05-14T19:07:34.514254Z","times_seen":6,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-a16ef6a2.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/index-a16ef6a2.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/assets/index-7f7ddfd5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-62c\"\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\nage: 36936\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd3fb92b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1580,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1579)","md5":"a3215ff49ceeecd0dd903d63f4ca2961","sha1":"83ef6b4608ae2bbdb4afb3b682e994713b4693b9","sha256":"02f44561aabf4547c5d692c9506ad75608b09902b49a5393880380fe506aca8c","sha512":"2d3acc59724dd47f649fdbfae1e35eab894b866037fdddf3ff568995a0ed2c99e244a516b95df4986e739a58eb02748f350f065dedf843cd7cceb972841bc907","ssdeep":"","tlshash":"06319a466007d6be4d532954391a559cf00cefd8c560d949f2fd402a3bc7ce58b1dba5","first_seen":"2026-05-07T16:32:05.14241Z","last_seen":"2026-05-14T19:07:34.52764Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/images/coinex/home_pic.gif","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:43.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /images/coinex/home_pic.gif HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:43 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bd9d-19c924\"\r\nexpires: Sat, 06 Jun 2026 16:31:43 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd7b84ab4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1689892,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 800","md5":"79f76d216ffa2fc4e44376d69a903876","sha1":"93ff44e3aa5935514f9a7ae547b56af27b845015","sha256":"65d1ccccb20f9cb3bf785169ed46f4432f60e8b47ea3fe6f1e8a0a87cae6dcd3","sha512":"b44f4c1b5459eed709c9e9a533769dba0949deb9f0bf6cd50bfcac23592ecd4b6b560749f8f3edd1a92a3b188066daec45621fedbdcfe589920202c15998c45b","ssdeep":"24576:zhXpVarMzg0bm+8gVxx/VXy572NbvRbIZ/+Yy0:zhyEDFfx/VXJbRIH","tlshash":"3b253388c7be457e542fa17c123501477693dc20ff8d93ab6fa143c3a17e17a88b9856","first_seen":"2025-09-12T08:56:21.413187Z","last_seen":"2026-07-18T19:59:43.395058Z","times_seen":28,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigw-in1.oss-ap-northeast-1.aliyuncs.com/btexpor/1753236931938260199.jpeg","fqdn":"bigw-in1.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.18","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /btexpor/1753236931938260199.jpeg HTTP/1.1\r\nHost: bigw-in1.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5223\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71BC2530323164A85F\r\nAccept-Ranges: bytes\r\nETag: \"C5967C179AA36680F74D641C82A3097B\"\r\nLast-Modified: Wed, 23 Jul 2025 02:15:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16903243692711430211\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: xZZ8F5qjZoD3TWQcgqMJew==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5223,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"c5967c179aa36680f74d641c82a3097b","sha1":"e1dded3306b9e6318d9a04ecf543066863472b16","sha256":"bc9920dd1214cf73c19af91c8bee50f6026d1c6d40dfd9ac371d09d1c4e885cf","sha512":"9a41a9519c0e8943dda8db76df60b10c851d54f1ae6f32bee62d5c4c568f3b3d522a5cec432f280598fce22535625a02130f238347b617bc7db60d495bff37e1","ssdeep":"96:q5vbSXXc6lHRZuBlN/hbGvEmnMQz02GCEKz2Tmqjqg4AwZZL5ThlbyZzSZaXG6bs:qhbSXXcLB/lqECo2GCEVTmqj9NwZZL5/","tlshash":"81b17d572c1ac1429441df39a4ec733c242bd9910ed2378620a8025bdb5e58f5ddff24","first_seen":"2026-04-02T03:19:35.305166Z","last_seen":"2026-07-18T19:59:43.385618Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1621,"timings":{"blocked":854,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":510},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moviefile.oss-ap-northeast-1.aliyuncs.com/coins/images/202305204405790441241354240.jpg","fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /coins/images/202305204405790441241354240.jpg HTTP/1.1\r\nHost: moviefile.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1279\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71BC2530323185A85F\r\nAccept-Ranges: bytes\r\nETag: \"C26269EA502DA4720D8FDB4D86AC9333\"\r\nLast-Modified: Sat, 20 May 2023 09:41:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13462380131927509834\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: wmJp6lAtpHINj9tNhqyTMw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c26269ea502da4720d8fdb4d86ac9333","sha1":"07ee784e077b5641365cd89ba2c720f7b4032ea1","sha256":"4f3922270cb0a6b838ae97cc69da3777d3a2e703e0900100bec085f9423a4ace","sha512":"27c105da01702685ce6786d1f20a1d8ca7e1af16804993600b2d51c459a1746ff9f46de9458c72a99c132aa56dfb3ce419754003422df1f44f795bd3a6cacf5e","ssdeep":"","tlshash":"6121f8de52146c78a7313609209b44809afa42dde9a0b5571e4d8539af205db512bb1c","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-07-22T02:29:07.411425Z","times_seen":92,"resource_available":false,"data":null}},"time_used":1256,"timings":{"blocked":988,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybitit.tynnp8.com/api/goods?limit=20","fqdn":"bybitit.tynnp8.com","domain":"tynnp8.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:48.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tynnp8.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 09:15:45 GMT","end":"Wed, 17 Jun 2026 10:15:27 GMT"},"fingerprint":{"sha1":"B3:45:AE:1F:AB:D7:69:E6:17:E6:0B:D0:BB:7A:42:68:1B:6B:08:92","sha256":"00:C0:4F:4F:EF:B5:4A:D3:5B:5A:1A:2D:90:00:2E:73:9B:C3:7B:6A:64:B0:C0:9C:09:2B:0C:16:3C:07:97:B6"}}},"request":{"raw":"GET /api/goods?limit=20 HTTP/1.1\r\nHost: bybitit.tynnp8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: it\r\nOrigin: https://bybititjue.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:49 GMT\r\ncontent-type: application/text;charset=utf-8\r\ncontent-length: 4204\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncontent-encoding: br\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=IKt6hcGIoLKjYv_kroUpP03n7h.PXlLEPB51SGbREbY-1778171508.6797125-1.0.1.1-LtE3z8LpsvnKLxUoH7LHBLKZBKbI4DHqNq6Pc6pQrOA; HttpOnly; SameSite=None; Secure; Path=/; Domain=bybitit.tynnp8.com\r\nvary: accept-encoding\r\ncf-ray: 9f819df93b6e56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22224,"size_decoded":0,"mime_type":"application/text; charset=utf-8","magic":"ASCII text, with very long lines (22224), with no line terminators","md5":"e3f90b66c0acd11928b9dea66e4edc8f","sha1":"2a8a87723f50b540578fd32640c51e5f7ccf9fe4","sha256":"88fd2ef9c033e68683896e2064ec0922648a619642188e9eee490d60625a5826","sha512":"b304f009e89fe4e839f2f038f05dca400e4742748b92fcba43d4a5e8938647f0901234fde3ef070eabefb6c17048fef4675cc933212158bbc6255c63bfb4f8e8","ssdeep":"192:atQVkY/sX/h7OHVONnqUEdh9DOphxzQNVYB5VWhXhYFjqkIhCli0E9pA:eKXCFIRTTpA","tlshash":"7aa2bfc3a74c0f91f63b32aad06ab5dc9e0098c9277549883737d0ab875f4f0599b17a","first_seen":"2026-05-07T16:32:18.733051Z","last_seen":"2026-05-07T16:32:18.733051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/use-id-9f1818e2.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/use-id-9f1818e2.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bybititjue.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\ncf-cache-status: HIT\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\netag: W/\"69f7bda0-98\"\r\ncontent-encoding: gzip\r\ncf-ray: 9f819dd37b0cb4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"bbecda0114c3b379c6b02da003fce6d4","sha1":"f6cc67f8c7a4739d074d7fda8d622bdb6866861e","sha256":"cda7751b9b53a176dc49d7dfc624005647bb15373560ba6d45ff572478f06d5b","sha512":"744c9d929d5c679a759ca3f3170b75cd9ff4674b949e2e84bb5ecccabd1ca9fa8c71cba6770b8519e599712839bd7c78d674ca5166b1c57d2feefca8b85eb445","ssdeep":"","tlshash":"4ec08c6a744820e22a090cd9e22606aac22a7c10571a99f0f268071609b227a83faf10","first_seen":"2026-05-07T16:32:05.18842Z","last_seen":"2026-05-14T19:07:34.539273Z","times_seen":6,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-e2e83aa7.css","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/index-e2e83aa7.css HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: \"69f7bda0-1c88\"\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\nage: 36135\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd36afbb4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7304,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7303)","md5":"2b9a46018bf0b0a146b45fbbad5fb998","sha1":"66416cad334883af1dfd4412bc0dcef650a049b5","sha256":"e2e83aa79cac2b76f1610502cf3ba2be4c6e14c18051ddb12ee42f84a40e4afb","sha512":"427921da2665424c480696e054b365f02ec49bde3e4b62e19eec9489b7a31fa182daaa670716fc2b8649cb71e21c11dd0675f3c3a76a2d926816a7c8041bbebe","ssdeep":"96:oiCpwZq2ULPIQ4MbBtqjrjp2APG9yweSCe5ctJMkJMXp/MRI:oqsF2jrtwec5+TG","tlshash":"67e15c8eabe8a575df0e79e96746d1e8f278d730cd0293a2f30055990bc3af71602635","first_seen":"2025-05-15T07:28:02.301279Z","last_seen":"2026-07-18T19:59:43.369622Z","times_seen":73,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-50d701a3.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/index-50d701a3.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/assets/index-7f7ddfd5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-267b\"\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\nage: 23771\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd3eb8bb4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9851,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9850)","md5":"294676b36732b666409859f9c7af9aa3","sha1":"bdf1a9e73c931d67e37c6e7db17c7f30cc148293","sha256":"4142655d78be62dc3d9f01e55abb743ff04b87837f328fce716e178f30436056","sha512":"613040c4d8f33d417708507f474979d0980dce37881fc35804dc774e149daba386add8eab69b0f8afc2bf04652c0cae1b3e8fcf41773b831ca811d8b7c9d1b64","ssdeep":"192:y9ITFFatFl5F/UsiDlkvbLiBsVlsvb1/uk5ISh8uuLBbcRvnjJ:y9nl5FylqbeBsV2tuKjh8uu6RvnjJ","tlshash":"0e1208c5f2c5a1728bab6885f0e68051a55d4b08b41e90d1e07f9d003f9eec0bab9f2d","first_seen":"2026-05-07T16:32:05.189444Z","last_seen":"2026-05-14T19:07:34.541601Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moviefile.oss-ap-northeast-1.aliyuncs.com/coins/images/202305204405789714494300160.jpg","fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /coins/images/202305204405789714494300160.jpg HTTP/1.1\r\nHost: moviefile.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1100\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE70D1811A3537D45EFF\r\nAccept-Ranges: bytes\r\nETag: \"8658D5935AB59EE39D15C39226279D46\"\r\nLast-Modified: Sat, 20 May 2023 09:41:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 533354087542411518\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hljVk1q1nuOdFcOSJiedRg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-07-22T23:22:13.560581Z","times_seen":1807,"resource_available":false,"data":null}},"time_used":1774,"timings":{"blocked":761,"dns":1,"connect":251,"send":0,"wait":252,"receive":0,"ssl":507},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybitit.tynnp8.com/api/goods?limit=20","fqdn":"bybitit.tynnp8.com","domain":"tynnp8.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:53.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tynnp8.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 09:15:45 GMT","end":"Wed, 17 Jun 2026 10:15:27 GMT"},"fingerprint":{"sha1":"B3:45:AE:1F:AB:D7:69:E6:17:E6:0B:D0:BB:7A:42:68:1B:6B:08:92","sha256":"00:C0:4F:4F:EF:B5:4A:D3:5B:5A:1A:2D:90:00:2E:73:9B:C3:7B:6A:64:B0:C0:9C:09:2B:0C:16:3C:07:97:B6"}}},"request":{"raw":"GET /api/goods?limit=20 HTTP/1.1\r\nHost: bybitit.tynnp8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: it\r\nOrigin: https://bybititjue.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:54 GMT\r\ncontent-type: application/text;charset=utf-8\r\ncontent-length: 4312\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncontent-encoding: br\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=eo5tvOxck.ukcIW5VqfHdcR4oTErnYJKUUeJFXfjq90-1778171513.6847315-1.0.1.1-QVSPKfrnIHnVz2OwUvUc2Ptgj4IzvRmWZIhbAb2T.E8; HttpOnly; SameSite=None; Secure; Path=/; Domain=bybitit.tynnp8.com\r\nvary: accept-encoding\r\ncf-ray: 9f819e188dc756c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22228,"size_decoded":0,"mime_type":"application/text; charset=utf-8","magic":"ASCII text, with very long lines (22228), with no line terminators","md5":"2e727794a4723456cbe79e6153557d1b","sha1":"fa9a07b9fc075cdf6ccfe394809dc43bbec41a7c","sha256":"9a9cbe933f7adb3e5bd7f7b9e653154a119f2baac8067b7c0056b93ab3c1cc6d","sha512":"7a91d64e039adf29b777c2f12881559ffa3aaa5d63a20dc9291f309b7590f95c1d2d761106080989f56cb89de2f8e08c1d648857b9dda37caa185a02427ffbac","ssdeep":"192:atQVVOsrNyh9/LSyDWOSo4vmB9dhp6BOhCm/whxzQNVYB5VWhXhYFjqkuhClinEo:6kXvY9GFIR56pA","tlshash":"88a2adc3a74c0f91f62b32aad16ab5dc9e0098c9276559883737d0ab875f0f0599b13b","first_seen":"2026-05-07T16:32:18.737933Z","last_seen":"2026-05-07T16:32:18.737933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybitit.tynnp8.com/api/goods?limit=20","fqdn":"bybitit.tynnp8.com","domain":"tynnp8.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:58.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tynnp8.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 09:15:45 GMT","end":"Wed, 17 Jun 2026 10:15:27 GMT"},"fingerprint":{"sha1":"B3:45:AE:1F:AB:D7:69:E6:17:E6:0B:D0:BB:7A:42:68:1B:6B:08:92","sha256":"00:C0:4F:4F:EF:B5:4A:D3:5B:5A:1A:2D:90:00:2E:73:9B:C3:7B:6A:64:B0:C0:9C:09:2B:0C:16:3C:07:97:B6"}}},"request":{"raw":"GET /api/goods?limit=20 HTTP/1.1\r\nHost: bybitit.tynnp8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: it\r\nOrigin: https://bybititjue.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:59 GMT\r\ncontent-type: application/text;charset=utf-8\r\ncontent-length: 4171\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncontent-encoding: br\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=_NQixnTUNorXcgdg0oRnZ5iYymwrJ72wuMGqVpKfMp0-1778171518.6820228-1.0.1.1-NmXrbN_1beqLjzKLavIeft2sp231dnYNwSYHrYKWsQA; HttpOnly; SameSite=None; Secure; Path=/; Domain=bybitit.tynnp8.com\r\nvary: accept-encoding\r\ncf-ray: 9f819e37ceab56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22232,"size_decoded":0,"mime_type":"application/text; charset=utf-8","magic":"ASCII text, with very long lines (22232), with no line terminators","md5":"71aab33376613d2e44379bc5c2205d02","sha1":"7b01f206f17c4d11debc1a4c6adc52c8a5092b63","sha256":"61777013815ec9aaf176a1618d849693b94e82aad32821197ba714024c024dd2","sha512":"eee98ca99570c0c269d1dde8145fbad2fc69f0b56838458b8bb8852e3d1bbfe7e13ab9d85200e24c85e4af9a5519ab0bd256058e2f8951a06de525ed0ad69fef","ssdeep":"192:atQVnOsrljq1+mypXOSo4vmB9dhp6BOhC2/agwhIo9/YnkBXcFLXG1qXhJeslCEj:rXvY9Wp4JHr","tlshash":"7ca2abc3aa4c0f91f62b32a9d066b6dc9e0094ca177549c83737d0ab879f4f0599b13b","first_seen":"2026-05-07T16:32:18.738931Z","last_seen":"2026-05-07T16:32:18.738931Z","times_seen":1,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/assets/index-50d701a3.js","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:42.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /assets/index-50d701a3.js HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bybititjue.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bda0-267b\"\r\nexpires: Fri, 08 May 2026 04:31:42 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd36b0bb4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9851,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9850)","md5":"294676b36732b666409859f9c7af9aa3","sha1":"bdf1a9e73c931d67e37c6e7db17c7f30cc148293","sha256":"4142655d78be62dc3d9f01e55abb743ff04b87837f328fce716e178f30436056","sha512":"613040c4d8f33d417708507f474979d0980dce37881fc35804dc774e149daba386add8eab69b0f8afc2bf04652c0cae1b3e8fcf41773b831ca811d8b7c9d1b64","ssdeep":"192:y9ITFFatFl5F/UsiDlkvbLiBsVlsvb1/uk5ISh8uuLBbcRvnjJ:y9nl5FylqbeBsV2tuKjh8uu6RvnjJ","tlshash":"0e1208c5f2c5a1728bab6885f0e68051a55d4b08b41e90d1e07f9d003f9eec0bab9f2d","first_seen":"2026-05-07T16:32:05.189444Z","last_seen":"2026-05-14T19:07:34.541601Z","times_seen":6,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/images/coinex/banner.png","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:43.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /images/coinex/banner.png HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:43 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f7bd9d-1e28d9\"\r\nexpires: Sat, 06 Jun 2026 16:31:43 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 149666\r\ncf-cache-status: HIT\r\ncf-ray: 9f819dd72f95b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1976537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 929, 8-bit/color RGBA, non-interlaced","md5":"1687b04dc4ef5bcae9fe749a1fa1a5fb","sha1":"07c64b7073140e0380ce563ba6c682baea1bd4bf","sha256":"42516c3dbad9171c9f57521a44b7eedf00000f18b34dbd209c175238b43204a3","sha512":"ba4f53ffd8242707e1ae7cf936a03ac84dac499cf303b2df4cb337aba52af53c77654700875e177132b1b0194d15a7920d87a9ef69653d47a4b2587cdf8962e6","ssdeep":"24576:7tmTPPJ3RDyIixHY7yL7U10qGUZwjQjxDgeCUNMf8t/Tt:7tm79JyjGyLAiqGwqQNDCU6E1J","tlshash":"c12533938ac15bfcc44f75458dd170a43d175ae9234d03a339b8deae3488f1e1ac9b9a","first_seen":"2026-04-02T03:19:35.294286Z","last_seen":"2026-07-18T19:59:43.388997Z","times_seen":31,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/metal/silver--big.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /metal/silver--big.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"fc5b38f55a02a58d5160671aa2da6eb9\"\r\nlast-modified: Wed, 08 Sep 2021 09:03:08 GMT\r\nx-amz-id-2: JYtZCco3PcIJwE/oBwIRIkdSy+fjHJ63L/pmSaf9HFgN3gBKQ+C17MIHhqbgUnY0ABBGliYEztY=\r\nx-amz-request-id: D0BNPHW27YPAJ4PD\r\nx-amz-meta-hash: fc5b38f55a02a58d5160671aa2da6eb9\r\ncdn-proxyver: 1.51\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/26/2026 20:11:26\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 9cbec90f9f950c3f3f0d98e60bdc1874\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":902,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (902), with no line terminators","md5":"fc5b38f55a02a58d5160671aa2da6eb9","sha1":"7c88c58a8d4d4f5ca21705f33daa303fd12b8498","sha256":"a107de36cd8aac17c3ebb213e8affcd36f489347618d62c267776c350b59a1d2","sha512":"aaa12bb59760f19dc2ddfde6ee6a3556b53219bb218320a3c060a0678ea770729fc5d780ad778321a166bc272ffd6070d214861b01faab5a0a2d56d3248668f4","ssdeep":"","tlshash":"3e1100e7d3d8944c9615cfd42e1125ed336a14eebc6081cbc3250e30a710e6dee40d39","first_seen":"2025-08-03T18:12:41.874125Z","last_seen":"2026-07-19T04:12:35.785414Z","times_seen":61,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":100,"dns":1,"connect":1,"send":0,"wait":1,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moviefile.oss-ap-northeast-1.aliyuncs.com/coins/images/202305204405790417207992320.jpg","fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /coins/images/202305204405790417207992320.jpg HTTP/1.1\r\nHost: moviefile.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 352\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71BC253032315AA85F\r\nAccept-Ranges: bytes\r\nETag: \"0BF47A0FEBA1F8E68202E7FC29FED743\"\r\nLast-Modified: Sat, 20 May 2023 09:41:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 50722347791479226\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: C/R6D+uh+OaCAuf8Kf7XQw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 4-bit colormap, non-interlaced","md5":"0bf47a0feba1f8e68202e7fc29fed743","sha1":"e2df3bc97f7787f425db00bcbfc9baf6314685d5","sha256":"e7469b8f5e95efd43da015f656e3fd53c2ca2e6ce49d238820a63cdffcafcea5","sha512":"f3f2113fd458bd7098271be93f22e8f2fa3196cfcf38c060b6356cb4fb90be88bbb3751084b25e6d9e82a2e3ba306212e431a5f6a82db757c17b817597bd210f","ssdeep":"","tlshash":"14e0f82b875ecd47e8a101336a0682c305a22a2bf19282634482ea031c0160308d8407","first_seen":"2024-10-18T13:48:19.560645Z","last_seen":"2026-07-21T11:23:30.634756Z","times_seen":151,"resource_available":false,"data":null}},"time_used":1067,"timings":{"blocked":-1,"dns":0,"connect":265,"send":0,"wait":267,"receive":0,"ssl":536},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moviefile.oss-ap-northeast-1.aliyuncs.com/coins/images/202305204405791193699491840.jpg","fqdn":"moviefile.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.80.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:44.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /coins/images/202305204405791193699491840.jpg HTTP/1.1\r\nHost: moviefile.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 07 May 2026 16:31:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 984\r\nConnection: keep-alive\r\nx-oss-request-id: 69FCBE71ACB1D33237F75785\r\nAccept-Ranges: bytes\r\nETag: \"7A063856792E9794C85DFF019142D862\"\r\nLast-Modified: Sat, 20 May 2023 09:41:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 855771439892940067\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: egY4Vnkul5TIXf8BkULYYg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"7a063856792e9794c85dff019142d862","sha1":"98d1e09a7c16faba49b46d51187ce325e38bf081","sha256":"5c19393f08eb30bdb7a188ccf94d0f2d18cbe184405943ae68d25ebe75298c4b","sha512":"1ba073f22eab473bc854e4b22c2f19c773263359ebae68b94b00f489dacd2fae7b8d7310f1c83984a2ab7179868c06839ee472d01a27e94efe5c720f296fb04a","ssdeep":"","tlshash":"5d1198558ef1787bf4f2c26e2bb10ad85af507811f536009dc00a0196b6a5984a03151","first_seen":"2024-10-18T13:48:19.534786Z","last_seen":"2026-07-20T01:49:55.730382Z","times_seen":56,"resource_available":false,"data":null}},"time_used":1477,"timings":{"blocked":1219,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybititjue.com/images/coinex/logo.svg","fqdn":"bybititjue.com","domain":"bybititjue.com","tld":"com"},"ip":{"addr":"104.18.20.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:43.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bybititjue.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:09:09 GMT","end":"Mon, 03 Aug 2026 15:09:08 GMT"},"fingerprint":{"sha1":"CB:0C:68:CA:2D:3B:A2:A9:00:E2:B3:5A:63:74:FC:AB:7E:A6:69:B6","sha256":"C7:87:64:44:67:5C:A2:BA:4E:77:67:B8:C1:A5:75:4E:0B:89:EE:48:D9:7B:42:DF:A2:67:73:1A:58:33:9E:73"}}},"request":{"raw":"GET /images/coinex/logo.svg HTTP/1.1\r\nHost: bybititjue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybititjue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 21:26:53 GMT\r\nvary: Accept-Encoding\r\netag: \"69f7bd9d-5bc\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=10800\r\nexpires: Thu, 07 May 2026 19:31:43 GMT\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9f819dd73f9cb4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e592090eed1fb82a0f2fa307fd4defd","sha1":"aed6448de92999c50b5684867c133fe2f38f47c6","sha256":"05197bc478bf477d3fb7f4b7f2e87a8c81501fe5be9fcc1700eeebf0ba0a0847","sha512":"ad1a202cb1c39b0dcb0e401714299ef0cf5ee72005c32af0b78d795af2a4521bdd8396421a9bd992ad082a716b3f23d7b7ff95f6736e6120d16a6b57b66070b7","ssdeep":"","tlshash":"133112ca73e9e6d4c644aba442697e3b702171f69dc5a350cf526a0734d440f08d4de8","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-07-05T11:45:18.832476Z","times_seen":163,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"bybititjue.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"bybititjue.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybitit.tynnp8.com/api/goods?limit=20","fqdn":"bybitit.tynnp8.com","domain":"tynnp8.com","tld":"com"},"ip":{"addr":"104.18.12.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybititjue.com/","date":"2026-05-07T16:31:53.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tynnp8.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 09:15:45 GMT","end":"Wed, 17 Jun 2026 10:15:27 GMT"},"fingerprint":{"sha1":"B3:45:AE:1F:AB:D7:69:E6:17:E6:0B:D0:BB:7A:42:68:1B:6B:08:92","sha256":"00:C0:4F:4F:EF:B5:4A:D3:5B:5A:1A:2D:90:00:2E:73:9B:C3:7B:6A:64:B0:C0:9C:09:2B:0C:16:3C:07:97:B6"}}},"request":{"raw":"OPTIONS /api/goods?limit=20 HTTP/1.1\r\nHost: bybitit.tynnp8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://bybititjue.com/\r\nOrigin: https://bybititjue.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 16:31:53 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=E7IagRLH9WJIVmcV3G.Fj9yA.QKlDRZ0Kwxk47QaB3k-1778171513.4029522-1.0.1.1-E.LQHZbFcQJEbBsfEJ_g4XXNTqAmMvIArWlN0u_xkU8; HttpOnly; SameSite=None; Secure; Path=/; Domain=bybitit.tynnp8.com\r\ncf-ray: 9f819e16cbc556c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}