{"report_id":"8c994970-c79e-407c-bc66-e20f30ddd456","version":6,"status":"done","tags":[],"date":"2026-06-01T14:29:43Z","url":{"schema":"http","addr":"billynatinal.com","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"title":"DEV_TITLE","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"billynatinal.com","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-06T14:29:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":17,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:21Z","timestamp":1780324161,"ip_dst":{"addr":"Client IP","port":50698,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 23","source":"{\"timestamp\":\"2026-06-01T14:29:21.849339+0000\",\"flow_id\":2103054748969870,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"118.107.25.167\",\"src_port\":443,\"dest_ip\":\"172.18.0.7\",\"dest_port\":50698,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400022,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 23\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-06-01T14:29:21.551822+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:26Z","timestamp":1780324166,"ip_dst":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":50968,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:26.733044+0000\",\"flow_id\":1546126340021185,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50968,\"dest_ip\":\"47.79.64.182\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dfvip.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-06-01T14:29:26.220097+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:26Z","timestamp":1780324166,"ip_dst":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":50954,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:26.752407+0000\",\"flow_id\":388533869501253,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50954,\"dest_ip\":\"47.79.64.182\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dfvip.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-06-01T14:29:26.219973+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:26Z","timestamp":1780324166,"ip_dst":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":50928,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:26.759902+0000\",\"flow_id\":1403864138275488,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50928,\"dest_ip\":\"47.79.64.182\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dfvip.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":900,\"bytes_toclient\":6037,\"start\":\"2026-06-01T14:29:26.219808+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:26Z","timestamp":1780324166,"ip_dst":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":50912,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:26.763611+0000\",\"flow_id\":2011516111313493,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50912,\"dest_ip\":\"47.79.64.182\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dfvip.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":900,\"bytes_toclient\":6037,\"start\":\"2026-06-01T14:29:26.219733+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:26Z","timestamp":1780324166,"ip_dst":{"addr":"47.79.66.65","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":55190,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:26.767155+0000\",\"flow_id\":2217064656154453,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":55190,\"dest_ip\":\"47.79.66.65\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"billynational.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-06-01T14:29:26.208725+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:26Z","timestamp":1780324166,"ip_dst":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":50940,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:26.768672+0000\",\"flow_id\":1125795070630625,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50940,\"dest_ip\":\"47.79.64.182\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dfvip.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":900,\"bytes_toclient\":6037,\"start\":\"2026-06-01T14:29:26.219873+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:26Z","timestamp":1780324166,"ip_dst":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":50896,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:26.785957+0000\",\"flow_id\":1050890840988062,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50896,\"dest_ip\":\"47.79.64.182\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dfvip.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-06-01T14:29:26.219550+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:26Z","timestamp":1780324166,"ip_dst":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":50976,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:26.994685+0000\",\"flow_id\":37978638790412,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50976,\"dest_ip\":\"47.79.64.182\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dfvip.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":900,\"bytes_toclient\":6037,\"start\":\"2026-06-01T14:29:26.470796+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:27Z","timestamp":1780324167,"ip_dst":{"addr":"47.79.66.65","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":55194,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:27.011712+0000\",\"flow_id\":410210569422025,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":55194,\"dest_ip\":\"47.79.66.65\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"billynational.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-06-01T14:29:26.459977+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:27Z","timestamp":1780324167,"ip_dst":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":50988,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:27.013322+0000\",\"flow_id\":1368430658072720,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50988,\"dest_ip\":\"47.79.64.182\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dfvip.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-06-01T14:29:26.471184+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:27Z","timestamp":1780324167,"ip_dst":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51002,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:27.015833+0000\",\"flow_id\":2157218581852408,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":51002,\"dest_ip\":\"47.79.64.182\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dfvip.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-06-01T14:29:26.471288+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:27Z","timestamp":1780324167,"ip_dst":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":50986,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:27.021484+0000\",\"flow_id\":2136229076676658,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50986,\"dest_ip\":\"47.79.64.182\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dfvip.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-06-01T14:29:26.471090+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:27Z","timestamp":1780324167,"ip_dst":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":50982,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:27.028511+0000\",\"flow_id\":2165215810957251,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":50982,\"dest_ip\":\"47.79.64.182\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dfvip.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-06-01T14:29:26.470979+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:27Z","timestamp":1780324167,"ip_dst":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":51014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:27.038721+0000\",\"flow_id\":1791789879406958,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":51014,\"dest_ip\":\"47.79.64.182\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"dfvip.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":900,\"bytes_toclient\":4662,\"start\":\"2026-06-01T14:29:26.471406+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:27Z","timestamp":1780324167,"ip_dst":{"addr":"47.79.66.65","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":55204,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:27.497113+0000\",\"flow_id\":44081787343552,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":55204,\"dest_ip\":\"47.79.66.65\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"billynational.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":908,\"bytes_toclient\":6037,\"start\":\"2026-06-01T14:29:26.955072+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-06-01T14:29:27Z","timestamp":1780324167,"ip_dst":{"addr":"47.79.66.65","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":41118,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-06-01T14:29:27.784348+0000\",\"flow_id\":929583784732146,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":41118,\"dest_ip\":\"47.79.66.65\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"billynational.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-06-01T14:29:27.206322+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hhapi.billynatinal.com","ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":17,"request_count":17,"received_data":53821,"sent_data":8810,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.iconify.design","ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-17","domain_rank":89604,"first_seen":"2018-12-24T02:01:40Z","last_seen":"2026-05-28T18:48:56.43787Z","alert_count":0,"request_count":8,"received_data":37656,"sent_data":3478,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-04-08T17:19:41.246839Z","last_seen":"2026-05-17T04:52:24.612283Z","alert_count":0,"request_count":19,"received_data":36826,"sent_data":8941,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"billynational.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.66.65","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-04-08T17:19:41.244582Z","last_seen":"2026-05-17T04:52:25.722632Z","alert_count":0,"request_count":2,"received_data":446699,"sent_data":936,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"billynatinal.com","ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":35,"request_count":35,"received_data":3624202,"sent_data":14593,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"billynatinal.com/assets/index-771fd121.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"36101a0150feeaadf34968edd280d546","sha1":"c2ce8f3ad47cb519a9e3cb9e1faf7bfc20d5932b","sha256":"524ce66b90ba1d26e9e9def60fee30b1a3d99a96dd5cc51840862535b1381c4a","sha512":"ba003d8d9416864a373b17a2f67b34ee4752a88569f18009a380f264f26beea0258dee3727f6a53d5c826e53281abdd25d8581bc0f433c830bc4987eb90efe70","ssdeep":"96:c+CfxnYEqD+wH2vkI3Vtb1ciGIDebgn3hv/tH3XhNthejt:c+CfZYEqiwHyVtbS3E3hv/1X7st","tlshash":"a7a1b69af80286bef977144048580410219dbbffb21548f2fbfead0a67b8979d764325","size":4632,"data":"","first_seen":"2026-06-01T14:29:53.721502Z","last_seen":"2026-06-01T14:33:57.908309Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"df55055f75e2187c0c3ffd3298e162c2","sha1":"dc0db5a52df96c5c7636f6c0aef602a6ff8d0042","sha256":"34d238e0facf0645b79ceb771e2969c69c252c99e63f22e7fcd3dcfc6d7ba0ff","sha512":"e903ff7edc9a3fe9051dacfd58d309f38e5f7689fa9749821e071171fee8dded977be371a8cfafd49c12a8e2501483f77fa64b0e732c827d0b5c0cca892cd137","ssdeep":"","tlshash":"4fc08cc4a0c33e102656641054bf25e490244027b0481b468cf4d8493e630b08233e98","size":144,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-23T13:42:44.999818Z","times_seen":274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-25T09:20:52.82487Z","times_seen":1048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-25T09:20:52.847465Z","times_seen":6949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"084fae7c512b9896e1ee15922a8a4159","sha1":"4561d4b7bdeb8eaf4d367d28e65a2fa6bebfcf6e","sha256":"196ad88c894b413694316a8f087f89c1c41bd1d5ee686e1f30c2e93010cf7cb9","sha512":"a69c63af2daef99e2007b1e7938860826baa5dae95f4a0106a1f3dc878d245131a5fdf3222d4c842b151d7d5a7a3dc83090780d0aabf76cad20942ac9c379b27","ssdeep":"","tlshash":"6911abfe291aa0296303804f976b7901a43650a9000a184177cc9a9dbb9ab7dd0cfb8d","size":1048,"data":"","first_seen":"2026-06-01T14:29:53.808036Z","last_seen":"2026-06-01T14:33:58.041292Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-07-25T09:20:52.821604Z","times_seen":4379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-07-25T09:20:52.824017Z","times_seen":625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1831de11b3f834a2de4166013d75eda2","sha1":"4cd45ddc173078df52a6a5da8ee597fc7b8fa84b","sha256":"890bb39f44fdd8c6b918239d60c90dce9fd3fae1b9b2049c5a0e9f80f02c8009","sha512":"7e4471d6a84fcda0c90b1ef370a7ac6853bb28d5fe3de1f3955f2cd491853b7b07f7eab7a9df9731f584e664d59606ca969359d613ca46193c9a31e392fa594b","ssdeep":"","tlshash":"b9c08cc4b0c36e103a26a450a1af34e4d0248027b04c1b139da8e88d2e630f18233e98","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-23T14:16:12.054287Z","times_seen":790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-25T09:20:52.846609Z","times_seen":644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-07-25T09:20:52.834132Z","times_seen":1741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1797b90369a99ff22f1c40b0d94ec9a1","sha1":"aec8ba7bbf7bb80c7a4669d074c61aefb319ecfc","sha256":"e7129c3c36ef7b4a55f09622f14d1a60dd64551f16fd0f7a070edf2c75a13680","sha512":"a578a2dae3c0843433b3aca46d828da3db506e6c048302d6e857b77767968b4cac8e71e6d56dbd81aca28909b96a5f23447544a7a24ac9e3486478aa64b977bd","ssdeep":"","tlshash":"70c08cc4a0c72e001646641018af26e49034402ab0482f568df4d8492e620b08233ed8","size":146,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-25T09:20:52.840123Z","times_seen":358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-25T09:20:52.825682Z","times_seen":1046,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-07-25T09:20:52.843619Z","times_seen":579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-07-25T09:20:52.826451Z","times_seen":1118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-07-25T09:30:50.354492Z","times_seen":40733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5ef777763fcb4cd204f9d7cbaf32887e","sha1":"361874a04da45748824d8bcdec1afe436f4240b1","sha256":"c0db56b48647a4b73f597454774fe03c02d956100dbd3663c7442b711a691054","sha512":"5f1cd679e2f8e1370c88edb72ec885fe5ad2794f549997ca60f8a8d14f1a31806cd003249991e1e35aecdc05ff2dde662502b002e6d66b17f4604375110320ec","ssdeep":"","tlshash":"2ce0abfb3179c17054909a1a1cec542bf2eb65734c9c0a1ae584aa151e4dd78217c090","size":408,"data":"","first_seen":"2025-03-02T13:24:55.299758Z","last_seen":"2026-07-14T17:49:40.862324Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-cdb3ac80.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"a6ba866cf924e5a24932051934006e3e","sha1":"d8cdff401b25449b77704423eb6ff678c4b8545d","sha256":"f298d076759de8e8165a85b79c31d6aa46cc9db4a9b08d82dc1c9c4c7710848c","sha512":"8b5175a4e08f719d9d4f4d9ab7dafc093ce31448f430f4158eca53b959a52d5cc832d9a27a2fff5d2fcf215ba6dc2aebb9640a6573958932bec90e886867a615","ssdeep":"","tlshash":"4801d0f9fc0dcebb1f62068002a1360114092fddfa1419f298877e661be4950d7de72d","size":772,"data":"","first_seen":"2026-04-08T17:19:47.548453Z","last_seen":"2026-07-17T16:01:44.29373Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-07-25T09:20:52.841883Z","times_seen":1375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-25T09:20:52.844396Z","times_seen":444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/filters-8cb046de.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"bd84a1df267b6c392f440b127e4a3d7e","sha1":"2cc81ca9e1f47e6f51dfeec435c493f0800e7259","sha256":"16e441f6c0042f26ad91790a7e3d9096aaa486bcb5e653421adc5dd5db31b94b","sha512":"42ea3c25784829e47d4a89316fc51dd6ad2749975925c2cd96587f1a7883f76394ae651a73c394e6adbdbab28af7287397a8b605f0996313f0ebb4961fd29268","ssdeep":"","tlshash":"975134edfcd3613356ea6df944288510718ebe24686e0a4df55bd0415933888e07f778","size":3078,"data":"","first_seen":"2026-06-01T14:29:53.730568Z","last_seen":"2026-06-01T14:33:57.88945Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-a97021fb.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b45467ae038d791a78cfa2fb4d5d064","sha1":"b22c5ed04eebe365f7bca73b50dab8e8f9dae27e","sha256":"98a796e7cd6cb00043c4e5316007781e2e0c0e5a3ea70d81e15216b2d4e634d1","sha512":"eddeb30a821a41725f20874c737f8e195bbcff057c0b062a5537bd2db8f774a8f7a2cb6102a3218942c202228bebce9c16adc4d09b537450bbff7ecde38b85c3","ssdeep":"384:jgzsETzh1605PF0JLAfU2wIKDmMcOHuZQkYM1zprhQhdCYSk:0rfHSLAfUaUIFprhQhdCYD","tlshash":"0152e869f802993ef6ffe05140980050b66a7ffb411a49e2b9bc5d4a7352eb8f74d708","size":13914,"data":"","first_seen":"2026-06-01T14:29:53.732845Z","last_seen":"2026-06-01T14:33:57.896627Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4a9d973d1e30085a9546cf6ee49cb488","sha1":"4a80a253e1d2d07b6dede9f69fbd4c2fd3363d20","sha256":"e24c2a1b6b6bdd7e72cf4f795a489b668359a0164e0200e5e6d49fcbb543797a","sha512":"8cb6f53571ce6c05e19a35476bf05b79f1336787b04aeeaf13afa8839dc5584efa86088875fd19d9f6163e6a676accf1a0fa3481475378f6d594b9425b4b4462","ssdeep":"","tlshash":"05c08cc9a0c36d002602641010af38e49024402770881b028ca4d8482e220b08233e98","size":141,"data":"","first_seen":"2023-05-08T19:42:57Z","last_seen":"2026-07-25T06:30:07.588219Z","times_seen":998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/currencyItem-4be8463a.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"b7d8372770b8848265a60424c96644b4","sha1":"8bba3579aeae0bf31de1a0906ecb78311d6a1272","sha256":"317787a8fafd67df87c24ed1f34605776cbfb927feecffb3c102b5a04ec141ac","sha512":"a908ecd57d6c66547d83fe377847d247bc157c996b1e92cd72bcf3c1aa4e7b9d5e6d1b7096b6d8dff37669af2ce7bbd86631780ccd8b10a68bd820a6fcf3488a","ssdeep":"","tlshash":"0e21f48a5901c7b1cbbe9062c57d5414131d7fda701181c5fbed148a3b875fcd724a31","size":1206,"data":"","first_seen":"2026-06-01T14:29:53.743651Z","last_seen":"2026-06-01T14:33:57.963559Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-07-25T09:20:52.839263Z","times_seen":1617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-25T09:20:52.820757Z","times_seen":1363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c1155eee87487f5efe9634a03695b16c","sha1":"2532dae40bd8f2c93a9eb7cbb00bf21e050124b1","sha256":"41c9b4311d7a14bda7da372afb964f0bf08f0823e01617a967aa9eb2554d298b","sha512":"ae1174eea2e3597d1ecd46bea51c7948e05095c00c03cb3670e5b62dd0c14abd26e7c3643fda485610290a4426fa92d0c9d7920303a7bdbc659f735313f2ea48","ssdeep":"","tlshash":"28c08cc4b1d22e106606641010af36e490298426b08c1b028ca8e8892e260b08237fec","size":148,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-25T09:20:52.822396Z","times_seen":487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-25T09:20:52.835597Z","times_seen":459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-25T09:20:52.838416Z","times_seen":1629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/charting_library/charting_library.min.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-07-25T06:30:07.562176Z","times_seen":1314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-46dfabed.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"7a8a7e6f2130655ac5789481460fcf9a","sha1":"412557fcd13dbc9f48c13524a864f648a6349ac6","sha256":"3c1fd33d2cf2c6a4728ad797ea98cbdc7c0a524ce49deeb6e561d9bc15546437","sha512":"3e3f5070bc775931d3e6305645540fdf04df2ec2ea53358b537903ef5b2ce8ea2fe065536029e6d9558a7c693c065c861c9e6e5b06d1c590438a5ec94ddd4ea8","ssdeep":"","tlshash":"46f0055fb96dc0b22fb384e891331811a72d1b8d3f50c5f8948616144a3c8f6d15f124","size":508,"data":"","first_seen":"2026-06-01T14:29:53.723911Z","last_seen":"2026-06-01T14:33:57.860561Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"94cb806f13187b76d16e8079124171c5","sha1":"be4a8d1cf84b787988d13ce1525597114ffda19f","sha256":"8d842a1f950c7dae6582c415825541111a6556359dc37380452abbb9c426b1d1","sha512":"280cc32cda89db02b4cb60e620a1c175194998afeb2c4bea92194c0c4f335d00a8e35d4c1ca28c2f4201c4654493fc96a581e54175ed4ee4153af805d69c10df","ssdeep":"","tlshash":"62c08cc8a0c32d101603a92020af29e490384027b14c1b038de4d8492ea30b48233ee8","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-25T09:20:52.840977Z","times_seen":932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-25T09:20:52.845089Z","times_seen":1045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-07-25T09:20:52.845899Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-07-23T14:41:15.108786Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-25T09:20:52.823193Z","times_seen":2094,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/en-27098f30.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"24065c6a86fb6e0de9abb71db9169b4a","sha1":"f08d4b5136f9a5260ef0ef62a4ae7a70d07d21cf","sha256":"e889ab100c698d44a96c276ed3976dc706c671c524bb41bc5b5a16e45a6152a4","sha512":"ff30f093fcb4deb77a33dcad69d46b6d2660a1e11938fd266792a2f15091a8843124ec116438accf1320e1e38ad52e0c3feb4183580114265397d8852683c18f","ssdeep":"768:+GtZcEw/o7rKOdAFsifnAMC2rAaAMFooP6+6sPG9w1mwO6fpk7aOLxO:iponKOdebE2rdFoLsPWwqLxO","tlshash":"8003d6897e1a989a04f3537674ce6e1120f60ac18255881f4fedc9fd93d2b67a363b34","size":40481,"data":"","first_seen":"2026-04-08T17:19:47.512151Z","last_seen":"2026-06-01T14:33:57.890837Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-07-25T09:30:50.355072Z","times_seen":42267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-6b19ff4f.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e367ef43fa48080deb5acc8251cb72e9","sha1":"d02911fee3e5f493f49a49fde8f966a711b0673a","sha256":"606fa6476b9b976bf6f76004c6e3624ca73f6faf07f18db31dab706924402280","sha512":"2cf4cec4ba55029fc268c2f5d0befe0b0651f38773cb0ce3731ada7a6a57926aab4914c5a0a5b05eab195e038c671a0700693acc395462ef38bdeb21bde37bec","ssdeep":"1536:VBrVpvR2G8Bz9AKajjSrJb7bZCe3Uvnun28dqAMZ:Vp7R2G8Bz9AbWbZCe3Uv3R","tlshash":"aca33d8aa40a1eff6dbe0484695f590030691fd35c8ccc9377af6e5a3bf9ce46259318","size":100511,"data":"","first_seen":"2026-06-01T14:29:53.748986Z","last_seen":"2026-06-01T14:33:58.001366Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/vendor-93b7ce71.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"ea6d61bdac00a5a9b70630a439f9c029","sha1":"dd1947a855f3bb73ca80b534606754669df40b32","sha256":"7012e144ef983e007990b06b5f63c9bd37403f9d3c40d8643b3639db42720cf7","sha512":"8bdf209e95db0bc6276398fd63959a3d5d5da41719b18fe82fb55524b8790b9a2a164a24ee50e1de54d979ec027c713cc81be61a6baa08192cb04bc78753eadf","ssdeep":"12288:TAT1O3FcXC8WEQhh+X8sxNsRJywe1/z2ZBGxIU1KF/W966OMG77t5Ck:TAT1fyC1X8XRJyweFz2XRfF/W966OMg/","tlshash":"d91529c97692f06147ab24e240bb0006f3396e59740e84a4f16d98eb7d79d89d2b7f3c","size":927739,"data":"","first_seen":"2026-06-01T14:26:05.643336Z","last_seen":"2026-07-17T16:01:44.28957Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/#/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-25T09:20:52.842725Z","times_seen":1182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"billynatinal.com/assets/index-771fd121.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-771fd121.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-1218\"\r\nexpires: Tue, 02 Jun 2026 02:29:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4632,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4625)","md5":"36101a0150feeaadf34968edd280d546","sha1":"c2ce8f3ad47cb519a9e3cb9e1faf7bfc20d5932b","sha256":"524ce66b90ba1d26e9e9def60fee30b1a3d99a96dd5cc51840862535b1381c4a","sha512":"ba003d8d9416864a373b17a2f67b34ee4752a88569f18009a380f264f26beea0258dee3727f6a53d5c826e53281abdd25d8581bc0f433c830bc4987eb90efe70","ssdeep":"96:c+CfxnYEqD+wH2vkI3Vtb1ciGIDebgn3hv/tH3XhNthejt:c+CfZYEqiwHyVtbS3E3hv/1X7st","tlshash":"a7a1b69af80286bef977144048580410219dbbffb21548f2fbfead0a67b8979d764325","first_seen":"2026-06-01T14:29:53.721502Z","last_seen":"2026-06-01T14:33:57.908309Z","times_seen":2,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-46dfabed.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:25.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-46dfabed.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 508\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\netag: \"6a170f30-1fc\"\r\nexpires: Tue, 02 Jun 2026 02:29:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (507)","md5":"7a8a7e6f2130655ac5789481460fcf9a","sha1":"412557fcd13dbc9f48c13524a864f648a6349ac6","sha256":"3c1fd33d2cf2c6a4728ad797ea98cbdc7c0a524ce49deeb6e561d9bc15546437","sha512":"3e3f5070bc775931d3e6305645540fdf04df2ec2ea53358b537903ef5b2ce8ea2fe065536029e6d9558a7c693c065c861c9e6e5b06d1c590438a5ec94ddd4ea8","ssdeep":"","tlshash":"46f0055fb96dc0b22fb384e891331811a72d1b8d3f50c5f8948616144a3c8f6d15f124","first_seen":"2026-06-01T14:29:53.723911Z","last_seen":"2026-06-01T14:33:57.860561Z","times_seen":2,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/common/getMt5Amount?coin=xau","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:25.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T11:42:19.097873Z","times_seen":17527238,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/vendor-93b7ce71.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:23.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/vendor-93b7ce71.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-e27fb\"\r\nexpires: Tue, 02 Jun 2026 02:29:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":927739,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ea6d61bdac00a5a9b70630a439f9c029","sha1":"dd1947a855f3bb73ca80b534606754669df40b32","sha256":"7012e144ef983e007990b06b5f63c9bd37403f9d3c40d8643b3639db42720cf7","sha512":"8bdf209e95db0bc6276398fd63959a3d5d5da41719b18fe82fb55524b8790b9a2a164a24ee50e1de54d979ec027c713cc81be61a6baa08192cb04bc78753eadf","ssdeep":"12288:TAT1O3FcXC8WEQhh+X8sxNsRJywe1/z2ZBGxIU1KF/W966OMG77t5Ck:TAT1fyC1X8XRJyweFz2XRfF/W966OMg/","tlshash":"d91529c97692f06147ab24e240bb0006f3396e59740e84a4f16d98eb7d79d89d2b7f3c","first_seen":"2026-06-01T14:26:05.643336Z","last_seen":"2026-07-17T16:01:44.28957Z","times_seen":12,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/resource/fonts/Arial.ttf","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:23.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://billynatinal.com/assets/index-e5092a03.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Wed, 27 May 2026 15:34:58 GMT\r\netag: \"6a170f22-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-25T09:20:52.781204Z","times_seen":2141,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":458,"receive":496,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"hhapi.billynatinal.com/ws/25470056-d448-4e78-8f7a-148ef3a30473","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"GET /ws/25470056-d448-4e78-8f7a-148ef3a30473 HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://billynatinal.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 7awMqVxhcWFWga1m0WbZGA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Mon, 01 Jun 2026 14:29:26 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://billynatinal.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 1gA2fgoi9Oq5D+bNfJGR1YoLGhs=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T11:42:19.097873Z","times_seen":17527238,"resource_available":true,"data":null}},"time_used":2743,"timings":{"blocked":0,"dns":920,"connect":1218,"send":0,"wait":299,"receive":2,"ssl":1204},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-771fd121.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:25.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-771fd121.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-1218\"\r\nexpires: Tue, 02 Jun 2026 02:29:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4632,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4625)","md5":"36101a0150feeaadf34968edd280d546","sha1":"c2ce8f3ad47cb519a9e3cb9e1faf7bfc20d5932b","sha256":"524ce66b90ba1d26e9e9def60fee30b1a3d99a96dd5cc51840862535b1381c4a","sha512":"ba003d8d9416864a373b17a2f67b34ee4752a88569f18009a380f264f26beea0258dee3727f6a53d5c826e53281abdd25d8581bc0f433c830bc4987eb90efe70","ssdeep":"96:c+CfxnYEqD+wH2vkI3Vtb1ciGIDebgn3hv/tH3XhNthejt:c+CfZYEqiwHyVtbS3E3hv/1X7st","tlshash":"a7a1b69af80286bef977144048580410219dbbffb21548f2fbfead0a67b8979d764325","first_seen":"2026-06-01T14:29:53.721502Z","last_seen":"2026-06-01T14:33:57.908309Z","times_seen":2,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/token-branded:sol.svg?2.0.1779896112194","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 03:31:29 GMT","end":"Sat, 22 Aug 2026 04:31:21 GMT"},"fingerprint":{"sha1":"98:A3:D5:E3:BC:F2:61:7E:1A:64:85:90:7B:31:6E:77:4E:EE:97:65","sha256":"EC:93:44:7E:84:82:14:45:88:17:49:4E:8A:A3:78:4D:21:0B:85:20:D2:06:CF:1A:91:4D:75:58:5F:63:84:C9"}}},"request":{"raw":"GET /token-branded:sol.svg?2.0.1779896112194 HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5vYHr4uK5zZNawFiIjejwTmlHgryDW%2BPaA3YEeduupiY1jvql0%2B7A4xTlgzTT1PWJdYeg9Ez5J2u%2BoFA1KYFT6HKGB1GSfJaUERHIa2CsCegFcYNF7KhlqUQYn%2BeqPO%2FhQsjGw%3D%3D\"}]}\r\nlast-modified: Mon, 01 Jun 2026 14:29:26 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a04ee917390b0b3d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"6c6a5c03ff4cc5f4478007ccc7dd1164","sha1":"606a0cee66b8ae05020823953cb18f1470859c4b","sha256":"3dbaad08e947862bdfde982c25a7338041e00bac792991912d806f8bd131a1b1","sha512":"b64c8e4fbb468060ef885e380827887b08e9b5c77818705b496cad9c8c70426dd7d95538082bd2675a2e120e7248d2d3345c19cd8c8eb21e4c59eafe88381af8","ssdeep":"","tlshash":"4621f13ff02c685fe11ad3b8ce64d865714eb079ba02c2a8518ccf4f10079c69e4ce99","first_seen":"2026-06-01T14:29:53.728089Z","last_seen":"2026-06-01T14:33:57.901913Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0b2d53fc36ac046ff8638fa244d03cb7f.jpg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b2d53fc36ac046ff8638fa244d03cb7f.jpg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1476\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D97476AFD363037A45A46\r\nAccept-Ranges: bytes\r\nETag: \"B61F1CA72C14930CC6204CEDA9D4A1A8\"\r\nLast-Modified: Tue, 20 Aug 2024 20:24:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18382780131312311799\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=b2d53fc36ac046ff8638fa244d03cb7f.jpg\r\nCache-Control: no-cache\r\nContent-MD5: th8cpywUkwzGIEztqdShqA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"b61f1ca72c14930cc6204ceda9d4a1a8","sha1":"d4fc6e900b4f0491c9e21b5bd87abb3a5774d197","sha256":"177ef0c77ae4e4dc8e7ecadcd84bb6e7532cb427ec8d1354cf1128521cfa8af2","sha512":"7cd45adb9967aa94bbe9b31e192eec3de548262312428e260296eb69cf49a68e5aa120ea96733d90c5b7d32bab97e2329d469aaeb260e151b6216686e8128aa2","ssdeep":"","tlshash":"8d31855ce3209852e205ee9320e6506b985304c0dbe2f0aae0cbd9925a303f745cd9cb","first_seen":"2024-12-08T15:39:09.775069Z","last_seen":"2026-07-25T09:20:52.748015Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1319,"timings":{"blocked":1046,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0ced2098657404d75aae2923cf6f7ce91.jpg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ced2098657404d75aae2923cf6f7ce91.jpg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1428\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747AB67323734F62F96\r\nAccept-Ranges: bytes\r\nETag: \"C9201D51BF4A685443C119177DCDDA52\"\r\nLast-Modified: Tue, 20 Aug 2024 20:25:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10360030493221547983\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=ced2098657404d75aae2923cf6f7ce91.jpg\r\nCache-Control: no-cache\r\nContent-MD5: ySAdUb9KaFRDwRkXfc3aUg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1428,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"c9201d51bf4a685443c119177dcdda52","sha1":"cabb5ee298f65e78718b60bbb9f393d51c315273","sha256":"0d4a8d66fcc758267650dc6c039aaffdb405ee2c73e09e0e924ecbfee808d129","sha512":"ab4fd563189616fb5e1efcdc1c4af66e5396f5cb68bf43a98f76647fe592b40221772db7e4aa7a175bb5174471fd2112423b7c5e81c7ba7ff764cda86b0b8ff4","ssdeep":"","tlshash":"0c21748cd5c17c429389fdc130f7a0bb9b620a80dac1f475baeec41145202fe4a6a4cb","first_seen":"2024-12-08T15:39:09.783612Z","last_seen":"2026-07-25T09:20:52.761753Z","times_seen":92,"resource_available":false,"data":null}},"time_used":1560,"timings":{"blocked":1292,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/common/getAllSetting","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T11:42:19.097873Z","times_seen":17527238,"resource_available":true,"data":null}},"time_used":1526,"timings":{"blocked":618,"dns":1,"connect":314,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/filters-8cb046de.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/filters-8cb046de.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-c06\"\r\nexpires: Tue, 02 Jun 2026 02:29:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3077)","md5":"bd84a1df267b6c392f440b127e4a3d7e","sha1":"2cc81ca9e1f47e6f51dfeec435c493f0800e7259","sha256":"16e441f6c0042f26ad91790a7e3d9096aaa486bcb5e653421adc5dd5db31b94b","sha512":"42ea3c25784829e47d4a89316fc51dd6ad2749975925c2cd96587f1a7883f76394ae651a73c394e6adbdbab28af7287397a8b605f0996313f0ebb4961fd29268","ssdeep":"","tlshash":"975134edfcd3613356ea6df944288510718ebe24686e0a4df55bd0415933888e07f778","first_seen":"2026-06-01T14:29:53.730568Z","last_seen":"2026-06-01T14:33:57.88945Z","times_seen":2,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/common/getAllSetting","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11905,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11569), with no line terminators","md5":"0e4ba2261a2ae81ffb74cf5adc828ebd","sha1":"cc6deaf7bda8824c2d10acdc2a4d90ef21cc9d8f","sha256":"256a345a1baf5adfdc766e3f618c828f2f95b677ccc1c67fdb79ca7a191a7490","sha512":"3a7e1e00a115a5ae2ee06b81fd759674da57a5a6efce3a8f9ccdbd57179a32d5126d825bc659fc86630a7a099ddc0414c1958d08ca17b290e4b66dc7ab498414","ssdeep":"192:cMZLTYOSpQ+oQS+IqAuc2RbasNo5iWS7ALkVq9vOJ2svOMNdCMPIVf2Zf1bFmudf:tu5/2pMHCMP7IZjgV5YK","tlshash":"0332545a33d8ccbd82d619c5c46b3a5eb5dc347ba9809c55e4e7ee4c88a98b3580b10e","first_seen":"2026-05-17T04:52:36.843217Z","last_seen":"2026-06-01T14:33:57.912028Z","times_seen":3,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-a97021fb.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-a97021fb.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-365a\"\r\nexpires: Tue, 02 Jun 2026 02:29:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13914,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13913)","md5":"0b45467ae038d791a78cfa2fb4d5d064","sha1":"b22c5ed04eebe365f7bca73b50dab8e8f9dae27e","sha256":"98a796e7cd6cb00043c4e5316007781e2e0c0e5a3ea70d81e15216b2d4e634d1","sha512":"eddeb30a821a41725f20874c737f8e195bbcff057c0b062a5537bd2db8f774a8f7a2cb6102a3218942c202228bebce9c16adc4d09b537450bbff7ecde38b85c3","ssdeep":"384:jgzsETzh1605PF0JLAfU2wIKDmMcOHuZQkYM1zprhQhdCYSk:0rfHSLAfUaUIFprhQhdCYD","tlshash":"0152e869f802993ef6ffe05140980050b66a7ffb411a49e2b9bc5d4a7352eb8f74d708","first_seen":"2026-06-01T14:29:53.732845Z","last_seen":"2026-06-01T14:33:57.896627Z","times_seen":2,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/filters-8cb046de.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:25.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/filters-8cb046de.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-c06\"\r\nexpires: Tue, 02 Jun 2026 02:29:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3077)","md5":"bd84a1df267b6c392f440b127e4a3d7e","sha1":"2cc81ca9e1f47e6f51dfeec435c493f0800e7259","sha256":"16e441f6c0042f26ad91790a7e3d9096aaa486bcb5e653421adc5dd5db31b94b","sha512":"42ea3c25784829e47d4a89316fc51dd6ad2749975925c2cd96587f1a7883f76394ae651a73c394e6adbdbab28af7287397a8b605f0996313f0ebb4961fd29268","ssdeep":"","tlshash":"975134edfcd3613356ea6df944288510718ebe24686e0a4df55bd0415933888e07f778","first_seen":"2026-06-01T14:29:53.730568Z","last_seen":"2026-06-01T14:33:57.88945Z","times_seen":2,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-cdb3ac80.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:25.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-cdb3ac80.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 772\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\netag: \"6a170f30-304\"\r\nexpires: Tue, 02 Jun 2026 02:29:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":772,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"a6ba866cf924e5a24932051934006e3e","sha1":"d8cdff401b25449b77704423eb6ff678c4b8545d","sha256":"f298d076759de8e8165a85b79c31d6aa46cc9db4a9b08d82dc1c9c4c7710848c","sha512":"8b5175a4e08f719d9d4f4d9ab7dafc093ce31448f430f4158eca53b959a52d5cc832d9a27a2fff5d2fcf215ba6dc2aebb9640a6573958932bec90e886867a615","ssdeep":"","tlshash":"4801d0f9fc0dcebb1f62068002a1360114092fddfa1419f298877e661be4950d7de72d","first_seen":"2026-04-08T17:19:47.548453Z","last_seen":"2026-07-17T16:01:44.29373Z","times_seen":15,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/resource/svg/light/user.svg?2.0.1779896112194","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1779896112194 HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 551\r\nlast-modified: Wed, 27 May 2026 15:34:59 GMT\r\netag: \"6a170f23-227\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":551,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-23T14:16:11.984295Z","times_seen":401,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0a2a33a1148294dbfb89f0cc872312514.jpg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0a2a33a1148294dbfb89f0cc872312514.jpg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1437\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747AB67323734922F96\r\nAccept-Ranges: bytes\r\nETag: \"122AA57DD9538429059CBD42EE99A59E\"\r\nLast-Modified: Tue, 20 Aug 2024 20:29:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6247732326070184057\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=a2a33a1148294dbfb89f0cc872312514.jpg\r\nCache-Control: no-cache\r\nContent-MD5: EiqlfdlThCkFnL1C7pmlng==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"122aa57dd9538429059cbd42ee99a59e","sha1":"e6d44defdb86a01caa67f663529aa0d70f7b6065","sha256":"4344191b60975b2acbac5c8168e581a89a2104d0b8ec789f63dbe67a600b172f","sha512":"94910eff5eb6449954b7dec9903e3b779201bed8b71dce794245f4810337f05348205209a5a26b4849256cbadc6f89b9c09a016baed9b09b1fc3b7feb4e4d148","ssdeep":"","tlshash":"0c217606faa57881528c9d5324f291634d670544dfd4f5ea78cfc52e1d203f687994cb","first_seen":"2024-12-08T15:39:09.743393Z","last_seen":"2026-07-25T09:20:52.716774Z","times_seen":108,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":1083,"dns":0,"connect":0,"send":0,"wait":267,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/resource/svg/light/zu447.svg?2.0.1779896112194","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1779896112194 HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Wed, 27 May 2026 15:34:59 GMT\r\netag: \"6a170f23-1a4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-07-23T14:41:15.075049Z","times_seen":453,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/token-branded:bnb.svg?2.0.1779896112194","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 03:31:29 GMT","end":"Sat, 22 Aug 2026 04:31:21 GMT"},"fingerprint":{"sha1":"98:A3:D5:E3:BC:F2:61:7E:1A:64:85:90:7B:31:6E:77:4E:EE:97:65","sha256":"EC:93:44:7E:84:82:14:45:88:17:49:4E:8A:A3:78:4D:21:0B:85:20:D2:06:CF:1A:91:4D:75:58:5F:63:84:C9"}}},"request":{"raw":"GET /token-branded:bnb.svg?2.0.1779896112194 HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9sxO%2BFiiqg5o1dl1goEcKLj9RVhdyjHlMBj0KOJ5ZrhzA4zgczE7IE3GWFf1S5EwJ8b2kw4elEY78iI5VdKz%2B%2FG%2B5ZZsEvcf6n6lEdl2kEZXJ0DmSC9i4AbYha7MHL0fvZ7sOQ%3D%3D\"}]}\r\nlast-modified: Mon, 01 Jun 2026 14:29:26 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a04ee91739090b3d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":708,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"2c43e8b9ba0d40c7b067d274dd73fb95","sha1":"5c6581b471706c8d1b43ee5169373fb41823fd28","sha256":"798d33f98a4ab5ef94fdbe8dd90ff826d3c92c4a5d978acf0fe12f83001c00f7","sha512":"e09ed868307f670aa310926367b16970d3ff15eef989b2ada81d626bc12b7b2dd88a207b348b02e0e46005601e8707dedb77a6f03c7b6083e12baee53e4f35aa","ssdeep":"","tlshash":"6a0168a48970a96c5161f8aaaf2cabd0060a86698f7b01c17582548035e3b872e61f3c","first_seen":"2026-06-01T14:29:53.737051Z","last_seen":"2026-06-01T14:33:57.894891Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":27,"dns":3,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/token-branded:trx.svg?2.0.1779896112194","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 03:31:29 GMT","end":"Sat, 22 Aug 2026 04:31:21 GMT"},"fingerprint":{"sha1":"98:A3:D5:E3:BC:F2:61:7E:1A:64:85:90:7B:31:6E:77:4E:EE:97:65","sha256":"EC:93:44:7E:84:82:14:45:88:17:49:4E:8A:A3:78:4D:21:0B:85:20:D2:06:CF:1A:91:4D:75:58:5F:63:84:C9"}}},"request":{"raw":"GET /token-branded:trx.svg?2.0.1779896112194 HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2BQ0pBgO3zRLS%2FYK5RuK60GLGT22WN5YoWiWJdlVIwvjXMfvYWfmGRcnegyL%2FyFlEHB6d9sGPcZRCSOvLyXYEGeduBNAC2HxF7cVN6%2FywQC%2BptI0bAELdinRl3sSKIr5wv3icQ%3D%3D\"}]}\r\nlast-modified: Mon, 01 Jun 2026 14:29:26 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a04ee917390d0b3d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":472,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"216d6d54ca6a313d6a0d56bec1aa479d","sha1":"e27ddd7451f17c6a21401465b9471fc5e1409392","sha256":"792e28b3336137b44082b68ad71bce14b3e32112d2fb67df1a045bf930f472e2","sha512":"8c158c992ade1010710c4af708d10996c1b1fd94f457f60ff0bfec4f3ca346364eb1ab2ffe6d15c14d2467932ab35bf3a2db73b046f20304c39c3e06ac01666f","ssdeep":"","tlshash":"29f05cf3496c880c808dc232fb3a17a0b2b180acb98040ec0b9e2131314f18af80bcf8","first_seen":"2026-06-01T14:29:53.738225Z","last_seen":"2026-06-01T14:33:57.931345Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/common/getMt5Amount?coin=xag","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d3ddb6926806dfcc755ad6d495fc6f2b","sha1":"0fb7f9f57cb57697a29c1ed64f45e587cd62a190","sha256":"d5d6aa44fb85b63f2fda2f7b026384fedd0b9855ab7b5400dc35ac74dcf7b707","sha512":"13ee524e65c80dd09c3a55b1cb8f63b61b16d8b0f3d2e8b6ddddbc9619455e5dd8a40273dd44e2bd0f3fa958aabf09e1a47c23788772f3415ea0a8739574d119","ssdeep":"","tlshash":"f39002559d188252b88351a59507520400347164262896484c5a512680d81a62040c59","first_seen":"2026-06-01T14:29:53.739369Z","last_seen":"2026-06-01T14:29:53.739369Z","times_seen":1,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/resource/svg/light/zu29.svg?2.0.1779896112194","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1779896112194 HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 840\r\nlast-modified: Wed, 27 May 2026 15:34:59 GMT\r\netag: \"6a170f23-348\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-23T14:41:15.059941Z","times_seen":923,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T11:42:19.097873Z","times_seen":17527238,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/common/getAllSetting","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T11:42:19.097873Z","times_seen":17527238,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0e31aeaeac87d47e69dd1a1ef5cc0c41e.jpg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0e31aeaeac87d47e69dd1a1ef5cc0c41e.jpg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1716\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D97474C8B373932C1723E\r\nAccept-Ranges: bytes\r\nETag: \"3FCD76D9E6FB1B58B0F964A295739696\"\r\nLast-Modified: Tue, 20 Aug 2024 20:28:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18064192029898249668\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=e31aeaeac87d47e69dd1a1ef5cc0c41e.jpg\r\nCache-Control: no-cache\r\nContent-MD5: P8122eb7G1iw+WSilXOWlg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1716,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"3fcd76d9e6fb1b58b0f964a295739696","sha1":"a9cf8288a769999e808305bbbace849af4bd0e53","sha256":"0d7edb59077be9c09a150823032e17e01e7ba0bb7bae9b3681b1b16fe2e83f88","sha512":"baf0713c42e8c2f9dcf1165cc33aac0b7e3a217cd90b4b0fb84fd68550ce0637f7c8901a377c16fbf62cbd2cd29d1b7fb5e33add809ed40632a24e3dbc4b5569","ssdeep":"","tlshash":"5b31f88de2a46d42a1c88e0100fba1374d6344c0c7d4f22068cbc6220d612fe812e9eb","first_seen":"2024-12-08T15:39:09.738779Z","last_seen":"2026-07-25T09:20:52.777347Z","times_seen":76,"resource_available":false,"data":null}},"time_used":1044,"timings":{"blocked":-1,"dns":12,"connect":255,"send":0,"wait":258,"receive":0,"ssl":519},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/notice/list?key=ROLL_NOTICE","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T11:42:19.097873Z","times_seen":17527238,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-b113d8de.css","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-b113d8de.css HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 61\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\netag: \"6a170f30-3d\"\r\nexpires: Tue, 02 Jun 2026 02:29:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a1b0952ca3c69ed11b74fcd1e2f70aed","sha1":"f9954262c4150c3229baed932606795715f0346f","sha256":"b113d8decf6701cd681872abbd1f0927ecb9fed86837e193c68220fdb82df621","sha512":"bef5bc1277b56a7727b568c22462c59f16d5c96d99098f86be1adad5cb7a93939b5de5de95d1a3411167051459670c3acabcc4a12756b3ece4b88f4649b1a10f","ssdeep":"","tlshash":"67a0022d251a6414b2225701ff1bee0ddf28a913df91820473022cd135cba1e769814a","first_seen":"2025-09-27T05:00:10.553143Z","last_seen":"2026-07-23T14:01:30.994254Z","times_seen":587,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":353,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-bc011be9.css","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\netag: \"6a170f30-18d\"\r\nexpires: Tue, 02 Jun 2026 02:29:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-25T09:20:52.788724Z","times_seen":1429,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/currencyItem-4be8463a.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/currencyItem-4be8463a.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-4b6\"\r\nexpires: Tue, 02 Jun 2026 02:29:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"b7d8372770b8848265a60424c96644b4","sha1":"8bba3579aeae0bf31de1a0906ecb78311d6a1272","sha256":"317787a8fafd67df87c24ed1f34605776cbfb927feecffb3c102b5a04ec141ac","sha512":"a908ecd57d6c66547d83fe377847d247bc157c996b1e92cd72bcf3c1aa4e7b9d5e6d1b7096b6d8dff37669af2ce7bbd86631780ccd8b10a68bd820a6fcf3488a","ssdeep":"","tlshash":"0e21f48a5901c7b1cbbe9062c57d5414131d7fda701181c5fbed148a3b875fcd724a31","first_seen":"2026-06-01T14:29:53.743651Z","last_seen":"2026-06-01T14:33:57.963559Z","times_seen":2,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/common/getAllSetting","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:25.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11905,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11569), with no line terminators","md5":"0e4ba2261a2ae81ffb74cf5adc828ebd","sha1":"cc6deaf7bda8824c2d10acdc2a4d90ef21cc9d8f","sha256":"256a345a1baf5adfdc766e3f618c828f2f95b677ccc1c67fdb79ca7a191a7490","sha512":"3a7e1e00a115a5ae2ee06b81fd759674da57a5a6efce3a8f9ccdbd57179a32d5126d825bc659fc86630a7a099ddc0414c1958d08ca17b290e4b66dc7ab498414","ssdeep":"192:cMZLTYOSpQ+oQS+IqAuc2RbasNo5iWS7ALkVq9vOJ2svOMNdCMPIVf2Zf1bFmudf:tu5/2pMHCMP7IZjgV5YK","tlshash":"0332545a33d8ccbd82d619c5c46b3a5eb5dc347ba9809c55e4e7ee4c88a98b3580b10e","first_seen":"2026-05-17T04:52:36.843217Z","last_seen":"2026-06-01T14:33:57.912028Z","times_seen":3,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0ff7d4f945b5940d892bec2b6e2da1847.jpeg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ff7d4f945b5940d892bec2b6e2da1847.jpeg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 400\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747C78BAF313105E016\r\nAccept-Ranges: bytes\r\nETag: \"33E405EA40F420F97179AC28C2DD83E0\"\r\nLast-Modified: Tue, 20 Aug 2024 20:28:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3462057762747232232\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=ff7d4f945b5940d892bec2b6e2da1847.jpeg\r\nCache-Control: no-cache\r\nContent-MD5: M+QF6kD0IPlxeawowt2D4A==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"33e405ea40f420f97179ac28c2dd83e0","sha1":"03f9cc5828ee122d39d4c86a794c34ceac7bf015","sha256":"d5be3ddd699628f3957acaab7296387240475e3bb4452b38a2f36c4300b68ee8","sha512":"d4b0d55e73775ea14abfdd07a449a526c91f58cd46326feda313701e4c392165785b8b7ec2f941ee764f055cfdc609da603416188e8dc3612a6e7ae559ca0cb2","ssdeep":"","tlshash":"3ae0f1e277d3bd78cfda143f9c3aa971f45a5d2a0a2c535c424d613f0160684812c526","first_seen":"2024-01-21T00:00:18Z","last_seen":"2026-07-23T13:38:34.314632Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1990,"timings":{"blocked":856,"dns":0,"connect":282,"send":0,"wait":284,"receive":0,"ssl":566},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0be8a6687d07841d0a6fccdec29307c00.jpeg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0be8a6687d07841d0a6fccdec29307c00.jpeg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 619\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747ACF6C5363729F2FD\r\nAccept-Ranges: bytes\r\nETag: \"6CFE73F06DA3C5604FFE6B41D284540D\"\r\nLast-Modified: Tue, 20 Aug 2024 20:24:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1104380098065402225\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=be8a6687d07841d0a6fccdec29307c00.jpeg\r\nCache-Control: no-cache\r\nContent-MD5: bP5z8G2jxWBP/mtB0oRUDQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"6cfe73f06da3c5604ffe6b41d284540d","sha1":"9e9fa8144a7cb0f1da7daa4e5858fa49106c171c","sha256":"c0f3d5204944bd902aa03323ff6d9543ce33f9c8a523ef06b9953dabcd5e1556","sha512":"db8346b7c7d8216db595641f02a1fecccbbe268f7384be291647e939883348696f6d8b2d6754b62559eaf23a47ed50322013c87837c674745a05556bc64f665c","ssdeep":"","tlshash":"fbf0685df3fc843d5be15b598535f1b5d414ce3bc4e151080bd06891522b4553851b11","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-23T13:38:34.344888Z","times_seen":175,"resource_available":false,"data":null}},"time_used":1580,"timings":{"blocked":1310,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0fcb00bc2736a4a3d8205b75e38ed9b9c.jpg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0fcb00bc2736a4a3d8205b75e38ed9b9c.jpg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2314\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747C78BAF31315EE016\r\nAccept-Ranges: bytes\r\nETag: \"339C6F06112912DFEC4082CF192541C8\"\r\nLast-Modified: Tue, 20 Aug 2024 20:25:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7787238855376212441\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=fcb00bc2736a4a3d8205b75e38ed9b9c.jpg\r\nCache-Control: no-cache\r\nContent-MD5: M5xvBhEpEt/sQILPGSVByA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2314,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"339c6f06112912dfec4082cf192541c8","sha1":"e54f413a9f97256501ea21cb6df1dae60556c1fc","sha256":"fbdf7c741403b5d3e7a381293773fe48f296f52735321922f372a58702f6eb14","sha512":"5330142859855547ec32c626f8de088e213fc75fd88ef5c95e34724e2cd7c6b1c4019037ef3f77f7951eac67e111f2bf2dbc431ea7894860c8ea4cb0b6ed74fb","ssdeep":"","tlshash":"1741e80abac06d90479deda068f5846b4d5b48c48e80f67976cfd4265a713e28f481eb","first_seen":"2024-12-08T15:39:09.779663Z","last_seen":"2026-07-25T09:20:52.760749Z","times_seen":99,"resource_available":false,"data":null}},"time_used":1360,"timings":{"blocked":1075,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0565777405b834d02b54b43d44e4cf51a.jpeg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0565777405b834d02b54b43d44e4cf51a.jpeg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 763\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747C78BAF3131C8E016\r\nAccept-Ranges: bytes\r\nETag: \"56F724B14201F1C40772EFF14FB9E575\"\r\nLast-Modified: Tue, 20 Aug 2024 20:31:56 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1937609555909061863\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=565777405b834d02b54b43d44e4cf51a.jpeg\r\nCache-Control: no-cache\r\nContent-MD5: VvcksUIB8cQHcu/xT7nldQ==\r\nx-oss-server-time: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":763,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"56f724b14201f1c40772eff14fb9e575","sha1":"44d3cc7f75839d2ecb8267ddb718797bd93ad0cf","sha256":"bea79ab0a3a1ddde47bd64fbf2a5c1dd168465b6f5c02193f3d7343aabfe1861","sha512":"240cc8306392da9ee9857bf04f3d2ffcb21f84fb18727709b8229161761c68eeee5bf4c3e3c3f19368c40946b53c9698263ba05d1d202d6959ede79355fb9991","ssdeep":"","tlshash":"f501b5530e87d254ec9e6dfc85080ca1ece61ebb082ed25d609905ba4f150a39c4e303","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-08T14:56:05.446475Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1652,"timings":{"blocked":1360,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-e5092a03.css","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:22.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-e5092a03.css HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-4abca\"\r\nexpires: Tue, 02 Jun 2026 02:29:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306122,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"fcf1a204e87606745d644f37615fc16f","sha1":"0664fa52cb860a8a7a726f4a3a686491e0dab039","sha256":"e5092a03f72a48fd801865fdfd03de741457ddada68d0e8712ec5b2f41104251","sha512":"c02c67fad48e4e0b9b466ce8232beb0c19ea3d99f2c10f27246859aab8543eb86e563c3896ed9b3e0bfc9c3974e436fa12daed3c70e05a8d2f8338790d733a61","ssdeep":"6144:nevxsal1W9EkZ8w71ZACkFDS3vyf58rBeV05TS:ev1C9dZ8w71ZACkFDS3vyf58rBeV05TS","tlshash":"5e54d6a9a590117c6f27aa7597ce5ad8f23ce6719c118de8f20060094fc3ff923a7617","first_seen":"2026-04-08T17:19:47.562431Z","last_seen":"2026-06-01T14:33:57.961642Z","times_seen":5,"resource_available":false,"data":null}},"time_used":988,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":988,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-6b19ff4f.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:22.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-6b19ff4f.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-1889f\"\r\nexpires: Tue, 02 Jun 2026 02:29:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100511,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"e367ef43fa48080deb5acc8251cb72e9","sha1":"d02911fee3e5f493f49a49fde8f966a711b0673a","sha256":"606fa6476b9b976bf6f76004c6e3624ca73f6faf07f18db31dab706924402280","sha512":"2cf4cec4ba55029fc268c2f5d0befe0b0651f38773cb0ce3731ada7a6a57926aab4914c5a0a5b05eab195e038c671a0700693acc395462ef38bdeb21bde37bec","ssdeep":"1536:VBrVpvR2G8Bz9AKajjSrJb7bZCe3Uvnun28dqAMZ:Vp7R2G8Bz9AbWbZCe3Uv3R","tlshash":"aca33d8aa40a1eff6dbe0484695f590030691fd35c8ccc9377af6e5a3bf9ce46259318","first_seen":"2026-06-01T14:29:53.748986Z","last_seen":"2026-06-01T14:33:58.001366Z","times_seen":2,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-4539cd0f.css","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-4539cd0f.css HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-27c4\"\r\nexpires: Tue, 02 Jun 2026 02:29:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10180,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10179)","md5":"a6dbf568c81e99819aac62265531e69e","sha1":"a8fb8bbfcf5551e738518d32924f441edb997947","sha256":"4539cd0f865383e2718948a57548f24059e78a7e2f2b443852bb459bfcb58a65","sha512":"7e022a1aed39f45b11610fccc9f12d75e85eaf721b0dd64c2e4c35948652c239af8f4d6d4186527addf32fc68ecab2ea8b49244d7e1f2d91d7d325d8cb974cd3","ssdeep":"192:h0lvx4kh3mqOyI5cL4IVlEYDOab0+Nz+OvLbiMS:h8XyEJjS","tlshash":"df22652df6a52338ac7be155fbd80acce50aba00ea93ddd4f617966208c77e31630149","first_seen":"2026-06-01T14:29:53.750182Z","last_seen":"2026-06-01T14:33:57.955072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.014fd0cf09eea477e86785c026d0520f8.jpeg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.014fd0cf09eea477e86785c026d0520f8.jpeg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1020\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D97474C8B37393225733E\r\nAccept-Ranges: bytes\r\nETag: \"FEFC4C2FEE1744A34034DBBAEF82316F\"\r\nLast-Modified: Tue, 20 Aug 2024 20:29:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1657945692254989793\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=14fd0cf09eea477e86785c026d0520f8.jpeg\r\nCache-Control: no-cache\r\nContent-MD5: /vxML+4XRKNANNu674Ixbw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"fefc4c2fee1744a34034dbbaef82316f","sha1":"ad1774785b02870643113d742c59a861007902ae","sha256":"b9f7aa27195c249887b07ec3b570819e71f7373b36e5a25ae23f55517816b760","sha512":"ebd655eaf1f6896c483cde3b8ddeea93beb609a77207f85aa102822734f26e7882f0f42c5a2704c3d9b3aa52c1d01032c9d92204b200cb0290a84ddf25d394d3","ssdeep":"","tlshash":"4911d8cd6671cf7543f88250823fc86892396d9c50e31df8a21c7543687e130221ccc1","first_seen":"2025-01-06T18:38:04.012508Z","last_seen":"2026-07-23T13:43:31.246529Z","times_seen":101,"resource_available":false,"data":null}},"time_used":1347,"timings":{"blocked":1089,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/token-branded:ltc.svg?2.0.1779896112194","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 03:31:29 GMT","end":"Sat, 22 Aug 2026 04:31:21 GMT"},"fingerprint":{"sha1":"98:A3:D5:E3:BC:F2:61:7E:1A:64:85:90:7B:31:6E:77:4E:EE:97:65","sha256":"EC:93:44:7E:84:82:14:45:88:17:49:4E:8A:A3:78:4D:21:0B:85:20:D2:06:CF:1A:91:4D:75:58:5F:63:84:C9"}}},"request":{"raw":"GET /token-branded:ltc.svg?2.0.1779896112194 HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFAr1nB3eYac8E9o%2BsqzbLu9ZTntna8q7FXwpYx4Bw%2FQWsl60EkV9XQ7kZFoWuxxySLrNQT0byngEsZoilHQ6rdGmHytVq1uVj%2BRJWbzxhOMyN0Fa%2B4v9NakpRYr24voBzP61A%3D%3D\"}]}\r\nlast-modified: Mon, 01 Jun 2026 14:29:26 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a04ee91729010b3d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"54634ed964d8775fe21c3d605fa0d64c","sha1":"5dd761d5a7033d9d27981833da4a70c9dfcdc775","sha256":"1fe06ff220d34eb218f114457f26f6dda6a622fc6bd31a40830bb4dc37737a3a","sha512":"59e3a2473999d145593dbfebf54ceb5091e156948e138a88aceeffd6c994ba609f58f25ed8c0acd5b59bbe8cc3531922447aa12d340791b04afdf22949e39a6d","ssdeep":"","tlshash":"41d09557d3bb162685dc8f11979876445137705401c2009ffd43771534a0cde304b76c","first_seen":"2026-06-01T14:29:53.752113Z","last_seen":"2026-06-01T14:33:57.879262Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":52,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0bccd3e8c020d4c7d85e45ad1ef7a7dd7.jpeg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0bccd3e8c020d4c7d85e45ad1ef7a7dd7.jpeg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 499\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D97474C8B373932D2733E\r\nAccept-Ranges: bytes\r\nETag: \"758505DEC73355A50FA0EA7479FA0223\"\r\nLast-Modified: Tue, 20 Aug 2024 20:25:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8231209139480566513\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=bccd3e8c020d4c7d85e45ad1ef7a7dd7.jpeg\r\nCache-Control: no-cache\r\nContent-MD5: dYUF3sczVaUPoOp0efoCIw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"758505dec73355a50fa0ea7479fa0223","sha1":"f625f75d14059f9ca2f10573bb2c8634c6dc0b8e","sha256":"9ba4907adb5327ca635f6187be09172b1598fcfc0e96b62fb9736d9b17ac23d9","sha512":"de61b7e447da38fb2dad09bafceb7749b71e7fcd5cfa1e1d595c79bbb59e48c630c15c57c88d5154b3fdd22364d12d5fc6569173fedfb98fedbef50ae5191ac1","ssdeep":"","tlshash":"3ff054ed83a4ec7cf60bc3608f20e828c630b96b348d0c16256eb6309b4d09c2db11f6","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-23T13:38:34.312694Z","times_seen":175,"resource_available":false,"data":null}},"time_used":1800,"timings":{"blocked":1543,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/common/type/defi_activity_type","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T11:42:19.097873Z","times_seen":17527238,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/common/type/defi_activity_type","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-07-24T20:44:12.069282Z","times_seen":782,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/platform/dev/config.js?1780324164527","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /platform/dev/config.js?1780324164527 HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 382\r\nlast-modified: Wed, 27 May 2026 15:34:58 GMT\r\netag: \"6a170f22-17e\"\r\nexpires: Tue, 02 Jun 2026 02:29:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"e5b2d14d21bf45992ec083408f892f36","sha1":"ea0676026f6951a8f24bd9d0ecae136eb148fa49","sha256":"600378e8acb9d09724ad658249830e95de4a79579f9d12eaa2d4668d2755ba1c","sha512":"93f487b83bcb716539d3dff7e7f3ed3012bb69ea2fb62e778d327ed589bc4a7113dd7b77c0e71278020613d2cc326c52e19ccbc874bc4ce055bf432cae3c1d7e","ssdeep":"","tlshash":"fee0f8fb3238c1b050809e1a2cec502bf3db25738c9c0a2ef484aa082e4de6c217c090","first_seen":"2025-06-03T16:32:00.298116Z","last_seen":"2026-07-17T15:41:35.690291Z","times_seen":23,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/common/getCoinList","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T11:42:19.097873Z","times_seen":17527238,"resource_available":true,"data":null}},"time_used":1543,"timings":{"blocked":623,"dns":3,"connect":314,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/currencyItem-23dc0535.css","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/currencyItem-23dc0535.css HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-6d6\"\r\nexpires: Tue, 02 Jun 2026 02:29:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"8c2bda1d869b434db3e73feb2f974463","sha1":"d0654c8c16901111d91b7d6601dbb3d570425bf3","sha256":"23dc0535aa91953f71dd7f3f793539b5f1e7839c00a8096ee2947ec3aec99276","sha512":"bf6e976fcece61eea5ca6160a3efa14fad9b743403eab0ee9eeadf24fbbda74f5969fd85eca5f64b349cb97fe8c741ba389cbe21d35083c0afd2ef41958f5705","ssdeep":"","tlshash":"7c31dec553110735db37f486aeb8d514801c7fc1900756d9ec9b26272ccbba34ab0a3a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-14T17:49:40.77999Z","times_seen":51,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/cryptocurrency-color:btc.svg?2.0.1779896112194","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 03:31:29 GMT","end":"Sat, 22 Aug 2026 04:31:21 GMT"},"fingerprint":{"sha1":"98:A3:D5:E3:BC:F2:61:7E:1A:64:85:90:7B:31:6E:77:4E:EE:97:65","sha256":"EC:93:44:7E:84:82:14:45:88:17:49:4E:8A:A3:78:4D:21:0B:85:20:D2:06:CF:1A:91:4D:75:58:5F:63:84:C9"}}},"request":{"raw":"GET /cryptocurrency-color:btc.svg?2.0.1779896112194 HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3KQpsb9J7LLYKGpYtViKgzVnH%2FYSDDDHjjmLMCThLJYTs5K12OPcsZUGMZKAWlltneI8SIAPKvDfmNp8PY4jrwC0WUK43oWrq7JN2FhfDwuojhUGlsZxHspuxrS2lOf584fdg%3D%3D\"}]}\r\nlast-modified: Mon, 01 Jun 2026 14:29:26 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a04ee917390f0b3d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":961,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"4c1e6da93364b56e20d9df91f928f17f","sha1":"678ed5fbd68a9a77bdebacb0c320735cb032835f","sha256":"46538397091dfee521ec6481d01533e205dfbfa751cab4863910d4092bb2ac9a","sha512":"ee944c61f451fb027fec2e1764fa432e92412423827e3167d19eda71acd8fbbad51d43448c856c8dc55813e4f62e76066ce703046a02fc24a8aa97a09b17c370","ssdeep":"","tlshash":"071121de5674a508999f8c28bb2bb9423012b4bdd53e8ce4a7af3c4970c17e67524644","first_seen":"2026-06-01T14:29:53.756971Z","last_seen":"2026-07-08T12:21:33.41931Z","times_seen":3,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":51,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.08044302c81a942f7a86d701ca214249f.jpeg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.08044302c81a942f7a86d701ca214249f.jpeg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1353\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747ACF6C53637BDF1FD\r\nAccept-Ranges: bytes\r\nETag: \"3374D8DCC672161C3E942D71643DD6DF\"\r\nLast-Modified: Tue, 20 Aug 2024 20:24:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18229691747106943305\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=8044302c81a942f7a86d701ca214249f.jpeg\r\nCache-Control: no-cache\r\nContent-MD5: M3TY3MZyFhw+lC1xZD3W3w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"3374d8dcc672161c3e942d71643dd6df","sha1":"1eb89d286896e972f6f9e433541e1a406d336db1","sha256":"26a7521cd56d484b5a9775d11c173e6f67c45c68c2bde5feee095b3ff5be0bdd","sha512":"02c86573b4cf743a1576007a70029a3808734d6893546fde74c13a3912a6ad2e850309c5eb0130492321eba8a73b7256f402ea483c861761934463a14eb6aaf9","ssdeep":"","tlshash":"c921084493f1682c99fe6034d1fa5a10dc9de10e392cc8a2ffb9a804722142adcb11b1","first_seen":"2024-08-19T20:18:19.617177Z","last_seen":"2026-07-23T13:38:34.336733Z","times_seen":151,"resource_available":false,"data":null}},"time_used":1315,"timings":{"blocked":1046,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynational.oss-cn-hongkong.aliyuncs.com/echo2/d571771a94224d668478f65dfda3dc1f.jpg?2.0.1779896112194","fqdn":"billynational.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.66.65","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2/d571771a94224d668478f65dfda3dc1f.jpg?2.0.1779896112194 HTTP/1.1\r\nHost: billynational.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 79824\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747ACF6C5373479F2FD\r\nAccept-Ranges: bytes\r\nETag: \"76832295258F3CC43DCF3C92C137101A\"\r\nLast-Modified: Sat, 07 Feb 2026 05:36:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8888401057586767848\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: doMilSWPPMQ9zzySwTcQGg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":79824,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced","md5":"76832295258f3cc43dcf3c92c137101a","sha1":"c495c94804c532c3cda659700d3154e68cf17048","sha256":"9f955ec1e65028894c419f3501d82492258f341ba219f81082384f0df758ec2c","sha512":"b3d56c8f41967800e602f6fa091bfbe63d750f9d2d0fbbd4b75d42a16a4050d0a3e3184cbc0e27850661c84a9122ad3820893db8c04f718eda2394c60fdf9f9b","ssdeep":"1536:xWp7MC+PUvhhiPi+1imke+HIIUMFgAlea4S6KPE18hEiIkDj7:MpL+PUfK9ue+HhgAlex5KnEpkP7","tlshash":"d673f1af53596ece0e32733743de0556f7b682f204a704270e486ab95fb82c2472d392","first_seen":"2026-04-08T17:19:47.578477Z","last_seen":"2026-06-01T14:33:57.94119Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2274,"timings":{"blocked":866,"dns":44,"connect":269,"send":0,"wait":278,"receive":273,"ssl":541},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/charting_library/charting_library.min.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:22.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 May 2026 15:34:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f22-2a6a\"\r\nexpires: Tue, 02 Jun 2026 02:29:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-07-25T06:30:07.562176Z","times_seen":1314,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/vendor-4b39a398.css","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:22.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/vendor-4b39a398.css HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-16c35\"\r\nexpires: Tue, 02 Jun 2026 02:29:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93237,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"2491919d901ad15e82d6c1245fb28968","sha1":"166501022e953ff7bf709e96198c76d4578676de","sha256":"4b39a398237e9aaae03327bd9216047be19b6587a469195ed9160b96c9b5a819","sha512":"c538de42b89cda2c728d4b43d017565e1ac244b948c4dedf116cff1b0d085f16948fbb5d42b798ab020ac7dc3fd8ac2e56ecd365b07edac5e1d25d08edcb73b9","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Bb:BnNIClDsIxuVS8tb","tlshash":"bb93d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-03T16:32:00.309427Z","last_seen":"2026-07-23T14:16:19.583236Z","times_seen":224,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/common/getMt5Amount?coin=xau","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ea26046cc15421d6aedf9ae87fc4944f","sha1":"623f36ccdd5aacc3d2001f2e1805a5df63265349","sha256":"c5a430eae8acf92c00fcbe86163def497affb761ab4be82eef8b0d92497654b0","sha512":"268e1e960ba4ea6255efab44015fe7bca4a3bf17b78fd128222e037329f5aec0abafbdcda5e86b3d464919d71bee3071df0358d514000dfc89753f1f75baec64","ssdeep":"","tlshash":"249002551c589242a88340a59506520404b53564372492484c59912584881a22040c5c","first_seen":"2026-06-01T14:29:53.761135Z","last_seen":"2026-06-01T14:29:53.761135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynational.oss-cn-hongkong.aliyuncs.com/echo2/fbcc9b6590804a7d8bcb5d65dff05334.png","fqdn":"billynational.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.66.65","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2/fbcc9b6590804a7d8bcb5d65dff05334.png HTTP/1.1\r\nHost: billynational.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 365748\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747ACF6C534386AF1FD\r\nAccept-Ranges: bytes\r\nETag: \"13B73D7BD3809C67868CE64DD317DC21\"\r\nLast-Modified: Thu, 14 Aug 2025 02:13:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11533270994567704281\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: E7c9e9OAnGeGjOZN0xfcIQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":365748,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 720, 8-bit/color RGBA, non-interlaced","md5":"13b73d7bd3809c67868ce64dd317dc21","sha1":"a48aa4d1f8c06625cd08bcaf72013d638c6c92fd","sha256":"378495400fbdcd0fe6b4885f1a0df331fc90fd6525c95e7eef008e96560590e3","sha512":"7c56ec2207c864612b1a96c60fccbc2e5eb1ec30e5983b4548c99a1e3a2b1c0742adbe4c5059abdfc2f9581fb6761d62dc04a6696da8801ec4d31b02091b9912","ssdeep":"6144:6qE172MVx4jfoG1yvnR1rKSRlV2himG8TZoi4DfZhTj5XYf1ZjWLsQkhxt9D75:6qE1yckfoGsvR5KSRlIhcKZoi4DfZvXE","tlshash":"077423b7ddabc284e1ef447429663b65bfb2633764d00583f6e254cc499e064ce8f2a4","first_seen":"2026-04-08T17:19:47.557807Z","last_seen":"2026-06-01T14:33:57.891659Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2871,"timings":{"blocked":862,"dns":27,"connect":278,"send":0,"wait":284,"receive":861,"ssl":556},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/cryptocurrency-color:xrp.svg?2.0.1779896112194","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 03:31:29 GMT","end":"Sat, 22 Aug 2026 04:31:21 GMT"},"fingerprint":{"sha1":"98:A3:D5:E3:BC:F2:61:7E:1A:64:85:90:7B:31:6E:77:4E:EE:97:65","sha256":"EC:93:44:7E:84:82:14:45:88:17:49:4E:8A:A3:78:4D:21:0B:85:20:D2:06:CF:1A:91:4D:75:58:5F:63:84:C9"}}},"request":{"raw":"GET /cryptocurrency-color:xrp.svg?2.0.1779896112194 HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OUI%2B%2F83eJ%2F5rTuO0toD24z%2BpstAsbEvIds8b23WNx1Ot9SLA%2FBO%2BHKkRutLDqtuzisRkERV93clHF%2FiQmjHVIMvH0G174FSc1W1YHzxdmsB2jUfFIcz%2FD1poagRs8mkZJ6Kh5w%3D%3D\"}]}\r\nlast-modified: Mon, 01 Jun 2026 14:29:26 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a04ee91739100b3d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":395,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"f22be37dec24c6447099125a0626e837","sha1":"b966b98952cd16584d77b9a06f117b01c1e1edc5","sha256":"617c2ea14f85253ac643622e7b10ce2871d75a101e49baa085685a583ce80458","sha512":"823ae5ebe1485e1778cf6be222ce45a768dc2f53c32a4084299812e1a8677dd7a451dacb5dbaf5236c81041ae994d1b3f346b019b3ddd0d066dc49960e8c9383","ssdeep":"","tlshash":"44e02bad7579f50d44870bb9d62a75802116617d334e057ab00cfa2af0a21eea90bdc8","first_seen":"2026-06-01T14:29:53.763411Z","last_seen":"2026-06-01T14:33:57.899712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":3,"connect":3,"send":0,"wait":52,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/currencyItem-4be8463a.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:25.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/currencyItem-4be8463a.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-4b6\"\r\nexpires: Tue, 02 Jun 2026 02:29:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"b7d8372770b8848265a60424c96644b4","sha1":"8bba3579aeae0bf31de1a0906ecb78311d6a1272","sha256":"317787a8fafd67df87c24ed1f34605776cbfb927feecffb3c102b5a04ec141ac","sha512":"a908ecd57d6c66547d83fe377847d247bc157c996b1e92cd72bcf3c1aa4e7b9d5e6d1b7096b6d8dff37669af2ce7bbd86631780ccd8b10a68bd820a6fcf3488a","ssdeep":"","tlshash":"0e21f48a5901c7b1cbbe9062c57d5414131d7fda701181c5fbed148a3b875fcd724a31","first_seen":"2026-06-01T14:29:53.743651Z","last_seen":"2026-06-01T14:33:57.963559Z","times_seen":2,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0922b3c426aba40d6b4fb5db604307f8c.jpeg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0922b3c426aba40d6b4fb5db604307f8c.jpeg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1599\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747ACF6C5363762F1FD\r\nAccept-Ranges: bytes\r\nETag: \"7982395C5BE4A71C84A0E6ED25C0FFE6\"\r\nLast-Modified: Tue, 20 Aug 2024 20:31:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10124007141188402507\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=922b3c426aba40d6b4fb5db604307f8c.jpeg\r\nCache-Control: no-cache\r\nContent-MD5: eYI5XFvkpxyEoObtJcD/5g==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1599,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"7982395c5be4a71c84a0e6ed25c0ffe6","sha1":"47b16735c5532d2f02fd0f2d644d2e32c4a29a5a","sha256":"18c72092134e339b1b587b0791f93ce88e6d7a4e3fb8ceb46f708050d9e5caf7","sha512":"410cd3f16dfed2cae78da54fbb283132c9ea52b14649abd5ff3812f16038b1c6acd50c84c7cc202cb0f40580bf636f473ec90563f84ce246b6b17f5f156141e2","ssdeep":"","tlshash":"0b310adf6e4f2cabf7f43855e3125e48de33d1e43874071d87a2e10230516560584a45","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-17T15:46:40.846451Z","times_seen":146,"resource_available":false,"data":null}},"time_used":1930,"timings":{"blocked":831,"dns":20,"connect":269,"send":0,"wait":269,"receive":0,"ssl":538},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-46dfabed.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-46dfabed.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 508\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\netag: \"6a170f30-1fc\"\r\nexpires: Tue, 02 Jun 2026 02:29:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (507)","md5":"7a8a7e6f2130655ac5789481460fcf9a","sha1":"412557fcd13dbc9f48c13524a864f648a6349ac6","sha256":"3c1fd33d2cf2c6a4728ad797ea98cbdc7c0a524ce49deeb6e561d9bc15546437","sha512":"3e3f5070bc775931d3e6305645540fdf04df2ec2ea53358b537903ef5b2ce8ea2fe065536029e6d9558a7c693c065c861c9e6e5b06d1c590438a5ec94ddd4ea8","ssdeep":"","tlshash":"46f0055fb96dc0b22fb384e891331811a72d1b8d3f50c5f8948616144a3c8f6d15f124","first_seen":"2026-06-01T14:29:53.723911Z","last_seen":"2026-06-01T14:33:57.860561Z","times_seen":2,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.08479832b180d42a4b07a5aaca57f963e.jpg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.08479832b180d42a4b07a5aaca57f963e.jpg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1997\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747AB67323734312F96\r\nAccept-Ranges: bytes\r\nETag: \"D5976BA8379B358E534ACE5A52B53242\"\r\nLast-Modified: Tue, 20 Aug 2024 20:27:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4062206406599729554\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=8479832b180d42a4b07a5aaca57f963e.jpg\r\nCache-Control: no-cache\r\nContent-MD5: 1ZdrqDebNY5TSs5aUrUyQg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1997,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"d5976ba8379b358e534ace5a52b53242","sha1":"5edc63b7d064ba413750aa1fb041ec51de5e198c","sha256":"4210321132295a31f6710115146adadc92f74bcb1004c6a8a1b3a271597f5838","sha512":"9ce9ee37f060c4e73a8ec179e16fdd68673df3c6bb43ee34919090a3562cb2a892f8ceed20b43134580238db597481bcf8a3a5d69b37401ae0d8d25dfd7c7b8d","ssdeep":"","tlshash":"0f41c8ccaa657f51c304d91290fac167a9530a80c9d0b07a78ced61b09722fb641ebc7","first_seen":"2024-12-08T15:39:09.801273Z","last_seen":"2026-07-25T09:20:52.741539Z","times_seen":100,"resource_available":false,"data":null}},"time_used":1903,"timings":{"blocked":823,"dns":12,"connect":264,"send":0,"wait":269,"receive":0,"ssl":532},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/notice/list?key=ROLL_NOTICE","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":484,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e23f942f7e9679b0edbcaefa50de2064","sha1":"1d823c8af05c1812d781aeb30c11fcf27b75de74","sha256":"62517deff07130498abbeea764d39495a98293bbabfa09346342d8de84aeebf5","sha512":"4c1303740ef90b8c873c5a100eba05f3be7acfec92346b610c338d9c4c78fa32fb32c4b4e62faa7c4fbaaf26612d9b0f6608fde360e39e9cf5b1d533a055bdc1","ssdeep":"","tlshash":"7bf05c4e043c8e76480644c715ccbdcd517f1793d660cd34865bcf1c82f56b5071b908","first_seen":"2024-08-19T15:53:11.172011Z","last_seen":"2026-07-23T13:37:23.462542Z","times_seen":78,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/platform/dev/favicon.ico?2.0.1779896112194","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:25.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1779896112194 HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Wed, 27 May 2026 15:34:58 GMT\r\netag: \"6a170f22-10be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"52fcbdc9b89c76570a1246925d321d0d","sha1":"3f50dd9c170be3d69730f9060d26c40c72bb9d96","sha256":"973c5a83c751f168437e3b261dbd6e939123a9908a711cbed65f18d74696a62d","sha512":"c070c3d1805d341a50bdf930c4fd272b83fe40b7f2f5fa873fc7c46c5cdfb867efa265a29b6d190f393c342edd7079d7181fadc8904d7c6b9b67aee9d3dafb6f","ssdeep":"96:fulu06nYkKiOeP1wl7tU3GLtIJyoAbdDes1:BYgF1K7tU2LtIwoEdDR1","tlshash":"c391debd5deea63cc201467128910264f6f2cf207afb2b0994f7f68dd92d40a532c9a5","first_seen":"2024-12-28T13:26:38.876326Z","last_seen":"2026-07-18T21:01:06.991397Z","times_seen":119,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.078cd2c28a7ce4c968e57c59baea28ab7.jpg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.078cd2c28a7ce4c968e57c59baea28ab7.jpg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1712\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747794D103036198FDB\r\nAccept-Ranges: bytes\r\nETag: \"52622A415647774BA3681C0E049E6800\"\r\nLast-Modified: Tue, 20 Aug 2024 20:26:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16122772042513436958\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=78cd2c28a7ce4c968e57c59baea28ab7.jpg\r\nCache-Control: no-cache\r\nContent-MD5: UmIqQVZHd0ujaBwOBJ5oAA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"52622a415647774ba3681c0e049e6800","sha1":"add4e37d5a7c33344b2a276395cf2f6b247837e9","sha256":"24eda54bc218b21a61b5539a111bbcfc26344f35a0165246b2938bade4a992a8","sha512":"8b6135dc16338c92d3723e72c4ab833794bb2219e328a8177661213c2b98a7ddebdc9fc6348aba722d5304e0eb49944af32acbac0ccf175ed72a1cfab76fb469","ssdeep":"","tlshash":"3731fa497250be419289991110fba0a74da74e90c9e4f261e4cfc9272c313fed97d8cf","first_seen":"2024-12-08T15:39:09.82287Z","last_seen":"2026-07-25T09:20:52.776378Z","times_seen":92,"resource_available":false,"data":null}},"time_used":1942,"timings":{"blocked":832,"dns":24,"connect":270,"send":0,"wait":272,"receive":0,"ssl":540},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0d11d2c7fb54540a9913f46687a67b764.jpeg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0d11d2c7fb54540a9913f46687a67b764.jpeg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 376\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D97476AFD3630370B5A46\r\nAccept-Ranges: bytes\r\nETag: \"BBAD5D8588FA82242A90D749CDD4B43F\"\r\nLast-Modified: Tue, 20 Aug 2024 20:28:08 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1622123216351148044\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=d11d2c7fb54540a9913f46687a67b764.jpeg\r\nCache-Control: no-cache\r\nContent-MD5: u61dhYj6giQqkNdJzdS0Pw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"bbad5d8588fa82242a90d749cdd4b43f","sha1":"aa2ec10316872a7a99bee54bd7a219f725f1738a","sha256":"2b10a6251723a1d78eebdbfc3ff8bbca7b0bf0ef3df87520025e12b595c9e292","sha512":"0e02dff3e327831196961905d0aaa054beb807bc1cacdababfd0c78e106ee95c1630c0d3890831e656e4cb45bbb01021dd4a70191e03992cdc63bb42834a6e85","ssdeep":"","tlshash":"32e060e7f2808cf2cac90037e3320320d08f80523380324b41301a914180fd783c134f","first_seen":"2024-01-21T00:00:18Z","last_seen":"2026-07-18T22:16:29.08694Z","times_seen":124,"resource_available":false,"data":null}},"time_used":1944,"timings":{"blocked":833,"dns":17,"connect":274,"send":0,"wait":273,"receive":0,"ssl":545},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0f50209aed8d346f9a0686f97dc09f73a.jpeg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0f50209aed8d346f9a0686f97dc09f73a.jpeg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1171\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747794D1030367A8FDB\r\nAccept-Ranges: bytes\r\nETag: \"899E1330A7ECA444CA0117ADAB9A9785\"\r\nLast-Modified: Tue, 20 Aug 2024 20:30:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1220764530411029107\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=f50209aed8d346f9a0686f97dc09f73a.jpeg\r\nCache-Control: no-cache\r\nContent-MD5: iZ4TMKfspETKARetq5qXhQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1171,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"899e1330a7eca444ca0117adab9a9785","sha1":"a03e72b085388a451f0e346153dd12aeac7f3341","sha256":"1aa1ac901880e610deb688ed2c09ce32695eef2b5b7845f3a796a4b3b2b9cd07","sha512":"2a72723f167146a36b2bcccc7a01a59eb698bd25a284e5fcdec909df1c52cf30d1ba38d192acef8475bd9d3b16f577ae8ef355c9a0c4afb03208028d6a38da73","ssdeep":"","tlshash":"42210ab3db6369c5e0cf6c3219ea1492f86201b35de5b14862aeba20317bb40902434c","first_seen":"2025-01-06T18:38:04.009384Z","last_seen":"2026-07-17T15:45:33.079511Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1361,"timings":{"blocked":1089,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0268be7744df54975ae07c74756f1bbba.jpg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0268be7744df54975ae07c74756f1bbba.jpg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4132\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D97476AFD363037295B46\r\nAccept-Ranges: bytes\r\nETag: \"886DD2E9E7ACF01CE99935135129DA70\"\r\nLast-Modified: Tue, 20 Aug 2024 20:25:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 937283100100584893\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=268be7744df54975ae07c74756f1bbba.jpg\r\nCache-Control: no-cache\r\nContent-MD5: iG3S6ees8BzpmTUTUSnacA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"886dd2e9e7acf01ce99935135129da70","sha1":"a6b6378cdee4595bae45cf5236f301b316c4f4bc","sha256":"e39d56e54bce5eb62b4e911c72a527671cb0954aa49f8f17714c3def94c04acc","sha512":"91ed05a28d3f739ec9e31a94eaa6ac29f1f27b7a72ee25dd9759e73c41fcabb960452b014fbb40ac50f02d283eea1310764a4a659da639aff4bbbdb7d4274143","ssdeep":"96:3qrYVFKsDwGqu4cYipLzIEhsRrZ4xkzC4:hF4cfLz50rZ4QF","tlshash":"a8814c06f9c55483e368e00a51df31ab0d468c80ded2d15abbcbc6a642787ba572f09f","first_seen":"2024-12-08T15:39:09.777158Z","last_seen":"2026-07-25T09:20:52.810018Z","times_seen":84,"resource_available":false,"data":null}},"time_used":1593,"timings":{"blocked":1318,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.0894a520c3df8401a88a563efed800fde.jpeg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0894a520c3df8401a88a563efed800fde.jpeg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 784\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D97474C8B37393275733E\r\nAccept-Ranges: bytes\r\nETag: \"19154533B233E7A8D836C55D57165033\"\r\nLast-Modified: Tue, 20 Aug 2024 20:31:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10570888818531062478\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=894a520c3df8401a88a563efed800fde.jpeg\r\nCache-Control: no-cache\r\nContent-MD5: GRVFM7Iz56jYNsVdVxZQMw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":784,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"19154533b233e7a8d836c55d57165033","sha1":"79e82f076eda4be14c1e56e3be6aa491607e5d54","sha256":"256f9e3bf6fc881ae8aeb6d248325db9052f1d4cff6f96eee406fc199eb50cc0","sha512":"9e65a255678d151171890a33653739f942ddeb6e4dce4be74dcf6b865e893ee752f5924c1f96fcbd625b43040afd93b152b988b0cb50d5a838390f8a84061c36","ssdeep":"","tlshash":"6c01c5b5eda3b778f206eab640e80b1bc13d8e944252ca0f1ab988808421036a861026","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-08T14:56:05.453688Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1543,"timings":{"blocked":1285,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/resource/fonts/DINOT-Medium.otf","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://billynatinal.com/assets/index-e5092a03.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Wed, 27 May 2026 15:34:58 GMT\r\netag: \"6a170f22-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-25T09:20:52.740401Z","times_seen":1700,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/vendor-93b7ce71.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/vendor-93b7ce71.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-e27fb\"\r\nexpires: Tue, 02 Jun 2026 02:29:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":927739,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ea6d61bdac00a5a9b70630a439f9c029","sha1":"dd1947a855f3bb73ca80b534606754669df40b32","sha256":"7012e144ef983e007990b06b5f63c9bd37403f9d3c40d8643b3639db42720cf7","sha512":"8bdf209e95db0bc6276398fd63959a3d5d5da41719b18fe82fb55524b8790b9a2a164a24ee50e1de54d979ec027c713cc81be61a6baa08192cb04bc78753eadf","ssdeep":"12288:TAT1O3FcXC8WEQhh+X8sxNsRJywe1/z2ZBGxIU1KF/W966OMG77t5Ck:TAT1fyC1X8XRJyweFz2XRfF/W966OMg/","tlshash":"d91529c97692f06147ab24e240bb0006f3396e59740e84a4f16d98eb7d79d89d2b7f3c","first_seen":"2026-06-01T14:26:05.643336Z","last_seen":"2026-07-17T16:01:44.28957Z","times_seen":12,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-f7aa9454.css","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-f7aa9454.css HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-a01\"\r\nexpires: Tue, 02 Jun 2026 02:29:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"5edf576057d568300f2b1e0c86087781","sha1":"df54980df44f543b48e9e9b7c2d34767af2430e2","sha256":"f7aa94541c64657560ce777069ed172bad83b3b9200c528800cfb6d601104b8b","sha512":"4ed38fceccdcd9dc190e420a7722ab572411de060164d7b7f61d0dc0d94f217de8d81a7575790b345f3b909566cadeeb8a92a4cb6ab53860ea3497a554447fdb","ssdeep":"","tlshash":"5051339ef79552351d73da8bae845e4cd100bf82e04aadc5f14b960a09dfaa3193431f","first_seen":"2026-04-08T17:19:47.503989Z","last_seen":"2026-06-29T18:43:27.541992Z","times_seen":6,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-cdb3ac80.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-cdb3ac80.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:24 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 772\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\netag: \"6a170f30-304\"\r\nexpires: Tue, 02 Jun 2026 02:29:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":772,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"a6ba866cf924e5a24932051934006e3e","sha1":"d8cdff401b25449b77704423eb6ff678c4b8545d","sha256":"f298d076759de8e8165a85b79c31d6aa46cc9db4a9b08d82dc1c9c4c7710848c","sha512":"8b5175a4e08f719d9d4f4d9ab7dafc093ce31448f430f4158eca53b959a52d5cc832d9a27a2fff5d2fcf215ba6dc2aebb9640a6573958932bec90e886867a615","ssdeep":"","tlshash":"4801d0f9fc0dcebb1f62068002a1360114092fddfa1419f298877e661be4950d7de72d","first_seen":"2026-04-08T17:19:47.548453Z","last_seen":"2026-07-17T16:01:44.29373Z","times_seen":15,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/index-a97021fb.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:24.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/index-a97021fb.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-365a\"\r\nexpires: Tue, 02 Jun 2026 02:29:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13914,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13913)","md5":"0b45467ae038d791a78cfa2fb4d5d064","sha1":"b22c5ed04eebe365f7bca73b50dab8e8f9dae27e","sha256":"98a796e7cd6cb00043c4e5316007781e2e0c0e5a3ea70d81e15216b2d4e634d1","sha512":"eddeb30a821a41725f20874c737f8e195bbcff057c0b062a5537bd2db8f774a8f7a2cb6102a3218942c202228bebce9c16adc4d09b537450bbff7ecde38b85c3","ssdeep":"384:jgzsETzh1605PF0JLAfU2wIKDmMcOHuZQkYM1zprhQhdCYSk:0rfHSLAfUaUIFprhQhdCYD","tlshash":"0152e869f802993ef6ffe05140980050b66a7ffb411a49e2b9bc5d4a7352eb8f74d708","first_seen":"2026-06-01T14:29:53.732845Z","last_seen":"2026-06-01T14:33:57.896627Z","times_seen":2,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/resource/svg/light/mengbanzu13.svg?2.0.1779896112194","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1779896112194 HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 27 May 2026 15:34:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f23-4b2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-07-23T14:41:15.074527Z","times_seen":917,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":545,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"04740edd836181c75f2b0785500a7b26","sha1":"3f5b4b8fddeff1c83c4a79c4808615c9b786e046","sha256":"f1f18dd050d5b9274b25c5fde7f755a235e99013ec335f6f5a661116559ef966","sha512":"f49cd26baf6553b4266a4c76500864d57846470117164efaafd5b2f1c0970222a4f3f7b49b5fc296ec5760099376c81418e25c32b3e189204b4244aac13997e4","ssdeep":"","tlshash":"50f0591f25789e690c4549d758cdbdc9929e268b93a0cc3499aacf6c41f58bb0f06508","first_seen":"2026-04-08T17:19:47.574036Z","last_seen":"2026-06-01T14:33:57.983767Z","times_seen":5,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-01T14:29:21.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:22 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-148b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5259,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"42dc31b96932744fffc55dfce95c72b0","sha1":"4ad7099678bfb55378fba6c9490059cccac77d94","sha256":"551d7f36ec2f476c86b0cdf900b28e701817b2fb929d3e969c55787e1a1291ad","sha512":"451636ae60858a54a5d093bef11d0b1b0279e941e21184ddee6d401c89862f20b9e16429da4cd49c83f745a7305231d6bc624326bc4549715bceaa46016eac18","ssdeep":"96:Tr82jFEe5yKuc679ZHVTbqEt/kZr6TCZydHRH/gr2mUsGKAiowGpuB1niHriHmHI:TFjrL67PH3SZCxf22nfD3bpuB1niLiGo","tlshash":"94b162b36cf4c85a2391412bebd7b0189f61519389199854b5cc40ed8fd1fe588dbbb4","first_seen":"2026-06-01T14:29:53.78882Z","last_seen":"2026-06-01T14:33:57.882493Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1567,"timings":{"blocked":635,"dns":33,"connect":298,"send":0,"wait":297,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/common/getCoinList","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:25.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17577,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"33705c1b7e2f77ee4309d07d8b901363","sha1":"d943473727a6cbd03b8bea7f3b5903a39669aa1d","sha256":"2296f0c3a8de13846d91eafbf10e2fbcd95daae254aee41104728536ab64a9d0","sha512":"1401d8ddec6ddfefac2d72eb85e3ccd85a863a84fc5da287b5b718c097be40b3474a91ec83d12683a380f4853d80f4573f05d8c1d1da516d816dca4e6d39edaf","ssdeep":"192:VXOsXc9Xl9XfcWXPPXA40XTtXWKdS5guMwXcwYvK7IYfbCKCDnj3LxGQlfTttwh5:hrLL/kz","tlshash":"b0821255512c94bdc63ed4e11eef7912519d312fadc68e1bc3ce4d894ee8ab06a0af03","first_seen":"2026-06-01T14:29:53.789833Z","last_seen":"2026-06-01T14:29:53.789833Z","times_seen":1,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/platform/dev/logo_144.png?2.0.1779896112194","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:25.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1779896112194 HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 27 May 2026 15:34:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f22-b5c\"\r\nexpires: Wed, 01 Jul 2026 14:29:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"9a5a67a3b984ab223eef25ac3f419432","sha1":"5b07513414db526d86d32c3b8f42c0dbb62a8e71","sha256":"38055609c5d61aad696e97b746489c7f886b79cc069326312c6a111062019777","sha512":"4f610ac72700d9727ff6d32567b7d71a582a8c87eb067e4f33a8a910c66968514277df68c0794d1db6ce3a94ed0111003a71afd8cab40dcb3bc062dfb9f14bad","ssdeep":"","tlshash":"0c5119e6d89d003a4dd329b7b0f03e45fe7ab5fb5ab6330480972b3065552ab84d8327","first_seen":"2024-10-20T08:32:52.883488Z","last_seen":"2026-07-17T15:50:58.925926Z","times_seen":294,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hhapi.billynatinal.com/api/common/getMt5Amount?coin=xag","fqdn":"hhapi.billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:25.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hhapi.billynatinal.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:31:22 GMT","end":"Tue, 25 Aug 2026 14:31:21 GMT"},"fingerprint":{"sha1":"16:6C:D7:59:BF:18:D0:91:EE:E8:FD:2B:6A:E0:2F:DE:C1:92:1F:BD","sha256":"5F:C0:23:6A:45:1B:B5:11:01:9D:63:A8:EE:07:FE:5A:85:60:65:70:77:FD:8A:E4:37:49:B6:FA:56:99:31:F3"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: hhapi.billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://billynatinal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:25 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://billynatinal.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T11:42:19.097873Z","times_seen":17527238,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"hhapi.billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/resource/svg/light/mengbanzu12.svg?2.0.1779896112194","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1779896112194 HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 802\r\nlast-modified: Wed, 27 May 2026 15:34:59 GMT\r\netag: \"6a170f23-322\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-23T14:41:15.081449Z","times_seen":969,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/cryptocurrency-color:eth.svg?2.0.1779896112194","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 03:31:29 GMT","end":"Sat, 22 Aug 2026 04:31:21 GMT"},"fingerprint":{"sha1":"98:A3:D5:E3:BC:F2:61:7E:1A:64:85:90:7B:31:6E:77:4E:EE:97:65","sha256":"EC:93:44:7E:84:82:14:45:88:17:49:4E:8A:A3:78:4D:21:0B:85:20:D2:06:CF:1A:91:4D:75:58:5F:63:84:C9"}}},"request":{"raw":"GET /cryptocurrency-color:eth.svg?2.0.1779896112194 HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xxi9fvBSVztGwqsOEJHNGS8xpnkyFPRUTEV8oIEGOwG%2B5fil9x%2BrCEwCpziv2TRangxV7FioL9RGmzVAHLn8L8spqncALmwYLbq%2BCan9Nw2TpRs5qqjmjem%2FxZr%2BxbBHokmbGA%3D%3D\"}]}\r\nlast-modified: Mon, 01 Jun 2026 14:29:26 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a04ee91739130b3d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":551,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"7b4ff2498e81a71964f314f134b37fea","sha1":"96614ee8acd91a023091fbaacbce7bca20555ad8","sha256":"bfea906caecdfc5c8dc05b3ad6af6dd06c9e350226f344dd51caab922d21d2c6","sha512":"96baa36493ec4661018b4f6e40976b7de7e035c2d4c943dd89771f46a985bacf793e7bf88131529096bbb041d3061e1c116b7911d757f7c2f1678c4fba9cb1a5","ssdeep":"","tlshash":"e8f046e959287454a82b1fbcd67c98a3306771f40b3d0ce9b1801912a95899f9cd6b84","first_seen":"2026-06-01T14:29:53.798323Z","last_seen":"2026-06-01T14:33:57.988631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":4,"connect":3,"send":0,"wait":52,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvip.oss-cn-hongkong.aliyuncs.com/echo2.015cfef5a45634d0eb8e8661a5a851d27.jpeg?2.0.1779896112194","fqdn":"dfvip.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.182","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.015cfef5a45634d0eb8e8661a5a851d27.jpeg?2.0.1779896112194 HTTP/1.1\r\nHost: dfvip.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 01 Jun 2026 14:29:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1321\r\nConnection: keep-alive\r\nx-oss-request-id: 6A1D9747794D103036DA8FDB\r\nAccept-Ranges: bytes\r\nETag: \"B86773B6AA18C4A58D9C9879EBBA8892\"\r\nLast-Modified: Tue, 20 Aug 2024 20:24:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2019276143507127384\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=15cfef5a45634d0eb8e8661a5a851d27.jpeg\r\nCache-Control: no-cache\r\nContent-MD5: uGdztqoYxKWNnJh567qIkg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"b86773b6aa18c4a58d9c9879ebba8892","sha1":"cb93b7a65e61e1206a92c01b63e9484b09885a5c","sha256":"1265faf359314ea74da3377a409087910279422db110469598b5cd514c918b91","sha512":"b2141ef8ef08d94acf6e764614667adc6c5893f057d55035d9a76c66b3ece5760ae98a67f500d8af66351a3ac6b7e254a65f21ce8ae6565e222bc89f3af61bd2","ssdeep":"","tlshash":"d321fbc2b3414eb836baae955312dc525efa7b6003198d8d3d212a67cd82311f962289","first_seen":"2024-08-19T20:18:19.617789Z","last_seen":"2026-07-23T13:38:34.312033Z","times_seen":117,"resource_available":false,"data":null}},"time_used":1580,"timings":{"blocked":1308,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"billynatinal.com/assets/en-27098f30.js","fqdn":"billynatinal.com","domain":"billynatinal.com","tld":"com"},"ip":{"addr":"118.107.25.167","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:25.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.billynatinal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 14:26:53 GMT","end":"Tue, 25 Aug 2026 14:26:52 GMT"},"fingerprint":{"sha1":"47:0C:A4:D4:7D:69:89:0A:16:9B:F9:FF:32:F7:A2:BD:C6:AF:17:3B","sha256":"FC:90:32:AD:62:0F:91:94:72:F7:19:58:D3:19:48:51:04:FF:E7:39:42:F2:D6:EE:12:57:91:92:03:7F:46:8C"}}},"request":{"raw":"GET /assets/en-27098f30.js HTTP/1.1\r\nHost: billynatinal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 May 2026 15:35:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a170f30-9e23\"\r\nexpires: Tue, 02 Jun 2026 02:29:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40483,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (40460)","md5":"24065c6a86fb6e0de9abb71db9169b4a","sha1":"f08d4b5136f9a5260ef0ef62a4ae7a70d07d21cf","sha256":"e889ab100c698d44a96c276ed3976dc706c671c524bb41bc5b5a16e45a6152a4","sha512":"ff30f093fcb4deb77a33dcad69d46b6d2660a1e11938fd266792a2f15091a8843124ec116438accf1320e1e38ad52e0c3feb4183580114265397d8852683c18f","ssdeep":"768:+GtZcEw/o7rKOdAFsifnAMC2rAaAMFooP6+6sPG9w1mwO6fpk7aOLxO:iponKOdebE2rdFoLsPWwqLxO","tlshash":"8003d6897e1a989a04f3537674ce6e1120f60ac18255881f4fedc9fd93d2b67a363b34","first_seen":"2026-04-08T17:19:47.512151Z","last_seen":"2026-06-01T14:33:57.890837Z","times_seen":5,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"billynatinal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/token-branded:doge.svg?2.0.1779896112194","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://billynatinal.com/","date":"2026-06-01T14:29:26.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 03:31:29 GMT","end":"Sat, 22 Aug 2026 04:31:21 GMT"},"fingerprint":{"sha1":"98:A3:D5:E3:BC:F2:61:7E:1A:64:85:90:7B:31:6E:77:4E:EE:97:65","sha256":"EC:93:44:7E:84:82:14:45:88:17:49:4E:8A:A3:78:4D:21:0B:85:20:D2:06:CF:1A:91:4D:75:58:5F:63:84:C9"}}},"request":{"raw":"GET /token-branded:doge.svg?2.0.1779896112194 HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:29:26 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSgooBU8hfQO8xFj8wlgmVjp5S2ScJ5WW8IAa%2FDjVxDPI80fXOvv8wDj2xIgpdK6wEwCWbnXIj1KFQ5zW%2FVkweV9v0ogsHwEC45VcY9HD4fXBsjR2N%2BHTuQid3LeLLHoJ9eWPw%3D%3D\"}]}\r\nlast-modified: Mon, 01 Jun 2026 14:29:26 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a04ee91749190b3d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25865,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"e674943418f0a6679719469a62ad7dee","sha1":"5a2ae47a2573779cfbde123c1b3223f3832c0f82","sha256":"3170d7e29582398301b0a0b58d94574e9e11cc3a3d7724e2bba903f759c3c6a9","sha512":"28fdabf0cd14e5f3fefbf3effa816f4d679436d28ae7342b880d9c6421d67006c5a91f020aa3b0b93290298ff5c98e6660654dd7f7acdebec6c21cd3ca3b9ad0","ssdeep":"384:Vz365ZM4f2RHDnlm4Y5HmQ88T7mreKhnS0GjH43OnMfWVI/:VKrfkhm4qGSmCKtS7H4AMeVK","tlshash":"c1c2beda212c539c948af35e8b6fedd0530e60aa7471d6c15eef97b8a00b680ff57850","first_seen":"2026-06-01T14:29:53.804619Z","last_seen":"2026-06-01T14:33:57.929454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":5,"connect":3,"send":0,"wait":57,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}