{"report_id":"8b42ef91-5306-443f-aba8-d20d05f89128","version":6,"status":"done","tags":[],"date":"2026-02-03T09:40:55Z","url":{"schema":"https","addr":"bybit-p2pads.com/","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":0,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"bybit-p2pads.com/","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"title":"Покупка USDT за RUB через криптотрейдинг на Bybit P2P","dom":{"size":281690,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (56996)","md5":"247f0c970a8fdcbb19d7a0c8c6215bb6","sha1":"abfc26092884066deb082739d8366f3e05080478","sha256":"e92fcd4b578c3d5e800cec863f8b67e77054077cfc56f4b0174ffb2636ca69ff","sha512":"eda0ef757bda689f9446a28b6f8c2c47d62ea25051d2ffabe19434481755d2f961459418f3b7c8f0a1d49aa8194dcd068624fd2e656dab2eecd94eff5a50fc52","ssdeep":"6144:th+sQCEuvrr0OZ0MdSu4vsAMzKvEMAYMyiyuzXB0cxwqoOFVz5mS9vH8:twsDiO4JN0wnOFVz5mS1H8","tlshash":"b9543a31406a20ba052775e2f6d13b0a3586d1afe9039ac4f2ec47ad6fc7df98d13169","dom_hash":"domhash0719d6c24c9c127fb7e629a1f2b8a1ec","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bybit-p2pads.com/","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":0,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T09:40:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bybit-p2pads.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bybit-p2pads.com","ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-01-29","domain_rank":0,"first_seen":"2026-02-03T09:11:51.009518Z","last_seen":"2026-02-03T09:11:51.009518Z","alert_count":10,"request_count":10,"received_data":1107927,"sent_data":4775,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.socket.io","ip":{"addr":"3.167.2.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2010-04-18","domain_rank":199187,"first_seen":"2015-03-23T22:14:03Z","last_seen":"2026-01-28T14:03:02.856273Z","alert_count":0,"request_count":1,"received_data":44920,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bybit-p2pads.com/","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec15e58ebb8abfba7d26a90c3794f546","sha1":"f891c0447f7ca8372e2684df0795db90a6645c94","sha256":"5072cfc9322af611b8a798ad553bdf4bfa0e4f6f45557f6e89253403e85c3374","sha512":"2249eb7ab0f8dcb1ca3591d6eb434857111b7c412df90410c5280ad43021803d3c4f0595e2c64618ffd07aa3cf47f3300d9c74ca85598b97bc448d13186d0dd4","ssdeep":"","tlshash":"16f09e2bbfb846b488ff9552a0c96a883f051082910b8d551cfc8e001380dc368b51c3","size":466,"data":"","first_seen":"2026-02-03T09:11:55.226689Z","last_seen":"2026-02-03T09:40:57.185343Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab7ff4e90aa66c5840a9f43ed9a6a6b5","sha1":"8ed68aaf165f5f8c7c922f13a5e81029eefe772e","sha256":"8ae2ddf793e409e0cd881653f592188b7219fe8ecba3dce5b7a78ed238ed54ff","sha512":"773c10eb9882d0eb3c77b0f058e1325e18e10c3da11ef54c58cd0a67335d75ed0c26dc7d3f4eb7cac4f3f48e892114d8387d10d48ee9668d9ceae2ad69c4b00e","ssdeep":"","tlshash":"3201b127b4510c11a68560d8cc426ee86270e077b977e7a3786f06380fd982d93379c3","size":807,"data":"","first_seen":"2026-02-03T09:11:55.228055Z","last_seen":"2026-02-03T09:40:57.187846Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.5.4/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"3.167.2.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db9bf2a88958a37857fb8f7b56e0fe04","sha1":"6bac03d130a224746a6ab405f519535088a6708e","sha256":"18a36a927dac54650b18b903f8f8778219e02e13946e581d9b3e1e4995f7435b","sha512":"1d310d1eb910fcfd0d18315de6793a89b56d0a470cee386bd9cec6caf5e9e4efb85fa3b97103bd021a85cccf8c75e062bec5fb1e8cacd89ee9a76c1d80ca42bf","ssdeep":"384:1ZS0CCnnsl8gtR/Uue8+iCMN0Dkiw2Jh4RWdfGdAjbp2zhPL8cYR95jRPKDxp5C0:/CCn+hxt6kBxkdfGyyDi75lif/5Y2","tlshash":"f313b588f291b06187e37165443f110ba27a74696489c1ccfa35d9f19eb8ece7123f79","size":44191,"data":"","first_seen":"2023-03-12T17:27:12Z","last_seen":"2026-07-21T15:37:28.398324Z","times_seen":1064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e96d051905ff26ea6dfc5267ac1e9fe3","sha1":"034a3378a9627d9abf97fcc2ffe7c4d0418f290d","sha256":"28b7dbc7986d958515e622f6c82fc45878b61ca843396f3cfee1a4e0d84a49e4","sha512":"bf07a4b621ea0ffa8635da9dab8e25d443156f2d67039bf33ff54e699c2dbd2eea560a70b2673e767b4f69efd550a3cf01a83ba7d3c0e6cb655fa80f189fc304","ssdeep":"","tlshash":"b231102f24770a3047f7a8a697875144362350472a05ee7d3edc8a2a0f86ec185ffbd9","size":1805,"data":"","first_seen":"2026-02-03T09:11:55.229618Z","last_seen":"2026-02-03T09:40:57.18907Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3acded4e4cd42f0753147ff192f5f505","sha1":"3f57b95907798153f5d17d0c2e6271c95442db23","sha256":"76809e7d66fff74d01aa1b0686078ddde2d8bb057fbf2f7ba1170381630f02f0","sha512":"ce8b06d8102b80812207e5afc871c7956c124071d0bc3f90c66a010621f77f15c9fd059dd4fe8b3d04478ea498dc75cfff407ca3fe5ec030f092c764dfc12e03","ssdeep":"","tlshash":"52e0203805772574027751ab2bd743e570a3008fb005d26d3e7cca9c3f95c5067e45e6","size":361,"data":"","first_seen":"2026-02-03T09:11:55.230995Z","last_seen":"2026-02-03T09:40:57.190213Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd15d0c11bc4f865f79b916db0f7518a","sha1":"754893705b19325f9a92db241c828a56bfecc69a","sha256":"52b56a4c31ce48b17945d7b7070f4f71f38cb0ea31358d2a18d890d9b794a03b","sha512":"0fe8a8f0efd218d2b8d5c5d6ad1822f31f9f884b155e217316171643bb36ea02e49586ec458b8746ccb4b3ce04905e4c5447a165192ceb321880878367b48ce1","ssdeep":"","tlshash":"3b31fe2630b358740a271dabe3874e9d3a12105bfe83d7593d9e4e190fe3aa005e61dd","size":1538,"data":"","first_seen":"2026-02-03T09:11:55.249412Z","last_seen":"2026-02-03T09:40:57.191378Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b1258a0cc0eb8462548ba5c304fa285","sha1":"6575c43c2769f73e2d1821199ea76d30c864b604","sha256":"5375fdb1b3ec735a51a568f1b79cabb67f0a2498e5ba60819b805505031d7538","sha512":"a8b1c2d165e790bbb1420a52c02a08be2922445ec1b2dd504fb8efe6e8203f3cb23beba32b177dcf0d4c6a21c09a628e76b61bfcac8f5d84431cfe1f7f2adeaa","ssdeep":"","tlshash":"5a01abbb30230241a5a9a0eb114653502224f32139cecb81152f5d057dd263ca2f2fae","size":824,"data":"","first_seen":"2026-02-03T09:11:55.252273Z","last_seen":"2026-02-03T09:40:57.192569Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"83fcded5b68103ac4954677c44a8b964","sha1":"44f5017cf29b4a3752c6dfce949340396d62767f","sha256":"022863cbce495c664f46cf3c1d7252006dacfeff793aef0deba7daf29db63e18","sha512":"0886273b14e44d6d4064d3ab5f26fe279051ed147aa9f91691fcaf620cc81af1eeb57223d2817bddb77799af638c155f2b29af40326a3958598fd0e70a282248","ssdeep":"","tlshash":"35f0c99022f0783448763842e24a6ed97e1d60c9fc8006f9b4ed8d082fc07d008f9ad3","size":506,"data":"","first_seen":"2026-02-03T09:11:55.254617Z","last_seen":"2026-02-03T09:40:57.193706Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2ac483a8aece710b8cfe2fb6a1b7673","sha1":"44fdfacda3ea3196b9e8540af1d700b722ae2483","sha256":"d88b7cdbf3305b0234685a0d3047fb701621ef7f96d9b5053e728c3814e728f3","sha512":"6eed8ed3707e61136883cc797157d215c4cb8ceb9fc3a95aa009a26e5131675d9599ac494e1f1ce5f079bcc5bc065a37472733260e755a61007fef467329ffce","ssdeep":"768:qNL25EXXS2SpFgL8OsTvuBkrQC5BIWH0u4UQan:qNy5OX3SHuBkNBtHV","tlshash":"d813841421bb04a44923b067ebcb648d357710bf3946cada39dd0f193fd25244ab6afb","size":44003,"data":"","first_seen":"2026-02-03T09:11:55.256848Z","last_seen":"2026-02-03T09:40:57.194747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"wss","addr":"bybit-p2pads.com/socket.io/?EIO=4\u0026transport=websocket\u0026sid=kFMILg7VF4dr7sCXAAFE","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bybit-p2pads.com/","date":"2026-02-03T09:40:33.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybit-p2pads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 18:14:01 GMT","end":"Wed, 29 Apr 2026 18:14:00 GMT"},"fingerprint":{"sha1":"79:9B:6D:C3:C0:D8:94:26:1E:F4:A2:45:E7:74:6A:C2:55:79:41:11","sha256":"4E:BF:26:90:03:77:CF:EF:2F:15:73:9F:25:7F:43:64:EC:17:80:EE:21:52:02:EE:87:F3:A2:4A:9D:25:E7:8E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket\u0026sid=kFMILg7VF4dr7sCXAAFE HTTP/1.1\r\nHost: bybit-p2pads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bybit-p2pads.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Ko3Pl7FfcHvxBfzqQfwgkw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 03 Feb 2026 09:40:33 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: c1GkgVvw6n+scj+GZ90MQSFplEU=\r\nSec-WebSocket-Extensions: permessage-deflate\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T21:51:47.145514Z","times_seen":17513839,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":1,"connect":24,"send":0,"wait":25,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bybit-p2pads.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/socket.io/?EIO=4\u0026transport=polling\u0026t=PmYu0dX\u0026sid=kFMILg7VF4dr7sCXAAFE","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybit-p2pads.com/","date":"2026-02-03T09:40:33.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybit-p2pads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 18:14:01 GMT","end":"Wed, 29 Apr 2026 18:14:00 GMT"},"fingerprint":{"sha1":"79:9B:6D:C3:C0:D8:94:26:1E:F4:A2:45:E7:74:6A:C2:55:79:41:11","sha256":"4E:BF:26:90:03:77:CF:EF:2F:15:73:9F:25:7F:43:64:EC:17:80:EE:21:52:02:EE:87:F3:A2:4A:9D:25:E7:8E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=PmYu0dX\u0026sid=kFMILg7VF4dr7sCXAAFE HTTP/1.1\r\nHost: bybit-p2pads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybit-p2pads.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 03 Feb 2026 09:40:34 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"very short file (no magic)","md5":"1679091c5a880faf6fb5e6087eb1b2dc","sha1":"c1dfd96eea8cc2b62785275bca38ac261256e278","sha256":"e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683","sha512":"3c9ad55147a7144f6067327c3b82ea70e7c5426add9ceea4d07dc2902239bf9e049b88625eb65d014a7718f79354608cab0921782c643f0208983fffa3582e40","ssdeep":"","tlshash":"c700000000030000c00000300000000000000000000c00000000000000000000000000","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-07-24T21:53:45.589137Z","times_seen":11974,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bybit-p2pads.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T09:40:32.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybit-p2pads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 18:14:01 GMT","end":"Wed, 29 Apr 2026 18:14:00 GMT"},"fingerprint":{"sha1":"79:9B:6D:C3:C0:D8:94:26:1E:F4:A2:45:E7:74:6A:C2:55:79:41:11","sha256":"4E:BF:26:90:03:77:CF:EF:2F:15:73:9F:25:7F:43:64:EC:17:80:EE:21:52:02:EE:87:F3:A2:4A:9D:25:E7:8E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bybit-p2pads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 03 Feb 2026 09:40:33 GMT\r\nContent-Type: text/html\r\nLast-Modified: Fri, 30 Jan 2026 17:18:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"697ce7fa-45273\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":283251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (56980)","md5":"189953eb18705579fdc976129a788c78","sha1":"f6d1191b80f5d3acfa29e857ab54466eef43756e","sha256":"eaaa55571fd9c3c236084ca4ff2938170e1ebd4226ba1ce8bb1ccac57fc3a1f8","sha512":"3b3606274edaf87128dd3be92e81d2bd8f1d214f9fa17cd3af2e7715711b904b15dfb4d78eb68328b1ae5e465d4b213151ada4bcd010a2f6aae99f321ada2994","ssdeep":"6144:Oh+sQyEZhrX8W18MlKK430YMHijsgYgMe6S2vDN8EZw5nzv25mS9vH8:OwsyMq4N1ww5nzv25mS1H8","tlshash":"0c543a31406a20ba052779e2f6d13b093586d1afea039ac4f2ec479d6fc7df98d13169","first_seen":"2026-02-03T09:11:55.220827Z","last_seen":"2026-02-03T09:40:57.159472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":86,"dns":34,"connect":25,"send":0,"wait":51,"receive":51,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bybit-p2pads.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/css/main.css","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bybit-p2pads.com/","date":"2026-02-03T09:40:33.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybit-p2pads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 18:14:01 GMT","end":"Wed, 29 Apr 2026 18:14:00 GMT"},"fingerprint":{"sha1":"79:9B:6D:C3:C0:D8:94:26:1E:F4:A2:45:E7:74:6A:C2:55:79:41:11","sha256":"4E:BF:26:90:03:77:CF:EF:2F:15:73:9F:25:7F:43:64:EC:17:80:EE:21:52:02:EE:87:F3:A2:4A:9D:25:E7:8E"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: bybit-p2pads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybit-p2pads.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 03 Feb 2026 09:40:33 GMT\r\nContent-Type: text/css\r\nContent-Length: 14435\r\nLast-Modified: Fri, 30 Jan 2026 17:18:57 GMT\r\nConnection: keep-alive\r\nETag: \"697ce801-3863\"\r\nExpires: Tue, 10 Feb 2026 09:40:33 GMT\r\nCache-Control: max-age=604800, public, max-age=604800, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14435,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f3798b6063983d4d2730104f6c608167","sha1":"dc82274e14e8a1190f9cc349f7361155faa95ca8","sha256":"22e07a0af2b276afa8604bfea6ef00eb6d89dba7d5cf83eef6079ddb954de968","sha512":"34d82976cbbcc77a5f0b3a2347fbfe8ee53329b321789515746c885c40a629778f9e2ab1724f4f24f40a44683fa5046cbd2300cb4cc27339a39cf2af5d2efff2","ssdeep":"384:7FI5QNLOTYtFR6zFRFMKC5F/aSWw71KFQgKpZwzFP7WwTu9CAMh:7F+QNLOTYtFR6zFRFMKC5F/aSd0FN5","tlshash":"40520f8b96670905791be0582fb5cf42725e9083904eeebd3fc8718c8f8d1c5a5b6bd8","first_seen":"2026-02-03T09:11:55.223248Z","last_seen":"2026-02-03T09:40:57.163115Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bybit-p2pads.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.5.4/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"3.167.2.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bybit-p2pads.com/","date":"2026-02-03T09:40:33.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.socket.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 18 Aug 2025 00:00:00 GMT","end":"Mon, 14 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:31:34:3C:FE:6A:94:47:2E:CD:E0:26:D6:4D:DE:E6:D9:31:A7:E3","sha256":"C2:34:E7:66:CF:D6:AF:AA:30:42:B0:50:F9:74:CE:BC:8E:BA:E3:A4:6E:8D:7D:A2:7C:10:10:F5:12:12:6A:A6"}}},"request":{"raw":"GET /4.5.4/socket.io.min.js HTTP/1.1\r\nHost: cdn.socket.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybit-p2pads.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"socket.io.min.js\"\r\ncontent-encoding: gzip\r\ndate: Fri, 10 Oct 2025 17:01:37 GMT\r\netag: W/\"db9bf2a88958a37857fb8f7b56e0fe04\"\r\nlast-modified: Thu, 25 Sep 2025 00:49:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: fra1::r755p-1760115697332-c663c926d8c6\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 485b6c89886d646bf4c92b32182787ea.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: -4Fc1iBzykqCsabcksJApb1vFJ7Iu4OrKj0qj28bQn8DsaIllO3p6w==\r\nage: 11350283\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":44191,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44052)","md5":"db9bf2a88958a37857fb8f7b56e0fe04","sha1":"6bac03d130a224746a6ab405f519535088a6708e","sha256":"18a36a927dac54650b18b903f8f8778219e02e13946e581d9b3e1e4995f7435b","sha512":"1d310d1eb910fcfd0d18315de6793a89b56d0a470cee386bd9cec6caf5e9e4efb85fa3b97103bd021a85cccf8c75e062bec5fb1e8cacd89ee9a76c1d80ca42bf","ssdeep":"384:1ZS0CCnnsl8gtR/Uue8+iCMN0Dkiw2Jh4RWdfGdAjbp2zhPL8cYR95jRPKDxp5C0:/CCn+hxt6kBxkdfGyyDi75lif/5Y2","tlshash":"f313b588f291b06187e37165443f110ba27a74696489c1ccfa35d9f19eb8ece7123f79","first_seen":"2023-03-12T17:27:12Z","last_seen":"2026-07-21T15:37:28.398324Z","times_seen":1064,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":34,"dns":32,"connect":1,"send":0,"wait":1,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/api/data?page=default","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bybit-p2pads.com/","date":"2026-02-03T09:40:33.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybit-p2pads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 18:14:01 GMT","end":"Wed, 29 Apr 2026 18:14:00 GMT"},"fingerprint":{"sha1":"79:9B:6D:C3:C0:D8:94:26:1E:F4:A2:45:E7:74:6A:C2:55:79:41:11","sha256":"4E:BF:26:90:03:77:CF:EF:2F:15:73:9F:25:7F:43:64:EC:17:80:EE:21:52:02:EE:87:F3:A2:4A:9D:25:E7:8E"}}},"request":{"raw":"GET /api/data?page=default HTTP/1.1\r\nHost: bybit-p2pads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bybit-p2pads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 03 Feb 2026 09:40:33 GMT\r\nContent-Type: application/json\r\nContent-Length: 1042\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1042,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8605e4a1b7eaf4d84583a2ad81cdb84b","sha1":"a798bcec8c791df1b2594ba5c49f3c695d29252c","sha256":"ba776a36be2a394d385b12e88def19c5e0d12c4a4132a9f213d40ee1645585ae","sha512":"8da634fc20cc268dd3fb1d648e907b16ae3945839065d68184e6c8063030d3a7270f3ee845982164fe130c1951b0d1e37455cddd804b5de34f8ba66f4fc7a5de","ssdeep":"","tlshash":"5e11be24e6b80ef7814c6261983e050aa1b26553d987ffe93bbe020e1f0e10f417a51f","first_seen":"2026-02-03T09:11:55.214433Z","last_seen":"2026-02-03T09:40:57.167926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bybit-p2pads.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/socket.io/?EIO=4\u0026transport=polling\u0026t=PmYu0cT\u0026sid=kFMILg7VF4dr7sCXAAFE","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybit-p2pads.com/","date":"2026-02-03T09:40:33.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybit-p2pads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 18:14:01 GMT","end":"Wed, 29 Apr 2026 18:14:00 GMT"},"fingerprint":{"sha1":"79:9B:6D:C3:C0:D8:94:26:1E:F4:A2:45:E7:74:6A:C2:55:79:41:11","sha256":"4E:BF:26:90:03:77:CF:EF:2F:15:73:9F:25:7F:43:64:EC:17:80:EE:21:52:02:EE:87:F3:A2:4A:9D:25:E7:8E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=PmYu0cT\u0026sid=kFMILg7VF4dr7sCXAAFE HTTP/1.1\r\nHost: bybit-p2pads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybit-p2pads.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 03 Feb 2026 09:40:33 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"data","md5":"d7b6d74336f32d951274a19d4a74d749","sha1":"0965a8fe8402aae9843f0a3a70260112dbceddbd","sha256":"b9adf2f0fe306d4cf94a8791df9ef1a3a5b30f529fc18a05e944cb6663005827","sha512":"e02b32312a42352a6c0210d86fc26cb4b29fb6d3f5188a026406d00c1ebcfabecc17cbf6ce1b50d2221b12c892b3fff469897ef87cb721b01f75e78186cc32d3","ssdeep":"","tlshash":"08a012101a42180d9a0104c26c215180d21455146342009045884c318226a5460622d1","first_seen":"2026-02-03T09:40:57.170215Z","last_seen":"2026-02-03T09:40:57.170215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bybit-p2pads.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/api/data?page=default","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bybit-p2pads.com/","date":"2026-02-03T09:40:33.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybit-p2pads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 18:14:01 GMT","end":"Wed, 29 Apr 2026 18:14:00 GMT"},"fingerprint":{"sha1":"79:9B:6D:C3:C0:D8:94:26:1E:F4:A2:45:E7:74:6A:C2:55:79:41:11","sha256":"4E:BF:26:90:03:77:CF:EF:2F:15:73:9F:25:7F:43:64:EC:17:80:EE:21:52:02:EE:87:F3:A2:4A:9D:25:E7:8E"}}},"request":{"raw":"GET /api/data?page=default HTTP/1.1\r\nHost: bybit-p2pads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bybit-p2pads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 03 Feb 2026 09:40:33 GMT\r\nContent-Type: application/json\r\nContent-Length: 1042\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1042,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8605e4a1b7eaf4d84583a2ad81cdb84b","sha1":"a798bcec8c791df1b2594ba5c49f3c695d29252c","sha256":"ba776a36be2a394d385b12e88def19c5e0d12c4a4132a9f213d40ee1645585ae","sha512":"8da634fc20cc268dd3fb1d648e907b16ae3945839065d68184e6c8063030d3a7270f3ee845982164fe130c1951b0d1e37455cddd804b5de34f8ba66f4fc7a5de","ssdeep":"","tlshash":"5e11be24e6b80ef7814c6261983e050aa1b26553d987ffe93bbe020e1f0e10f417a51f","first_seen":"2026-02-03T09:11:55.214433Z","last_seen":"2026-02-03T09:40:57.167926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bybit-p2pads.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/css/style.css","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bybit-p2pads.com/","date":"2026-02-03T09:40:33.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybit-p2pads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 18:14:01 GMT","end":"Wed, 29 Apr 2026 18:14:00 GMT"},"fingerprint":{"sha1":"79:9B:6D:C3:C0:D8:94:26:1E:F4:A2:45:E7:74:6A:C2:55:79:41:11","sha256":"4E:BF:26:90:03:77:CF:EF:2F:15:73:9F:25:7F:43:64:EC:17:80:EE:21:52:02:EE:87:F3:A2:4A:9D:25:E7:8E"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: bybit-p2pads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybit-p2pads.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 03 Feb 2026 09:40:33 GMT\r\nContent-Type: text/css\r\nContent-Length: 805428\r\nLast-Modified: Fri, 30 Jan 2026 17:19:03 GMT\r\nConnection: keep-alive\r\nETag: \"697ce807-c4a34\"\r\nExpires: Tue, 10 Feb 2026 09:40:33 GMT\r\nCache-Control: max-age=604800, public, max-age=604800, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":805428,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"29079147667ef3e48e7e5231cdf2323b","sha1":"04cfcd3ffdab67bb727154e06a179411e339565d","sha256":"02a821496dab1807203121dee8c6d6a44d161c961cfdf9c4d7d4fa0aa23e19b3","sha512":"eb66bd1acfb30e90a91b5fb7461fd79d5d9c8e81427b3f642ee7359398eb9cf7fb4fbc9d8caa7d6d54044ff135262901838f4ff5fb77e307623a15973862fe8b","ssdeep":"12288:tCifQMIPgH5rSqWvv4BvSZCEgitnSYLYRlJ7T+5FmTCT50mpJD3NV:4JL","tlshash":"06051b9adaf51a34352ba16eb6518a043b2a9003d80ade78ffe5205c8fc43fdd573749","first_seen":"2026-02-03T09:11:55.225026Z","last_seen":"2026-02-03T09:40:57.172375Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":25,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bybit-p2pads.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/socket.io/?EIO=4\u0026transport=polling\u0026t=PmYu0bj","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybit-p2pads.com/","date":"2026-02-03T09:40:33.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybit-p2pads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 18:14:01 GMT","end":"Wed, 29 Apr 2026 18:14:00 GMT"},"fingerprint":{"sha1":"79:9B:6D:C3:C0:D8:94:26:1E:F4:A2:45:E7:74:6A:C2:55:79:41:11","sha256":"4E:BF:26:90:03:77:CF:EF:2F:15:73:9F:25:7F:43:64:EC:17:80:EE:21:52:02:EE:87:F3:A2:4A:9D:25:E7:8E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=PmYu0bj HTTP/1.1\r\nHost: bybit-p2pads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybit-p2pads.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 03 Feb 2026 09:40:33 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e296cc9c4ad920577aec742b9d17754e","sha1":"e4775897fce89a69d4a42a1bb6bddccc5f1a156a","sha256":"5d9066c7cbc205aad185c4fde3234ba9944a505f71013173f6de0c7c5f01a2a5","sha512":"cc4a0335c1db2d0a06b9ebefe74907235bf21f1a840e4b5d178da0406a05ed4566d60a9be51649953320340ecff8fa62baf69471e8b05e288123e3109b96ff7f","ssdeep":"","tlshash":"dfb092c8869d93c5eeb4b68076e3aa094968789e99c988ec62244688895b5203012f2b","first_seen":"2026-02-03T09:40:57.181309Z","last_seen":"2026-02-03T09:40:57.181309Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bybit-p2pads.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybit-p2pads.com/socket.io/?EIO=4\u0026transport=polling\u0026t=PmYu0cQ\u0026sid=kFMILg7VF4dr7sCXAAFE","fqdn":"bybit-p2pads.com","domain":"bybit-p2pads.com","tld":"com"},"ip":{"addr":"83.217.209.198","port":443,"asn":215826,"as":"Partner Hosting LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bybit-p2pads.com/","date":"2026-02-03T09:40:33.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybit-p2pads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 18:14:01 GMT","end":"Wed, 29 Apr 2026 18:14:00 GMT"},"fingerprint":{"sha1":"79:9B:6D:C3:C0:D8:94:26:1E:F4:A2:45:E7:74:6A:C2:55:79:41:11","sha256":"4E:BF:26:90:03:77:CF:EF:2F:15:73:9F:25:7F:43:64:EC:17:80:EE:21:52:02:EE:87:F3:A2:4A:9D:25:E7:8E"}}},"request":{"raw":"POST /socket.io/?EIO=4\u0026transport=polling\u0026t=PmYu0cQ\u0026sid=kFMILg7VF4dr7sCXAAFE HTTP/1.1\r\nHost: bybit-p2pads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 2\r\nOrigin: https://bybit-p2pads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybit-p2pads.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"40"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 03 Feb 2026 09:40:33 GMT\r\nContent-Type: text/plain\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://bybit-p2pads.com\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-07-24T21:49:56.483107Z","times_seen":354775,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bybit-p2pads.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}