{"report_id":"904dd9dd-2f02-4d72-bdd1-d2d3068cc893","version":6,"status":"done","tags":[],"date":"2026-02-03T09:45:07Z","url":{"schema":"https","addr":"bybittvn.com/","fqdn":"bybittvn.com","domain":"bybittvn.com","tld":"com"},"ip":{"addr":"104.21.3.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bysbiy.xyz/#/index","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"title":"BYBIT","dom":{"size":45411,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32915)","md5":"726f7f3a96d09d141b5b6eaca97246d2","sha1":"1e63d6552328062dc7325d15148adb9871b9201e","sha256":"b0b9d8f8105cbcb9489428a63d805789461764bdba1d68739d89c57b42c360ec","sha512":"39d19a86d8d6dc42612466e219a7c2ff91b875ae103f35e90f798855084fa04d236988bf2a2eeceffa3a6720a3cba2610e90fceabe948dda5626f7492673c364","ssdeep":"768:fYvLU4TjnquTVUbPn3DdPDxVc8+KXSCXwxrgeR:fYTUMeuTVODRDzc8VSJrgA","tlshash":"5f135370900000af01a3add5fd36fb4e75b7eb4ed635c4b05a6eca598fcbda0b625462","dom_hash":"domhash51fc0d1479c0b466ed1e04f354c575b0","first_seen":"2026-02-03T09:45:11.783432Z","last_seen":"2026-02-03T09:45:11.783432Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bybittvn.com/","fqdn":"bybittvn.com","domain":"bybittvn.com","tld":"com"},"ip":{"addr":"104.21.3.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T09:45:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"admin.bysbie.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bybittvn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"admin.bysbie.com","ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"domain_registered":"2025-12-04","domain_rank":0,"first_seen":"2026-02-03T09:13:21.704814Z","last_seen":"2026-02-03T09:13:21.704814Z","alert_count":18,"request_count":6,"received_data":26400,"sent_data":3156,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bybittvn.com","ip":{"addr":"172.67.153.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-29","domain_rank":0,"first_seen":"2026-02-03T09:13:21.703446Z","last_seen":"2026-02-03T09:13:21.703446Z","alert_count":1,"request_count":1,"received_data":19205,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bysbiy.xyz","ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"domain_registered":"2025-12-22","domain_rank":0,"first_seen":"2026-02-03T09:13:21.7035Z","last_seen":"2026-02-03T09:13:21.7035Z","alert_count":364,"request_count":91,"received_data":5694040,"sent_data":42451,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-vendors.a80ed86b.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"4048dd5ddd2fbd7bbfba0a5c9a99872a","sha1":"705b3c8857f2f024dd470f5eedaab688ffd4bf07","sha256":"b7abf874592a7b913f9500f2884ac43191ee9fc2527b990a404afe42cb802d8a","sha512":"9b94dc38125ee06600af38df98afd0349d63b5c05024a5d81f55f6c191cd6d6627922510dc5bd04dfab182d6b0b9e1bf04855868f745cd12c0480b3290d01f5e","ssdeep":"3072:bE4+r1TDXHcT51hNhxNbNhICRYdJuJG5pvruV9GhR5sLMD01cK+BL0HncXXJ71SU:bE4GcT511brtMV6VQHpFS4M6xy/O","tlshash":"3ea4d78ab2c6b42507a760f0402f150af2372958b40a84dcfab9f4e56d7d95da13bf3d","size":453124,"data":"","first_seen":"2026-02-03T09:13:27.229793Z","last_seen":"2026-05-13T06:37:28.785282Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/app.7e87d4cf.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d36b4e10da2dfa6056bd69cda506a2ea","sha1":"91ed7806005d8c8f88357ea10316f0a4de627751","sha256":"aafe79cf9277a593200ad9c86a2d65e5be64ba8753b5f209c2b68b0c17da1de7","sha512":"5be9918fca33c24c3065a11c5b747f1ac477d439531c5b24308b8da76fa3668c5280109255a280ba93b6a111798128299562ccadd909cf32632ac1181ab0ff2a","ssdeep":"6144:Tu37KxGv9nQWTzTjjll+II1+rPgbwpIH8Y:i37KxGv9nQWOFwpIH3","tlshash":"4f445c3806cd2eb64b8447c6c0877a4f21ef097bab95952448fede2d02cef99d216735","size":269155,"data":"","first_seen":"2026-02-03T09:13:27.28015Z","last_seen":"2026-02-03T09:45:11.853333Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-6c077582.90eb8c38.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"688f7a85630328077446b7c0e33dc8cf","sha1":"4b255fd1fd47d1e4d3cbc716d2abcca02d538a8b","sha256":"9725ba72f1a27205fbe37b494143074e96cd23fe320332b1e499cb52c586ab9c","sha512":"5ba616260395e672c8bd2ba13b5976ed0ca53a8bd5b8c95a1a292efc1c49118d9a675610f14085fb993b2a4f3340ebdc994a0f0dec289b3beeb79548c8f0beb5","ssdeep":"384:gjdohxxqGTLVZRrj9Po9mHc9KgOfssMO/I:gjinqGTZDjCUc9KgO0x","tlshash":"bcb2f919e8f7941f589a5065309f3910f0762ae8b211c58abb78dee06591d3c3b3f7ac","size":23916,"data":"","first_seen":"2026-02-03T09:13:27.18705Z","last_seen":"2026-02-03T09:45:11.793226Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-67aa1b26.61ce0389.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:04.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-67aa1b26.61ce0389.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-558\"\r\nexpires: Tue, 03 Feb 2026 21:45:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1368,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1368), with no line terminators","md5":"8457d6dc00ed103d51f850a9a5ebd4ce","sha1":"fe58abb4d057b13d1cf52e97ddd04e55a38b9056","sha256":"556a6893c883a3c4e40ab14b715f619478a99499274321760f499286b1384436","sha512":"0893704952264d3f3e7296b1916fdb0566cd377609e2e5e4da460b11dfab653e79dff9e00ad5eda03f4f061b2a3eaf5d5cece01ce5283b8cfaeb1475f08d835e","ssdeep":"","tlshash":"fd21696478dbe59c146eac22300f3770a01236f4a510c5d76f74c9e81761cbd772ea5c","first_seen":"2026-02-03T09:45:11.784924Z","last_seen":"2026-05-13T06:37:28.903645Z","times_seen":3,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-0e9661fe.7df2af75.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-0e9661fe.7df2af75.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-595\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1429,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1429), with no line terminators","md5":"59c5304dfd0f8f805205f8b78e51ed50","sha1":"707a0b53174fbdbc31c140d96dc79766270a45b6","sha256":"acb948d7c2fe475e23a1cd896b36c06204c5b0b36af538a32a06df738f3929c7","sha512":"846e22a1d99b5c4b303ae0fba5ad5b8f1f19306eecb01f03e78f75e3372a3c99a6bbd8aa15faca3148ff7a3337bbe0554f286bedc0e5ed79d3441b5623e1ae6a","ssdeep":"","tlshash":"90215aa0f78c0c485637c1f9ba2eb58c058efa738a153f66996b57684cdb78a1070b4c","first_seen":"2026-02-03T09:13:27.24819Z","last_seen":"2026-05-13T06:37:28.972878Z","times_seen":3,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-10393396.5788c241.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-10393396.5788c241.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-71a\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1818,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1818), with no line terminators","md5":"b239a3a85f6703e9e064b6f2cc23f7cf","sha1":"996dedbc9b7c7f33000bb4fe8e0d66ad7157cbef","sha256":"2129f8a13c266586bc3b2be6d78c4aa85fe510358e2c77951b61002c37f56389","sha512":"7e828e863e101d03378b6a34d60bb2b7c35268f5941bbd3ec068ff175755029bef8fd7e695d7f9fece4526c6a72c4965714a7138f5da62a26c2156f271aa3672","ssdeep":"","tlshash":"5931dc62b1c824161733c764fa5af5cc509bfa7682091f6376f3662aace31d3316671c","first_seen":"2026-02-03T09:13:27.235102Z","last_seen":"2026-05-13T06:37:28.774918Z","times_seen":4,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-104ec408.335e2680.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-104ec408.335e2680.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-6f5\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1781,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1781), with no line terminators","md5":"95cf3e001764e48ff4251daaf78a8767","sha1":"11096d82b1408910f53d6bbdcc45d667d1fda185","sha256":"f896ce55a5a6470ba17f1a8f812bc9df5f97e0aa0150cbeb5fee506879e1365a","sha512":"0cf5f166ad60b30e692692df4c35f7f46cecc53ba051d42bf2c05119d9855f64252fcb49d07e4f1bff3fb8162d2e88a867c131739c359f2a57f517caf5e7f5dc","ssdeep":"","tlshash":"b8318db67eac40946776c2fa3d8ef684615fb1b3d6cb5ec0248b18398ce7392315660c","first_seen":"2023-05-17T14:04:53Z","last_seen":"2026-05-13T06:37:28.889849Z","times_seen":10,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-7e93b593.ca614438.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-7e93b593.ca614438.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-820\"\r\nexpires: Tue, 03 Feb 2026 21:44:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2080,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2080), with no line terminators","md5":"59299250341a3f4beb962c41ce72516d","sha1":"8dba549ade5dfefda023d4fb71ccd1bc5f4a4cf2","sha256":"0352f45f5a033ae0df2c6f50ad94409651da7c4ffca31620e665942841195517","sha512":"cbb16aa4671100349eefd63945458371780ac0d3631499270f3b3b8ad01c45bd2f055578a30905fb1fec6d4d0f7d0e87cca4fde7bf49533423d32f586a948480","ssdeep":"","tlshash":"93411726b44c0c0d76afc914267ba2e5001c7b93bb05ef69da3174b94f532e23762e6d","first_seen":"2026-02-03T09:13:27.25825Z","last_seen":"2026-05-13T06:37:28.794128Z","times_seen":3,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/img/swipe.310803f2.png","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /img/swipe.310803f2.png HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-17b2a\"\r\nexpires: Thu, 05 Mar 2026 09:44:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97066,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x572, components 3","md5":"310803f219392b685e3bbed406a22f4d","sha1":"398fc490e294aea6795cf6cf5782668a6d09964b","sha256":"b91533aeaad72c4053d666510123783c8d5c578cbbf2d6890b885b5ad1e392b0","sha512":"38ade9e237a1f4afcd9dbd961bfc13d74cae005f0ee4c76882dc8af8c16385233acb7d200dbdf103b407e899b9551dcbfb0109f24ccb12689b171dad59d75442","ssdeep":"1536:DaFKxoTOau8on4sEpPSZEO5/Gail21fBqLDFAH6CaCiIPkqvKHzOblb/8Y:Dak+6/8on4sq6nlGHl2RB8DCH6CaCuqf","tlshash":"a8930255af70c7b6c70f5a31728281a98733874524a8b3e76dd15e4833c9aa3fc18e78","first_seen":"2026-02-03T09:13:27.22779Z","last_seen":"2026-05-13T06:37:28.964492Z","times_seen":3,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/msg.mp3","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /msg.mp3 HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 20640\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-50a0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-20639/20640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20640,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains:\n- Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"840a1efbb718a69ffe8304c8d5691087","sha1":"f41eacf9c660cac1702257171bff9be8859dfd56","sha256":"e6ab53144d81ceda909d27de01a7e2310fafd4c34f3bec392ecac1e7cc9d44fe","sha512":"f952b501dc8d613db368b738bcd337d00da56c6919ea497d0747f40813f9fd113c0207ce4704923cdc4413bb902e9a4763f87ee111eae672c5925c00b74e88a7","ssdeep":"384:/iWr2cNIdzawfq4C6cjEfKYVLV1sIhq58AzDANz/tmbab4:/Zr8Rawfqj6cjEpVLEhWMDANzsWM","tlshash":"26926d54e27034d0f50d367ba4ca340889231393e6d06cc8bddfa6866fb117aad8f5b6","first_seen":"2026-02-03T09:13:27.269058Z","last_seen":"2026-05-13T06:37:28.813092Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1853,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1806,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-76c3564a.6f21b191.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:04.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-76c3564a.6f21b191.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-21e6\"\r\nexpires: Tue, 03 Feb 2026 21:45:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8678,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8661), with no line terminators","md5":"0329a80087415800f10296d8bbd70d52","sha1":"f70e5cff4d14c7d6110c3e1e90e63ad2669c79c0","sha256":"67d9cc6dd5720998133f204154f01d7844897565855c4a125d15fe28690a1c87","sha512":"b0bb46f632c4841c2fdbfbb23dc47cfcef43431e8fc9ce76ed92a06d02073582ec06d05657af5ba529fd4d9617c73c49ae14de22adfe07f946a2239887d67299","ssdeep":"192:uVHA1cQyqDPo8/8V8cpPBiOQSlouIScopvmhTfK:uVLQxDPyNBifqoJmpvmBfK","tlshash":"0402a51bb1cf8e412aae904024390414703526657dcac45dbfbcdfe99b94d2c39bafb8","first_seen":"2026-02-03T09:45:11.791611Z","last_seen":"2026-05-13T06:37:28.926654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-vendors.41e05949.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:46.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-vendors.41e05949.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-23bbe\"\r\nexpires: Tue, 03 Feb 2026 21:44:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"457691e3146899710ffe8a019d139c3e","sha1":"b34369b58d2032e90031efad03fa483a0756106a","sha256":"b49a9fcf36dad25c03c7aa75b2ae183223c4164c634d99a94c000e1d31f36bdc","sha512":"b855bf062d35d8342b50a6e09fad7bcefd490d4841d1b21599446151feb3c288622292a3b6a025f8bf8c55756bcbdae8b307eea2628a8eeeed4631150ba00f38","ssdeep":"1536:V1QbFNJ+jqkiHcurx3WqyrtpqoSWEDZECfq1xs2iVcEf:V6rxmNH9yDbfk2yEf","tlshash":"58e3e62796c0236cb31bcd209fc4a6d8e224d123e5121bf9f1517a2dcfcbb951296b5b","first_seen":"2026-02-03T09:13:27.23386Z","last_seen":"2026-05-13T06:37:28.935927Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-6c077582.90eb8c38.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:53.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-6c077582.90eb8c38.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-5d73\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23923,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23852), with no line terminators","md5":"688f7a85630328077446b7c0e33dc8cf","sha1":"4b255fd1fd47d1e4d3cbc716d2abcca02d538a8b","sha256":"9725ba72f1a27205fbe37b494143074e96cd23fe320332b1e499cb52c586ab9c","sha512":"5ba616260395e672c8bd2ba13b5976ed0ca53a8bd5b8c95a1a292efc1c49118d9a675610f14085fb993b2a4f3340ebdc994a0f0dec289b3beeb79548c8f0beb5","ssdeep":"384:gjdohxxqGTLVZRrj9Po9mHc9KgOfssMO/I:gjinqGTZDjCUc9KgO0x","tlshash":"bcb2f919e8f7941f589a5065309f3910f0762ae8b211c58abb78dee06591d3c3b3f7ac","first_seen":"2026-02-03T09:13:27.18705Z","last_seen":"2026-02-03T09:45:11.793226Z","times_seen":2,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.bysbie.com/home/home/msgcount","fqdn":"admin.bysbie.com","domain":"bysbie.com","tld":"com"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:42:12 GMT","end":"Sun, 22 Mar 2026 09:42:11 GMT"},"fingerprint":{"sha1":"9C:B7:26:D5:DB:C5:27:4D:46:10:57:B6:21:F6:C6:07:92:6B:07:E5","sha256":"23:56:ED:81:45:76:2B:5E:CD:2E:87:3C:0C:4C:41:19:BF:BB:C1:E8:08:3C:36:25:42:3F:C4:E7:FC:EE:A9:9C"}}},"request":{"raw":"OPTIONS /home/home/msgcount HTTP/1.1\r\nHost: admin.bysbie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://bysbiy.xyz/\r\nOrigin: https://bysbiy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,GET,POST,PUT,DELETE\r\naccess-control-allow-headers: content-type,token,id,authorization\r\nset-cookie: PHPSESSID=u327p9764eic2v64gke2khmt6i; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4d5e649e659db95bd8953f7bb344e7f7","sha1":"74946c5ed4944c37915ce249d4beba8055a23550","sha256":"f22ff4a7d4ba183bede9067fb83f2abfd1aa40f073427f0bf9743187d157e099","sha512":"5a636de1c6e2c0f3436f3dc71970b94ba203f7b0e888c0371f21daccfd70969052cb760207e327a390af101513f58833402b7e30dcedddb9fffde19097853a3a","ssdeep":"","tlshash":"8c9004053c5d501374030044450f170540fd3140050003304c7c5133530c175d000d34","first_seen":"2026-02-03T09:13:27.201987Z","last_seen":"2026-02-03T09:45:11.793753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2183,"timings":{"blocked":920,"dns":59,"connect":315,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"admin.bysbie.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-5adc0e98.b67e6b01.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-5adc0e98.b67e6b01.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 456\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-1c8\"\r\nexpires: Tue, 03 Feb 2026 21:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (456), with no line terminators","md5":"1214cc053ba9e67a12be08b67105922a","sha1":"95ebe99c2c66f638d15f756c79deafba3f9640d8","sha256":"2f45fdae7878bcf6a49950b74429c3080f7cbe549324481d27fc1a5e6650bb69","sha512":"a42113c7779fd0aa8a69ad577d2451d34a8718c2587bc378aa98668e2f107fffd8b921adfe23c825095be5bb9390f038ca4aa24ce41c4634f138c1f4048cc6d7","ssdeep":"","tlshash":"28f05c627a641320f532c0ba2c4e624f705ef332948b6dd0744b78184dd316747dbe5b","first_seen":"2026-02-03T09:13:27.219462Z","last_seen":"2026-05-13T06:37:28.815171Z","times_seen":3,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/assets/img/kf-bg.png","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /assets/img/kf-bg.png HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-08T15:38:38.766236Z","times_seen":547428,"resource_available":true,"data":null}},"time_used":1750,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1750,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-8daf3aaa.cbc495cc.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-8daf3aaa.cbc495cc.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 456\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-1c8\"\r\nexpires: Tue, 03 Feb 2026 21:44:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (456), with no line terminators","md5":"4bed6c922b036cadd4392c4118c04e45","sha1":"7d6f2e638f3f33d71764e544bc45e35abcb951e1","sha256":"98e568555bf19544a05102b1cd1c25c2be2493afc309dcac32b37f0c5957cd3c","sha512":"3e26b468a4f5891721035ee499d8f2b3c797c5bc5dc32acf6c22f14f7383e6a0a028323ef6dfd4a267553032659f7ee3c496bb5c6a3d3250988785e88ef128ba","ssdeep":"","tlshash":"a3f0dc7272a84162e632c07a2c4df2bd125ab3339c0bad80778f58980be30370702a0f","first_seen":"2026-02-03T09:13:27.253742Z","last_seen":"2026-05-13T06:37:28.781091Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1667,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-7043b22d.83547962.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:04.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-7043b22d.83547962.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 949\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-3b5\"\r\nexpires: Tue, 03 Feb 2026 21:45:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":949,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (949), with no line terminators","md5":"9694e0ab6470b454f1b5549823431056","sha1":"7067225f218aeb2eb262ae7c130dcccc0d64b283","sha256":"830548af3a9f2ce2c671ed03e94e839ca03a9ce468e172ec085ce3d0663a2548","sha512":"c6620ba787dad6b310ad35a7df5cdef81fc32d11502fc73f0b06d88d96717577b616537ecc93ce0713459b57ad8bedf6b153a70398bdf7c3657bee769bc72206","ssdeep":"","tlshash":"0311943df0d2d82c0922c084019f7224908e5e6d7a2244eeff68dbc455f0a4a46a9b2c","first_seen":"2026-02-03T09:45:11.795967Z","last_seen":"2026-05-13T06:37:28.906373Z","times_seen":3,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-60a6a39b.8a08e8a6.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-60a6a39b.8a08e8a6.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-69a\"\r\nexpires: Tue, 03 Feb 2026 21:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1690,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1690), with no line terminators","md5":"1e7d08cf1013fce5fa2eeac9832aaeee","sha1":"51ddfee270f5b14d1084f6c406385d061a778683","sha256":"1429cea7093351870cb9b5e88432e68c8fa170421302f107856bebd21af679c2","sha512":"c7f7e120d8f2d245578aac7a54ecc610eba3fbba7d5e5a9c122468a4a1de9c41a05cde24dcc1e70fcc6ef68b54d06d99a8d112ae81c20e482e3879c980e67d65","ssdeep":"","tlshash":"b1318a71799c00266677c27a78cdb2da108bf633c52e1f50967be41d7dd328b2686b0d","first_seen":"2026-02-03T09:13:27.238322Z","last_seen":"2026-05-13T06:37:28.947526Z","times_seen":3,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-7f4595a5.6e119a04.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-7f4595a5.6e119a04.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-5d8\"\r\nexpires: Tue, 03 Feb 2026 21:44:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1496,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1496), with no line terminators","md5":"7bf0726ad529f152940bbc913843827b","sha1":"d351dae7625ad2f7c0e77332058766bcb180b303","sha256":"83e830cf9085a8a28e486331a3f261cd2c032c63271525632574bf02e6962c8e","sha512":"d5589620231a546439d52d18ee8fba502cdb4e189392ead09cc919c57ba221117a7919a8c8ad472a8990fce44798f567b2496ead8ff9400c08b650e474994a1c","ssdeep":"","tlshash":"3931c1f5b6840314bb3bc26e3c8ef64951cbf5b2d59e5fa82acb6054d4c72863347608","first_seen":"2026-02-03T09:13:27.249211Z","last_seen":"2026-05-13T06:37:28.878571Z","times_seen":4,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-85a1e3ae.2ad2ecef.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-85a1e3ae.2ad2ecef.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-809\"\r\nexpires: Tue, 03 Feb 2026 21:44:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2057,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2057), with no line terminators","md5":"a3997a5e741a6c3f2997f8fe49667650","sha1":"641af03583accf568fec2d5dc8b30a25a720119c","sha256":"550bed3866c723deec4210fc4b1a069eb4479a976ec1c12a69ebb1147cc1d084","sha512":"61ba9495b1bd05a446841eee0abc97a1b146fb97caa8ad9e608a658c304147be90841ec36d44d909c7802f798e2f7cb309bba66d3ca79ae19e436310c618a86d","ssdeep":"","tlshash":"7c414561b198d5293533c07d386eb599204ef623c2061feb35df20ea8ce728621f2a4c","first_seen":"2026-02-03T09:13:27.220776Z","last_seen":"2026-05-13T06:37:28.93245Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1634,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-0c60b8c8.bbd4a717.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-0c60b8c8.bbd4a717.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-841\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2113,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2113), with no line terminators","md5":"40d5b8d974309917f077c88ca2b01a10","sha1":"4c9d4bb18b433b009c63dc7ecb62ffd8878dfa97","sha256":"4261563b9a840c000f71dbbebd6cb1981c88beeff4e0f9b6e9c997b6f4963162","sha512":"c663076c7f3413b7bbddd4459439f6c5a674f6c9e44a4185746e3b4c52a3e95c8a6ee4bc064ed4869e4801f5f39b12c705432ab71ab22c06728ad594448fa79b","ssdeep":"","tlshash":"b541df5a70d7a003147e6040606f152731391bc56646e086dbbce7ac5b14aec7abbf6c","first_seen":"2026-02-03T09:13:27.204299Z","last_seen":"2026-05-13T06:37:28.88102Z","times_seen":4,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-2914590f.08e3ecf5.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-2914590f.08e3ecf5.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-d5d\"\r\nexpires: Tue, 03 Feb 2026 21:44:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3421,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3419), with no line terminators","md5":"00fa9163154ab78275eba7656cd6e78b","sha1":"8cb75507e2f67ec472c9b6de1c9b6c8ff3593f63","sha256":"63f8e3e9b54abf197751d84fc76a52e81fc9ba982302fe1faa16cb189ffc2f16","sha512":"e48feeb97fbf4993fdefe0f26465ab9ce9370973ee203224f5b025674e6494d0e05d5550f4d207c636d73cd95789ce60759d2ea3604be070a5e9e1b6d72f5cc8","ssdeep":"","tlshash":"7c613b56f0c3910b2c7d915120af256321341ac9b607e086afb897d55754dbc3a7feac","first_seen":"2026-02-03T09:45:11.799238Z","last_seen":"2026-05-13T06:37:28.882888Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3814,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3814,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-37429003.b24cb0a3.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:02.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-37429003.b24cb0a3.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-1917\"\r\nexpires: Tue, 03 Feb 2026 21:45:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6423,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6375), with no line terminators","md5":"202a6cdd07d451ba13a24670615b8900","sha1":"06b72bf07773087bb684a5a316991c4e63e28e06","sha256":"914ff0fcd5e81bdb75649e1225c42a775d2e3f8c80e482f0114b5ee00a5aee98","sha512":"197c35c7a11e56c554e5a682114c811c9cccc2116112f13bdd4d89fe382ac3c0d872db2f81da1dd37664646167a2503d6026046e4783446f7ecb09d7343a0ed9","ssdeep":"96:/gHldeD2dAAdAxxdvXVb0BYwNvbjOtzddhuSu2TfJ6g/0aJQgnxV+KvXY2d7PBFm:/gKLtxLFwBYaGt4cfJ63qLV+KvXnvJw","tlshash":"77d1c96ef0eb786c09aa72c0a05fa94692272728f44f80e3d7f5d5c5986dd5c0573f28","first_seen":"2026-02-03T09:45:11.800042Z","last_seen":"2026-05-13T06:37:28.854212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-44a0fb4a.f49f07e7.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:02.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-44a0fb4a.f49f07e7.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-8dc\"\r\nexpires: Tue, 03 Feb 2026 21:45:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2268,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2266), with no line terminators","md5":"2fb7e67425ee195efd3f1960dc0eca75","sha1":"11767a77d93fa33b5d049f2b241547c4d820f562","sha256":"204513c9dbd03174015f1faff52b4d4b37f6f0e0bfe76483406673dfb9457dce","sha512":"b82e4aa3c6ecad67d59735f29d4210310cd7e2de4588575b85e5331c9b802fc6af2a02379dbdabcf1df34cb94a3791ea88bd95b2ff3d3d24274911b06852fb17","ssdeep":"","tlshash":"4f41622630c7d45d66aea0a2100e5532a0b13ecda551c4875bb5cbf48bd1d383f2eb8d","first_seen":"2026-02-03T09:45:11.800872Z","last_seen":"2026-05-13T06:37:29.020586Z","times_seen":3,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-5adc0e98.33e25302.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:03.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-5adc0e98.33e25302.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-d42\"\r\nexpires: Tue, 03 Feb 2026 21:45:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3394,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3362), with no line terminators","md5":"46d1b3f483d07516a2ec8aa42e5eeccf","sha1":"1269c563726e3bd212b32fccff76ac06ac8653af","sha256":"5ab544fa4c6c39f67d3e375b4f7adc827d2804ad547c2a45ab4054d1c6460be8","sha512":"bf5338496988696a90368e88b2c5334d5e5b93df9e2f541f1459e34518e3bfb9140180abbc6d6b08b7f0e8f9f4c33ec504c4b3396ff8e927e6777908bcd57680","ssdeep":"","tlshash":"9b612156b0a3927eda6e5140222d4d20f0792fe8c412e04bb73cde5157c0cb91facfaa","first_seen":"2026-02-03T09:45:11.801792Z","last_seen":"2026-05-13T06:37:28.872947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":932,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":932,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.bysbie.com/home/home/index","fqdn":"admin.bysbie.com","domain":"bysbie.com","tld":"com"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:42:12 GMT","end":"Sun, 22 Mar 2026 09:42:11 GMT"},"fingerprint":{"sha1":"9C:B7:26:D5:DB:C5:27:4D:46:10:57:B6:21:F6:C6:07:92:6B:07:E5","sha256":"23:56:ED:81:45:76:2B:5E:CD:2E:87:3C:0C:4C:41:19:BF:BB:C1:E8:08:3C:36:25:42:3F:C4:E7:FC:EE:A9:9C"}}},"request":{"raw":"OPTIONS /home/home/index HTTP/1.1\r\nHost: admin.bysbie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://bysbiy.xyz/\r\nOrigin: https://bysbiy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,GET,POST,PUT,DELETE\r\naccess-control-allow-headers: content-type,token,id,authorization\r\nset-cookie: PHPSESSID=f1n6nqsrv8o1diltf9m4j02egp; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":11506,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"525fcdf204b80cbfdbb382e7e46cd95d","sha1":"4e4e1a69b3a2d540d42ff352f75b2b7cbf7e408f","sha256":"80a923a676eeff2d8239f2e9fad2ebfed177842cd42c26441c488e4aed2fe12f","sha512":"6016a50d1c6d0472475ca8773b77b101fddab397ea0086a0f2cb0e8a1ac18d44fbb06a53fad785a4def038c542c20c90aa968bbc1e847fe872a8df3f6ea632c6","ssdeep":"96:9fk9B63vJrL/A6jLz8lOZWB9x0oeSuBkV7/rN0ud9qJRtuF3cMCClcwQ9xP6b1wg:BC3SUAJaN2KCFziKku9M","tlshash":"b132eddbc279585cc4db1ad3cbb3a8dde82d6519d1c0cfa84e3d9f5bc1982279202729","first_seen":"2026-02-03T09:45:11.802678Z","last_seen":"2026-02-03T09:45:11.802678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2231,"timings":{"blocked":924,"dns":57,"connect":312,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"admin.bysbie.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"admin.bysbie.com/wssss:8080","fqdn":"admin.bysbie.com","domain":"bysbie.com","tld":"com"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:42:12 GMT","end":"Sun, 22 Mar 2026 09:42:11 GMT"},"fingerprint":{"sha1":"9C:B7:26:D5:DB:C5:27:4D:46:10:57:B6:21:F6:C6:07:92:6B:07:E5","sha256":"23:56:ED:81:45:76:2B:5E:CD:2E:87:3C:0C:4C:41:19:BF:BB:C1:E8:08:3C:36:25:42:3F:C4:E7:FC:EE:A9:9C"}}},"request":{"raw":"GET /wssss:8080 HTTP/1.1\r\nHost: admin.bysbie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bysbiy.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ThBK7vFt+NZLm1kPPJ52Dw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Tue, 03 Feb 2026 09:44:56 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: j/rFMsJxXRv8C0CUPsIcNaEprZc=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T15:42:15.821852Z","times_seen":17781527,"resource_available":true,"data":null}},"time_used":3590,"timings":{"blocked":0,"dns":1188,"connect":1575,"send":0,"wait":326,"receive":0,"ssl":1758},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"admin.bysbie.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-371791a1.f07a7937.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-371791a1.f07a7937.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 52\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-34\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"5a868e99035d324250d6dc4ccec96fba","sha1":"04274e235ba12626595e0b76c16d1ec315db742c","sha256":"ae2ab32a54708110c3b8b3b36c98e48c51101ef34cc605652c3fb0f570aa54cb","sha512":"6e70ff810dfc33e6c1cbd0313da77b5344195bb12e13f8e51757cf9dd8f1acc6fbaf2c9058f299d6c79c0c9871e27b502982a9d5e180fd0066594209aebf2d8e","ssdeep":"","tlshash":"069002717519101c4279a24a4160d9581114f546451462105d48741c58976427680d72","first_seen":"2026-02-03T09:13:27.271412Z","last_seen":"2026-05-13T06:37:28.937434Z","times_seen":3,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":545,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-6c077582.9663e537.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-6c077582.9663e537.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-15e0\"\r\nexpires: Tue, 03 Feb 2026 21:44:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5600), with no line terminators","md5":"5ea84d511192acef18fc3dc73535eab0","sha1":"ed67e8cd751ad786a223ffcfe7506392907da901","sha256":"5ecf9f54e62f30864a158bb819f20afbdc94b895889e9c76a1693356aed81870","sha512":"15a25a909145dab351cb28db2fc31cd17c5ae14b2b11bdf18797ba6d1800e99a1d274fb1f42738f83dc48d615701178a358b4d6c83b68a876cb2660bd1c5c3a3","ssdeep":"96:bhIIiHxxu+MkIQEkJvb/lWV3Mx9To/0NovGh8e40:bmIIxVMkIQEkJvb/le3A9s/0NovG6M","tlshash":"72c140a2753c1026f837e1653c57ba9e703bb723d3238264448ba426cec725b2670a6d","first_seen":"2026-02-03T09:13:27.226282Z","last_seen":"2026-02-03T09:45:11.804752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-fde24e76.b63f07ed.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-fde24e76.b63f07ed.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 456\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-1c8\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (456), with no line terminators","md5":"423eaa1ff51a3a4cb9377e447f1b860e","sha1":"75d4d17d34437c9feee1b1455b1c7c9058a6bb35","sha256":"7ee98cb426f5f95816b94b675a899ef710d96a19c6e9eeda873367cb293798f5","sha512":"6ba347e2308d38d4bc7015aafbfd9816f5b949c0bb42e565809091fd12acb071123eee5c262cf44cc505122c816364d0e3faf9bb074b073c21b32443c7fac4b6","ssdeep":"","tlshash":"2ef027627a781124e533c07a2c486269106ab332968b2dd1644b581c8de35762757e0a","first_seen":"2026-02-03T09:13:27.273469Z","last_seen":"2026-05-13T06:37:28.846423Z","times_seen":3,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-5d074518.15af187e.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:03.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-5d074518.15af187e.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-4b6b\"\r\nexpires: Tue, 03 Feb 2026 21:45:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19307,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19305), with no line terminators","md5":"c2a6c0379e9b143c15439dd6d0b3db83","sha1":"6b49a92df3b065a1125715028ee4fd7070064d66","sha256":"dd2764aa6d4e67642cb617403f4e3168d6af7d7766d27b2a56a9226334016d68","sha512":"58ffdfd998300d13c392fc38474cc71c08752da29f282edf3043cec38525ec3187443f4e53f07437e1058a043a0b0f8ef0571b3f377e579de7ac43e705076747","ssdeep":"192:UUqJqOi/d9PIWF8f0AwFQ1eSLjBt6UoL4NCrT5ozNLj1pMQWjPg9tpmjunhB7g7g:U4rDS3BI4NjRLZjDtpScB7B5t","tlshash":"1182962364fb631e41696461a0180c60b4753e996652c18f27bcdff879c5e343aabfbc","first_seen":"2026-02-03T09:45:11.805931Z","last_seen":"2026-05-13T06:37:28.981205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":973,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":973,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-67aa1b26.1cc8ea76.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-67aa1b26.1cc8ea76.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 739\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-2e3\"\r\nexpires: Tue, 03 Feb 2026 21:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":739,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (739), with no line terminators","md5":"0cab26da451e0de8eeddad869fffcfbe","sha1":"5e452f25ed669c042ecc7de48560561ff2308083","sha256":"edbe00300ef8c78b4f9938454af7a052004460aa6e0595dd7f092c15db4f1bcc","sha512":"3f5fc3229456990308724327df699848e4aaa3f576e729c8219ee75a9296c0b3185ec0b64343b23f9957a6eb992cbb142e22bf90b21d3bc78558ac21f03e1fef","ssdeep":"","tlshash":"6501bdb1fac80036577ac6f51c4e698d524f91b2f61f4e946883aa2a85df253214220c","first_seen":"2023-05-17T14:04:53Z","last_seen":"2026-05-13T06:37:28.835414Z","times_seen":11,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-7043b22d.87ce8481.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-7043b22d.87ce8481.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 137\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-89\"\r\nexpires: Tue, 03 Feb 2026 21:44:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"6b90a762ad81d6a51276fd07b1e07c83","sha1":"eaab22567778c370270c8af38809d54ea7936e08","sha256":"24a4b721bb7af8e08ac65e65694488fc971160db34f3b6702d3af7ef9867b9c0","sha512":"d2306a2106747931eb0e2ecb00b2833278a32c5d26e4e91f7a8c86bf8aabf976083fd84f3be943bde58cdc95b71fa6576087b1316bc7e43212ae0f7efebdcb99","ssdeep":"","tlshash":"0fc02b317b483230212ac0f2888305cc30529aa2803f68ccd81a420902c31230f050d8","first_seen":"2023-05-17T14:04:53Z","last_seen":"2026-05-13T06:37:28.985652Z","times_seen":11,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-76c3564a.98444f98.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-76c3564a.98444f98.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-8c8\"\r\nexpires: Tue, 03 Feb 2026 21:44:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2248,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2248), with no line terminators","md5":"14cbfd2b0e359c3fea9fb912124b11f1","sha1":"15ac18934fb48ea06777a2fc3c30b97a45f4ac3e","sha256":"87e27e7c0e62d1152f4d620d0c1338c5293a3d8f62170fce2a00059f1f331e56","sha512":"cd3d5a0977fee9a91df9f86d149484611825b7f61f89d187a545e8e5676e16026757ac96663f56d6cc364aafd220d3d33b1041e12e61a32a26689a046315320e","ssdeep":"","tlshash":"1a4174a1f2cc0c84d676c664786fb6ac038eb623e303bfe09b5751994dc76e61070a0c","first_seen":"2026-02-03T09:13:27.266931Z","last_seen":"2026-05-13T06:37:28.986914Z","times_seen":3,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-7e241765.d05de36c.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-7e241765.d05de36c.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-7d3\"\r\nexpires: Tue, 03 Feb 2026 21:44:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2003,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2003), with no line terminators","md5":"b6c87e5d50f21c3c5d5fb310f07d644c","sha1":"01b91c194fe61ec213eaeb8be559ce4b4b291a6e","sha256":"a1c712f04a6e53cbfddb932d41e2639b113537aa34a27ab5f053541c3f19b703","sha512":"7a9791b8753171d26be991a71413fde27544e884cf331f58b60c68d527be8fbc281fa2b64d1d415c146c66b1f93926814c4dfae7fd98d6d498283fb539032901","ssdeep":"","tlshash":"8e41687733560022f67ac43a38deb258204df2b3cdc59f900d5b285b6ce729666a1b1e","first_seen":"2025-08-21T11:28:56.023238Z","last_seen":"2026-05-13T06:37:28.98892Z","times_seen":8,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/img/mine.f7a88b2a.png","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /img/mine.f7a88b2a.png HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-1803\"\r\nexpires: Thu, 05 Mar 2026 09:44:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"f7a88b2a4900f5e26d5086eaf49b886f","sha1":"1702428dc16e6e5f818ed2de3440e146940460ad","sha256":"347714fe880020227dec98c8b6833a2adb84b6ae326e3e8cfecae3c3ffa29db0","sha512":"7b444548ae223d6d6a847ac37242177e3408861b69da5a08054aefe8caf8af30f56839dbca86c44b48c06f3bb6bdd98f337c0453b41e85461a9d34b8f2263c5b","ssdeep":"96:V4N61nrO5tR9HBeMBca17gWUceb48wIaOqo529mPUMP1K3KrkOUjRl4jUQRHNz:V4CWPhxNgWUc18wIaOqoLUMoKFA4Imz","tlshash":"04c1b0db6ee4d490e98a4b363eecd7040cf662ec6af8dd48695e62dd844528e9f0d440","first_seen":"2025-10-17T23:17:25.118168Z","last_seen":"2026-05-13T06:37:28.806731Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1708,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-2ad652e0.198ffe4d.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-2ad652e0.198ffe4d.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-18fd\"\r\nexpires: Tue, 03 Feb 2026 21:44:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6397,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6391), with no line terminators","md5":"065b808857bd9dc5275d949bfb146bb8","sha1":"64c8fc06a3ff6a1d6fb5bbebb97cb5f7b9079739","sha256":"72b62b81cfefd5e4ddbd0d71e57f36555b0694b928414a6b4a60e3c0ee6ace83","sha512":"33d40f2f6aa62f7d9037e1ebb051de5b9d2e28f54a0fc8fea104f0b63667959c3ddc2608d05332656359d2d26b746d7f404e4cdecd03c7f951ada9eb76a6df88","ssdeep":"96:sIL5BnonyI4dYlZzvX4zRbXdxToXTdCvZWtC7QqEOieXaM/QbeO0Q2RB9JBxhz3:sIL5BoyIoAInRQdIYtYgR+yh0x/9xhz3","tlshash":"8ad1b49fa0c3a8e01be7a180115f3129b0664055b94781cbf7b8dbd56975f9e1832f3e","first_seen":"2026-02-03T09:45:11.809571Z","last_seen":"2026-05-13T06:37:28.850154Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3801,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3801,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-58009880.5cc8bbe1.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:03.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-58009880.5cc8bbe1.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-445\"\r\nexpires: Tue, 03 Feb 2026 21:45:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1085), with no line terminators","md5":"73ceb08e3d01dc41d94558c99b99a65b","sha1":"f382285be8f5f8144fda5c6620568831a75e8bac","sha256":"82a721e33bad7e4a2a9ed8ddf14aad776c2b0c62eb920138f8ab9b4b9c027dee","sha512":"708a9c4ecd51d5ee9d5d1d5410e56557e84bc67e3e689263eb137a5235252343f69e22bb6a750c8734d21115f6c88325f5300ccbef973ac921570da6a0fd3aba","ssdeep":"","tlshash":"071189a170eaa1ec39794495004e37e0e0613f786914e8962f74dd9407f5d9e5532f29","first_seen":"2026-02-03T09:45:11.810421Z","last_seen":"2026-05-13T06:37:28.783126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":935,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":935,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-1d228349.d0e2a5c7.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-1d228349.d0e2a5c7.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 612\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-264\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":612,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (612), with no line terminators","md5":"d8996eaab509adb21071856d3e847f48","sha1":"9a0cab1eb99a520cd8b59f1ab69f565add1b955b","sha256":"07f2b59a47577dea71708b58d89d2b65ff98efe9ae6622170fe3d5dbce4dff2d","sha512":"09a30e195e4b75c2c8583e4a501de0f77b75335fdd5db6df06fd6e9098955f03379c42f44b6ff26c9ce9eff40a11ba167692074f1b47648851a3a7a6fdfb9e0a","ssdeep":"","tlshash":"cbf0a471b77928261276c2797659b1c410d8f36790493fa5551d282c0ddb3ca2ee1b2b","first_seen":"2026-02-03T09:13:27.217919Z","last_seen":"2026-05-13T06:37:28.941988Z","times_seen":3,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-23f4f574.8ee1cff6.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-23f4f574.8ee1cff6.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-72d\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1837,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1837), with no line terminators","md5":"f1a2fb19cab0f54a4b59c8a0e295ac75","sha1":"38d6743642d88d9f33c5dd6a6a32037f8c055412","sha256":"f8bb22289220751998989ab71431fd70958b53a0e99a310e31d90150e7d8181f","sha512":"bf824ea329f786352533299effd10445d79cd08e690e111d369c69fa01c337218fe87fbe8c3b013b4d3cd66034b5fcc5dfb84efc46c2e58ada65ac4a88f166ee","ssdeep":"","tlshash":"ad319ba1729c0134e776d6793ad9b6d4206bea33ca260f30924a74196df32c225a3f0c","first_seen":"2023-05-17T14:04:53Z","last_seen":"2026-05-13T06:37:28.951809Z","times_seen":9,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-37429003.af3d9a9b.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-37429003.af3d9a9b.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-429\"\r\nexpires: Tue, 03 Feb 2026 21:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1065,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1065), with no line terminators","md5":"10d02af40d680f4152051037d83f32ed","sha1":"4cc341ba54d8f51acdef88764759f846e15692ea","sha256":"182ac63cac16aa2496d720c5e2616cba058edef8d9ff453218305b8aec98647e","sha512":"482d43b784b4f907d0b612dae6bcb73f21c8f5d2c3cc9059ff965c708c4e6cc88ff9f1060ae791399884a34fa4ba25c0ad46719704e89cd37cd3e1c33ac04002","ssdeep":"","tlshash":"d0118e617ed820200572c3fd6848e195054af222db4f6f92925a282d4ed7363659ff1c","first_seen":"2026-02-03T09:13:27.250282Z","last_seen":"2026-05-13T06:37:28.975339Z","times_seen":4,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-104ec408.aa29849d.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-104ec408.aa29849d.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-dbb\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3515,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3503), with no line terminators","md5":"a68adbab05efdd9ce947cd870907e978","sha1":"9a79045ab775c3b78d50497b330e85285b1e7981","sha256":"cfd20f5e74a43006e8caa02171df030d6e922a0aab87246badd65f6237c06dcd","sha512":"bf043aada27de8713af7c7049205192321c84c239efe5c48c39dab016d5bb1eb2f5eba87edc5dd4057fd07535e4438f82a2da341fdc9ae6e899f27ff043c567b","ssdeep":"","tlshash":"da712326e8c7908f206e986130973960a43135d86314c9535fbcdef895a6c7c3f1fa9c","first_seen":"2026-02-03T09:13:27.239501Z","last_seen":"2026-05-13T06:37:28.802671Z","times_seen":3,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-3eb604e7.63363e4a.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:02.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-3eb604e7.63363e4a.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-809\"\r\nexpires: Tue, 03 Feb 2026 21:45:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2057,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2057), with no line terminators","md5":"2cd5198af56b7818dc782b7a5802724a","sha1":"3a71dfe128744c5c9654dbae46ba408dae93f240","sha256":"3a557ba25b670a850bca2a2fc7b1628547aaebc0285bffa961362b47ff6d125e","sha512":"64bab20f3d6c7171ca65ad00d4ad8a850fd2ab278883f27e024efc07121fa1bf2c2dfd638238b875209ceb2db4bf97a16f8781868b2c09c55a8fa9f0c548d9e1","ssdeep":"","tlshash":"ce41221db0cbb00ae97e1091609a7a91d03139ccf95dc443ae7ccfd42158e39792eeea","first_seen":"2026-02-03T09:45:11.813494Z","last_seen":"2026-05-13T06:37:28.8036Z","times_seen":2,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T09:44:45.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:46 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-4912\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18706,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (18706), with no line terminators","md5":"9545a29655260dad70c302de532d63c5","sha1":"9e4b0fe54059637bc4e04c5eb014c18180b97e5b","sha256":"6d3d9eb74618da26eda9d4b390856a1b593348243f2306ba921e822c4beca0fe","sha512":"14b36ed56481cd905a77f82d83f8b11338703b9fa592211dd4997307f0057a5accaf3e0615c8b7e3deb6adf05e1e9857288c1cb7ed8b5c54b3cf47c6036a9f14","ssdeep":"192:a6cOTOCVfwT+ONRhSrlwXrI9tSs6n7C2rRRviZGEgfp6ve/4Czphxguiw/OFvdQb:jYBJLP8zVSCIOKRnxA49AtqtR","tlshash":"cc822ef5866451ee6461af7bbf34b399828f69be29708860856e8f2dd057ec4c313843","first_seen":"2026-02-03T09:13:27.263596Z","last_seen":"2026-02-03T09:45:11.814267Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1829,"timings":{"blocked":753,"dns":90,"connect":325,"send":0,"wait":323,"receive":0,"ssl":336},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-2b1c0bdd.642d4de4.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-2b1c0bdd.642d4de4.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-1495\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5269,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5269), with no line terminators","md5":"5f8c8e231d972c58b49fa7da877f881e","sha1":"071a77247aef682b2bbadcc077f3a8063822839b","sha256":"cc8f4b6c0fc81d7d2980d66aa32eafe6d2842c96d06436ea3f04ec879f737a08","sha512":"1d4ec4f7bfa449e110ce5a6a9337cee6a02290484da7d65335bb05026f7a281bba70a42daa671803c986c60374f76bf36f5b30134269ce23927eabe3038eaf2b","ssdeep":"96:uMxWl5nRVtiAzKhBhrjhghz58HtXEe4yHIWPW6XXavR6Oi9cq5r:zWl5nzUGTy5dXqvgNcqp","tlshash":"63b1efa5b00cd801ed77c2653c59f96e249dfab3c206aee0a4a7e42849c764336b171f","first_seen":"2026-02-03T09:13:27.265799Z","last_seen":"2026-05-13T06:37:28.777766Z","times_seen":3,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-58009880.984ef9e1.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-58009880.984ef9e1.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 446\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-1be\"\r\nexpires: Tue, 03 Feb 2026 21:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"81ff69b74c861488a33e6557339f7163","sha1":"97a6bcd3b3cef2724044a5103de740924825d5bb","sha256":"b0cac9c105f6485e4e130e8b5f37041f932e2bff13b3ef17fcf44ce50c7ed89a","sha512":"421b475e1d918b7f67eaebe3a60849106f6e96c9fb024c083a3bb3aa3ef79e7209139158ccc69856fb88cb2f5322d41347b8f8b4f3865ae0e13d7962a837a47b","ssdeep":"","tlshash":"61f09e72f88d2024e22b8cb538097748215cad33c29f5590014bd6084cf3613194220c","first_seen":"2026-02-03T09:13:27.212022Z","last_seen":"2026-05-13T06:37:28.875405Z","times_seen":3,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-5d074518.d0e45a9a.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-5d074518.d0e45a9a.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-149e\"\r\nexpires: Tue, 03 Feb 2026 21:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5278,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5278), with no line terminators","md5":"79559a2340868aa102f8eef0645107c4","sha1":"064d171369118c27a52ee0063f400f95aa4aef09","sha256":"3c173564e097043371eb79bc25540c2164fd40e593c45a9de85739bd19f78f2a","sha512":"d20b54ea9c790a4b6f0306d5b2a6c803213086ad03a0fa0309d65a341afe73e56305f9702c764c1a0092c53eaf8b6535adc040e21e64496967afcd7c11a4ba52","ssdeep":"96:CJB2T4Xxq9thtFhxicz+h9hPjhMhNx5sXYVtBXAeMyWsSDd6rGDvR6o4WBC48o+T:U9q9tb7ASIy0crOvgGGQXc","tlshash":"4db1acaab15c10026933c6653c5af94d41bffa73910a2ee0a7a7f62c69c77833251b0d","first_seen":"2026-02-03T09:13:27.224896Z","last_seen":"2026-05-13T06:37:28.892185Z","times_seen":3,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-664b4e6a.dfb63887.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-664b4e6a.dfb63887.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 575\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-23f\"\r\nexpires: Tue, 03 Feb 2026 21:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":575,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (575), with no line terminators","md5":"e851fd581fa8966373fc0ac9f337d404","sha1":"15666fa508a57c8e5bad8063e152dc79c63a7f26","sha256":"78870714f2839e3dbf666e3ab36fa4a99c372e64d1fac07ebc01ba73d475219a","sha512":"e02a421b443300b1eadb36b75ed6cedbd45c72b2c86d77d05aaaa1a3366af5488cd9083133e5f612b6d2921efbf75e5c10057077ea7cd2a8a4f9696fc22da078","ssdeep":"","tlshash":"51f078b16189b01826f2c9b4380fbf08225ab133c34f39485d86ea3e68d7e0226d138c","first_seen":"2023-11-15T14:27:29Z","last_seen":"2026-05-13T06:37:28.807888Z","times_seen":10,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":383,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"admin.bysbie.com/wss:8880","fqdn":"admin.bysbie.com","domain":"bysbie.com","tld":"com"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:42:12 GMT","end":"Sun, 22 Mar 2026 09:42:11 GMT"},"fingerprint":{"sha1":"9C:B7:26:D5:DB:C5:27:4D:46:10:57:B6:21:F6:C6:07:92:6B:07:E5","sha256":"23:56:ED:81:45:76:2B:5E:CD:2E:87:3C:0C:4C:41:19:BF:BB:C1:E8:08:3C:36:25:42:3F:C4:E7:FC:EE:A9:9C"}}},"request":{"raw":"GET /wss:8880 HTTP/1.1\r\nHost: admin.bysbie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bysbiy.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: bn0omcQs00NvLzH562pKuw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Tue, 03 Feb 2026 09:44:57 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: JL7rfc/AcygJKjvL4nBLiDMDNAQ=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T15:42:15.821852Z","times_seen":17781527,"resource_available":true,"data":null}},"time_used":1222,"timings":{"blocked":0,"dns":1,"connect":412,"send":0,"wait":411,"receive":0,"ssl":398},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"admin.bysbie.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-f8369efa.2b2b9110.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-f8369efa.2b2b9110.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 562\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-232\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":562,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (562), with no line terminators","md5":"cf592ac34a72bb359b9da39070fa86f0","sha1":"f5198077d84cbc2f5d0ab83b62626f94d05b7ac8","sha256":"66b35917efed7331109e89760669a3166f84023353388df4b2673ccb223a0995","sha512":"ddebf2de8d1f2e7f26010926957193df713bea6089b74327446a4bff1d24af6663981d1496d940707ac185432563cdba826c36eefb5ed013876890d890a500ed","ssdeep":"","tlshash":"60f0e163b1d924182a278cb63c4fb74c24b8fd33d2cf3a4048c3a9681cf359b164220d","first_seen":"2026-02-03T09:13:27.222287Z","last_seen":"2026-05-13T06:37:28.886756Z","times_seen":3,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-1a975694.8fecacbb.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-1a975694.8fecacbb.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-d4fc5\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":872389,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"4fb19b8641b0697e9a34343e4b682ce2","sha1":"98ad08e3e701a9e093d4f13ce2485f5006adb5f4","sha256":"f1d3c104dcc2fe174fed12cea7d9ce9c8bdb13aaabf054d496c231d776bdd3ac","sha512":"471bd7ec7633c68070d79241332db1ad445cf2e8dfcd1e9ecf77777be9559bbdaf8304b478cc171fa45742ee3752688efaf91ea4f5bf4574f7c87823cf0372c4","ssdeep":"24576:Xn4lcY3368pANhz3SP5Du4U28bIcYvx2XhILL+:Xn4lcY3x4hz3SRDuN28bIcYvx2XhILL+","tlshash":"1a051aac7244b42552a371b4547f250b52363409b50bc998fb6ad9caacbc58f327bf3c","first_seen":"2026-02-03T09:45:11.817887Z","last_seen":"2026-05-13T06:37:28.990794Z","times_seen":2,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybittvn.com/","fqdn":"bybittvn.com","domain":"bybittvn.com","tld":"com"},"ip":{"addr":"172.67.153.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T09:44:45.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybittvn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 07:47:16 GMT","end":"Wed, 29 Apr 2026 08:45:56 GMT"},"fingerprint":{"sha1":"41:FD:9F:7C:57:11:BE:0C:13:97:BE:04:F7:F6:16:EE:0F:69:A7:E9","sha256":"93:C1:5A:83:D3:C5:44:A1:52:BD:76:E2:4B:C2:B6:42:62:9C:74:E9:B9:6B:91:EE:96:5E:33:00:D5:43:C0:B3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bybittvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 03 Feb 2026 09:44:45 GMT\r\ncontent-length: 0\r\nlocation: https://bysbiy.xyz/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hY3oenKivw3CVXhQyjNcejX4IKDPmIERs37LD6ivDjopT0SOPPPFlztEXQT4xxLCBvZDM7PVd4%2FwB3eIHPqlFliEJ6Gdpf6rYsI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c80fdd1dff7b51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18706,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T15:42:15.821852Z","times_seen":17781527,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":40,"dns":27,"connect":1,"send":0,"wait":7,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bybittvn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/app.4b83e6bf.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:46.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/app.4b83e6bf.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-3135a2\"\r\nexpires: Tue, 03 Feb 2026 21:44:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3224994,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55661)","md5":"cd909056c7b79a5bc1e57c971c59a1cc","sha1":"c2f23e114ef07a7cb0cb162b094fdf4ad7a8a241","sha256":"c3b0d15f8f305b08dc7efa609fd5ebbf60b4b6875fa51614294aa62a6435d925","sha512":"b6a4667991ae989b5bf14956624e65eb40f526d20623db0e32084cd7e7ee2a9e0e50bd94ffea75424c6b629b3772ff069d75a273528ac32571f23ae4d65acecd","ssdeep":"24576:cNmEvSBlsi1KhDe4LIwthSX5kwz0qiiykLw65xnF/D9ZKmTKvxg4haIumduehP8j:cNmEvSBlsi1KhExnF/D9ZKmTKvxg4haF","tlshash":"af253d3ce7b2253bac97a1eaf145fdbc940762d8ed3106d7ac9162049ba07f7c943294","first_seen":"2026-02-03T09:13:27.254817Z","last_seen":"2026-05-13T06:37:28.969979Z","times_seen":3,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/img/recharge.946cd190.png","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /img/recharge.946cd190.png HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-120f\"\r\nexpires: Thu, 05 Mar 2026 09:44:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"946cd1907de4c089bcfc4395c1959d05","sha1":"30438990e74d2b2212b44538175b0bab5307a341","sha256":"e9cd51049a02476e2a378f6a31ac592b5d6336c8fb907e7cbf66a52c69c1fec5","sha512":"9e80e4813c5aa72e165ae6338ff4b8d894fa6aac48c3633b8e4d97af6059255162b3053576444bc7eece300171620c7f50fbc8f3f8b5be875c9098ac75ac6ddb","ssdeep":"96:CZbB6tp9zj8PbmDcHAeDAFTGE3iBqUVxMSCT6hdQ8kL/qf56X17:CZwB/8PiDcgeDApGCiBqUjhCT78kmB6N","tlshash":"c2917d3dcfc142b81ae54211ec395fec997c8a6153b2ac707ef1a61e7c4d2ca8156c00","first_seen":"2025-10-17T23:17:25.209934Z","last_seen":"2026-05-13T06:37:28.787544Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-10393396.1814de84.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-10393396.1814de84.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-ac7\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2759,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2733), with no line terminators","md5":"126df643582a990c9e3367d234ccdffe","sha1":"5b10d00974c4f615453a12d3b0d08ab8d73739c3","sha256":"6285d6e0c3b0d05b35cf39f59a70d8140b2eeecb3950de743d76053e53b1993f","sha512":"bf95512c074dfae062fdfde389a93f94a8d4081c0fd61482b4a1b5b429a452d0c80252794dca9067e54883ec784b732238062d3f20608a9e03c4bc0be9ab1ece","ssdeep":"","tlshash":"5e514717e0c3911f186c9590205f2a7151243998f502d4867fbc9bd467b4cbd3a7edb8","first_seen":"2026-02-03T09:13:27.245544Z","last_seen":"2026-05-13T06:37:28.895253Z","times_seen":4,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-36c04b34.5dde1a6d.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:02.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-36c04b34.5dde1a6d.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-22ea\"\r\nexpires: Tue, 03 Feb 2026 21:45:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8912), with no line terminators","md5":"7b53e446ab4758dab554d362151660bd","sha1":"dc6484d3cd56a4de1a4723bba055c76f8111f557","sha256":"2d0dbbbbdbe68c170a0fef7a20c176118383070693de7b3f1c1c23fac6a11b9f","sha512":"2b2475f6a1d874d80e0f107d09b54209ccdf92b8608c55450a0473889b75060f9c6155bd1d2ab387f00af401734760bacd9fcbdf36a7f37c0c668669a2972631","ssdeep":"192:aEAo9nxGSHi085uzn5xgMdl5QMWrY0c0K21o2hJCAJ5CJFW:tAohxxqEzDWVo+","tlshash":"48026b9fd056dc6a0fa4a2d5bc8f44306071ca2cf503848af3bc86c556c6ee516be376","first_seen":"2026-02-03T09:45:11.820993Z","last_seen":"2026-05-13T06:37:28.94045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-371791a1.7c4102dc.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:02.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-371791a1.7c4102dc.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-334c\"\r\nexpires: Tue, 03 Feb 2026 21:45:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13132,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13096), with no line terminators","md5":"886fc06ccf442b6be190bff537c9ad6c","sha1":"6884f3b3bded589ae9f819afc020108031b4029e","sha256":"e4b19ee1b141323f7c1016d92f50945f2f18bcc04c68992493598012ae264554","sha512":"be30ddc4db359fef32ba6433dfe66626165e913b61d78f579ab701245919e4e127fa4f0411f2ded29cd6aa5f5ee2b2e908db990a668489aedc1dcf0cb78c8fdb","ssdeep":"192:HbEAo9nxGSHi085uzOJB98OU1648h34EYJgfFfbr3B38UHW20BJx:HoAohxxqJB9VY6xZ94X","tlshash":"4942e619d883daaeec9f8115986d6130e0541ff9e421e68bf37c8c917ac1d781bdd3a8","first_seen":"2026-02-03T09:45:11.821666Z","last_seen":"2026-05-13T06:37:28.94923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-4ab287a7.eb5f71d3.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:03.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-4ab287a7.eb5f71d3.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-352e2\"\r\nexpires: Tue, 03 Feb 2026 21:45:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":217826,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"aa066aaf0d5c3491f7ae6341478bbd06","sha1":"3a2450b33bfb7c1d5c6c2a5a3f0e816afdd95263","sha256":"2ec6ed598076fbcaaf62c12d1b3a8b339083ccec6baefc51e5f395f2eb7ff734","sha512":"49124aef0ccf7b124a8f4cd07f422400ed7a1c17e29668f90fee51c1cc4b5cfaaab51a8327eb9e050d32a394523a4afe1ee16064c5b5ce635525ad44146e6a59","ssdeep":"6144:Hn+D/USSS+gf/G1lszEgFvzPge54fgO5wY3AWwrfBSqTiJMj:HMUSSSCszEgFLpBj","tlshash":"7f24e6d4fb75601952a3a1b9423f1507b336365ea44b86acb16ec9d92c7c08a3277f3c","first_seen":"2026-02-03T09:45:11.822592Z","last_seen":"2026-02-03T09:45:11.822592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-7e93b593.e9d8add3.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:04.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-7e93b593.e9d8add3.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-13c5\"\r\nexpires: Tue, 03 Feb 2026 21:45:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5061,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5061), with no line terminators","md5":"ca9001f105c0be9d5302042486c2a339","sha1":"834aecefe5c74bf806374004e83ad40139996060","sha256":"923c142f1081fd4e97fa68896ef181e246bd03e07e5e9949b28fe4466090c3ea","sha512":"df3524d116e359fe5771a572a19cc26e6fab48f9fd5a85491f014662a9cff160263630379757c4a6ae48c596b0d0ee18cd3cffd179d586c4bed6bd2ddac882de","ssdeep":"96:B7yaJ7V1hMB5dzCFBAFBC8QPoB2t7seXIPoLtf1es0SQci:B3Zc/Gs9onHa","tlshash":"c3a1b627e0db9dc23b9ad514749b202476298105bd8ac98dbf784bdc0bd2e883c3977d","first_seen":"2026-02-03T09:45:11.823353Z","last_seen":"2026-05-13T06:37:28.833988Z","times_seen":2,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-0c60b8c8.a95fe5f9.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-0c60b8c8.a95fe5f9.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-464\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1124,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1124), with no line terminators","md5":"e42b56e3cf1d41befe81e177932fae11","sha1":"7fbf60dd9f3ed36b71bad24a83e72f6c628f52c0","sha256":"ca1a0c02334e0feeb8140496e077d81dcf3c158d32e1ae23e0ee91420ac2c7b6","sha512":"af84d0b83d5148d9edfb1d4c875faba00e66e981400e70875aaa5a365436f0f4c5643e962301a82be37f354d51523e639a0f1d15bc6745bbf7601790d5b89fbb","ssdeep":"","tlshash":"42218b63b1bc32221677c878a84d769435497233a0aadaa06cc7a63a4cd36333742b4c","first_seen":"2026-02-03T09:13:27.27459Z","last_seen":"2026-05-13T06:37:28.763631Z","times_seen":4,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-4ab287a7.4de4e780.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-4ab287a7.4de4e780.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-7b8\"\r\nexpires: Tue, 03 Feb 2026 21:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1976,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1976), with no line terminators","md5":"d6c971186957a946171aeb4c62bff2d9","sha1":"0e2cbd7dd8340c1c67f9c0c43659b61bf627ff2c","sha256":"4a18f73a48578ad63f755845d792e7d1679da1848d74d4ce1f37750b9c0fa8cc","sha512":"b84c00a87158db44026daad2bf012fe659dba6a2e0689f2f8501ddd21b0526e69ce7e7d5532162a76e2f100b727f5d4e235908cb5a3f4fa13c0f55216a53f814","ssdeep":"","tlshash":"bf41ab32b3945494e336c961398abad94187e773816b1e8c8b4f5d19ddc336b2bc0a0f","first_seen":"2026-02-03T09:13:27.210599Z","last_seen":"2026-02-03T09:45:11.82472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-baf960ee.7c0fab07.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-baf960ee.7c0fab07.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-604\"\r\nexpires: Tue, 03 Feb 2026 21:44:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1540,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1540), with no line terminators","md5":"6ebe80d8ac80d286979ee6610264e0d3","sha1":"a2508732d7be0aca35c816738487eb9a104e7b56","sha256":"254ac9d68ab80a360f13e60e053d7c8666a85a8d83e02a8baeb7226391d88325","sha512":"16f4c564e316f02e6c73c1ff483065d01360effcd5ca21177e8601ac601b567abcd1d2cb4ec7ae4a0b75790b93bbf3f474a54f86fb207d8947da2df5647feb57","ssdeep":"","tlshash":"96319c61bd88202c37bac6b83c49b1d4124bf273c78a0e91a39bb4195dc75c22557b2c","first_seen":"2026-02-03T09:13:27.20872Z","last_seen":"2026-05-13T06:37:28.902238Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1860,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1860,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-de5c7b4a.1dd2e548.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-de5c7b4a.1dd2e548.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-b17\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2839,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2839), with no line terminators","md5":"00eb942cd071f54f862b181665b833bf","sha1":"1603b9afcf444e83827357dc25406c6d52897047","sha256":"f3dc915321578fa6a44e85b1858fa86f9c009d85c7ec88c8a25fb893435e1a46","sha512":"314a85f286fe226620de452877c388f10a113d2f0850161b8a065d3ada67ba4b03b2fc13eb55fcab1d982400f3a84da4bb0cc6278eaf0adc03b397e296b59504","ssdeep":"","tlshash":"ea517e77759802393377c36abddaf5c8115da2b390056b68f507bc2a49ca3a83b85e18","first_seen":"2026-02-03T09:13:27.21631Z","last_seen":"2026-05-13T06:37:28.91453Z","times_seen":3,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-36c04b34.8b59e389.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-36c04b34.8b59e389.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-94a\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2378,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2378), with no line terminators","md5":"4c817503fdd0e373f3ce0bbfceca2264","sha1":"c9e337e320c453f8c40bfdfe64546377bdbc3e4b","sha256":"6afb626dc987553c8739232b2ad77b38098c1dd5a1017c2cd1a9fe23a4eb7bc0","sha512":"ba7bf06fb7453096a23613601a01ff94b43af483391fcb8786dbfb918a96902fb6755ca3fa0bc9ca6d5a6c1274db6278ca7fac3d854f4698cfdf864546ca8c4d","ssdeep":"","tlshash":"c54145fa3c4c485d366f8114264682f7602c2ba38bcd8fddc6a674364d43b666467abc","first_seen":"2026-02-03T09:13:27.196257Z","last_seen":"2026-05-13T06:37:28.814239Z","times_seen":3,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-673f389c.3fb8771d.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-673f389c.3fb8771d.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-b13\"\r\nexpires: Tue, 03 Feb 2026 21:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2835,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2835), with no line terminators","md5":"eaf850b29c1d9e47595617d057069469","sha1":"240a1a39ba3d68778d7a4c5f78a55479e73dc5d3","sha256":"5968882fd29d845ead940d036ae5568867118ecf449de471d232860650583176","sha512":"a921042783760cdb1aa614032fe4e918dc0a6c5cdd1a5c824a0f053cf0a981229f91d1b0d457680603908f7bda58021ed3d0ad8e8ea730901f84c6242fce7024","ssdeep":"","tlshash":"28517d5a744c1a24f27ebd64685392e60c1d3bc39b07cbd89a3374255dcb2763492a3e","first_seen":"2026-02-03T09:13:27.257231Z","last_seen":"2026-05-13T06:37:28.769236Z","times_seen":3,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-0e9661fe.186bedcf.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-0e9661fe.186bedcf.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-fc8\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4040,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3950), with no line terminators","md5":"70319a9e4e7bf89c262e1c8d4d438059","sha1":"fe43009b056b120b34acb2afb92f79f98ca18775","sha256":"b9ff4bbdd8d0cf27436e43450d7bbb5973859c3e1df25f789fc713bd9fe88ce6","sha512":"e445293d0f34568d5655edd3ef386b017be50bdd3dde666dd8c3a5a8d960b6ac0cdb4d3da446c37976d70b15aafc5ce21a6b44c822a14b3b6ddd1da57cb836b9","ssdeep":"","tlshash":"8e81a859a0e7d259591da022e0be3370a2355e9c6601c107ab389fd45a80e98be3ef7c","first_seen":"2026-02-03T09:13:27.244483Z","last_seen":"2026-05-13T06:37:28.888436Z","times_seen":3,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-673f389c.096a7355.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:04.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-673f389c.096a7355.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-1d9e\"\r\nexpires: Tue, 03 Feb 2026 21:45:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7582,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7582), with no line terminators","md5":"4011f449751ba9d6af4167c61f1751b3","sha1":"8d45f14b2ee0875697e0ff7ac271e14a3eedf396","sha256":"62443c316a48fdfe39d862a47ff8e27b7558ae46d86a6c5a3ded16113388b5a9","sha512":"43281cf72c691473c59661a7e906f101022ab3aa6db0edb2e61dae8ec0c870179a64e44e776fa9b14a6c82112f4b3d984b9685dd389571d7e835cd0e89276bc9","ssdeep":"96:4GzEPoo7BXQeqUI/KgOeAUPNSHdkBqb85oihyzpiFAxWfJ1oGFfX8AN3zwV2q/:LEAo9nxGSHi085uz+AxkJ1oqrJUV2+","tlshash":"10f16c5f9056dc5f8be24194888f1430a0799bacd612ce9afb7089c15e84edc176f37e","first_seen":"2026-02-03T09:45:11.828315Z","last_seen":"2026-05-13T06:37:28.920116Z","times_seen":2,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-7e241765.4c093395.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:04.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-7e241765.4c093395.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-aca\"\r\nexpires: Tue, 03 Feb 2026 21:45:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2758), with no line terminators","md5":"790c1c2394a3a294c11aa6089b86a186","sha1":"5c048a857fe3cb136c7ff8480a9a9116996fe1e1","sha256":"dd3281338596f1d98f26576b5e60be96620a867da2afc1c23eb35107e05eb604","sha512":"57d4e6f7dad53f645dca3b7ab90447816993244900615b44aae8cc4ecff9786944c5b097311ad7b2cf7b9a4296dfcdfb7de98b07a682e44b64f4cd7d98e73b8c","ssdeep":"","tlshash":"5651c12198a7d12fd83d5041211e0a51b0f23f5a5946d0536eeccbf056d8db91f1ef99","first_seen":"2026-02-03T09:45:11.829432Z","last_seen":"2026-05-13T06:37:28.798785Z","times_seen":3,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-6c077582.9663e537.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:53.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-6c077582.9663e537.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-15e0\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5600), with no line terminators","md5":"5ea84d511192acef18fc3dc73535eab0","sha1":"ed67e8cd751ad786a223ffcfe7506392907da901","sha256":"5ecf9f54e62f30864a158bb819f20afbdc94b895889e9c76a1693356aed81870","sha512":"15a25a909145dab351cb28db2fc31cd17c5ae14b2b11bdf18797ba6d1800e99a1d274fb1f42738f83dc48d615701178a358b4d6c83b68a876cb2660bd1c5c3a3","ssdeep":"96:bhIIiHxxu+MkIQEkJvb/lWV3Mx9To/0NovGh8e40:bmIIxVMkIQEkJvb/le3A9s/0NovG6M","tlshash":"72c140a2753c1026f837e1653c57ba9e703bb723d3238264448ba426cec725b2670a6d","first_seen":"2026-02-03T09:13:27.226282Z","last_seen":"2026-02-03T09:45:11.804752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-2ad652e0.2a9717f8.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-2ad652e0.2a9717f8.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-4fa\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1274,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1274), with no line terminators","md5":"fffb06d0787991b043c1b6e613e1fd1b","sha1":"a992ab2d97022656cb2ce6c4e412e7d51f06e312","sha256":"b4b1b54d0473fa3b6910e63c3eeb39a14a050d5a1893aeaba78672ce445f6a99","sha512":"55fc5f89ac2e5d0785535ea9aa2ccd7eafc4574f4dd2bfcfba4b131abefdd769bee389a5e992a10e8b72482362bb03f68daba0b316ccbbeaa2e2e7f1071ff909","ssdeep":"","tlshash":"84218bbab90c6017373acb68384efdd64159b373c6801f73e25a991d4cc32932281b0c","first_seen":"2026-02-03T09:13:27.237296Z","last_seen":"2026-05-13T06:37:28.916943Z","times_seen":3,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-3eb604e7.3c8e1cac.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-3eb604e7.3c8e1cac.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 913\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-391\"\r\nexpires: Tue, 03 Feb 2026 21:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":913,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (913), with no line terminators","md5":"59b73a38a38fd189a7927112f437240f","sha1":"cd551d94efdc844e2ab2e488e914924a44f8ed23","sha256":"845cd8b6c168fd3b0e5620e6403d9fc3012129beca5abddddb9009ad2d95ce67","sha512":"d973c18e82ff48216b9f8c0990f2b2eaf9d15ce0709c4b2ca8f5b9433dcd8826f3f170acf5ac8ddae0c75d7684dd6155f3f5c487b7b0e6bf59840fb2c64f5447","ssdeep":"","tlshash":"7811d02bf1cc18149037c6a4bd5f76cc062f735352062fa2480b2456eedba4316b1148","first_seen":"2023-12-03T07:36:06Z","last_seen":"2026-05-13T06:37:28.943389Z","times_seen":7,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-ca5b1e88.c099f0f5.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-ca5b1e88.c099f0f5.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-4fa\"\r\nexpires: Tue, 03 Feb 2026 21:44:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1274,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1274), with no line terminators","md5":"af3c4d0c199b33288659b367e331cbe6","sha1":"f7c946771a45edcb22d96d258caca218b3fcfd54","sha256":"4f7661454e3e6b882216e68187f09a0889d488da0d82b6bd1db35aa505f0e148","sha512":"cb18ed048d8a0a884dc6502ed74ae29ed1e813b63655729df0ddb3475242be174fb81fc9b062112123bcc099f610bb155422fe060ba8810a71ed65a3bcd7af20","ssdeep":"","tlshash":"0a218bba390838152eb6c3683a6af1d50549b337c70c2f70f69a68ad4ccb2d72081b1c","first_seen":"2026-02-03T09:13:27.270308Z","last_seen":"2026-05-13T06:37:28.88439Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1867,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-cf2bb068.e4a00241.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-cf2bb068.e4a00241.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 685\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-2ad\"\r\nexpires: Tue, 03 Feb 2026 21:44:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":685,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (685), with no line terminators","md5":"4659590c8e83e2d159161425ec00a2d1","sha1":"8ff52f3e941c02f264662d41f5b1259cee799609","sha256":"3b48ac9b2456a5ccff993ff60e4a0c9e8e383da7fb9ce27efb0112bdf85c4d39","sha512":"eafd1622960cfd9bbb901a66fd736ee455afbd2431add2417c3d1c3c0d2a56d3c7b4db48bca74c6abea579cd09334b162d581b53fed1cf8d3e67fa0117e26304","ssdeep":"","tlshash":"8d0147a76a4800263177c1b8e56d729822e86a3f88772ba44046663849e32eb32c5f0c","first_seen":"2023-12-01T06:12:28Z","last_seen":"2026-05-13T06:37:28.894222Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1697,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1697,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-2b1c0bdd.ad59bc94.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:59.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-2b1c0bdd.ad59bc94.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-317b\"\r\nexpires: Tue, 03 Feb 2026 21:44:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12667,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12643), with no line terminators","md5":"f8eae96fbf44ff18369263806f31e982","sha1":"b78c6a11a4d02c66969c4375ab27866eeda19a97","sha256":"9bb909a948098f163d53a8b00d67571c81360ca34030605f971c71cdd9b234f5","sha512":"5059b13113892f620b514f84b31084116831e9bb4b3748dfb18b4a11e18e06ea7890b805fd96fae98806be47fe54b76449c269774ffef95f1d0e0f481b9cecef","ssdeep":"192:2P+4nOrwv/82rkNi8MZICZwLz1v8FTVszDJpv1pM8a:t038TFN1vVpptpba","tlshash":"a842405aa0f797ad851a8120b01d0920b0393e98e552d04eb73c9ee57bc1e743badf7d","first_seen":"2026-02-03T09:45:11.837568Z","last_seen":"2026-05-13T06:37:29.005465Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3792,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3792,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.bysbie.com/home/home/index","fqdn":"admin.bysbie.com","domain":"bysbie.com","tld":"com"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:42:12 GMT","end":"Sun, 22 Mar 2026 09:42:11 GMT"},"fingerprint":{"sha1":"9C:B7:26:D5:DB:C5:27:4D:46:10:57:B6:21:F6:C6:07:92:6B:07:E5","sha256":"23:56:ED:81:45:76:2B:5E:CD:2E:87:3C:0C:4C:41:19:BF:BB:C1:E8:08:3C:36:25:42:3F:C4:E7:FC:EE:A9:9C"}}},"request":{"raw":"GET /home/home/index HTTP/1.1\r\nHost: admin.bysbie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: null\r\nOrigin: https://bysbiy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,GET,POST,PUT,DELETE\r\naccess-control-allow-headers: content-type,token,id,authorization\r\nset-cookie: PHPSESSID=jfde18kk2qv3q45ree9l26g749; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11506,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"525fcdf204b80cbfdbb382e7e46cd95d","sha1":"4e4e1a69b3a2d540d42ff352f75b2b7cbf7e408f","sha256":"80a923a676eeff2d8239f2e9fad2ebfed177842cd42c26441c488e4aed2fe12f","sha512":"6016a50d1c6d0472475ca8773b77b101fddab397ea0086a0f2cb0e8a1ac18d44fbb06a53fad785a4def038c542c20c90aa968bbc1e847fe872a8df3f6ea632c6","ssdeep":"96:9fk9B63vJrL/A6jLz8lOZWB9x0oeSuBkV7/rN0ud9qJRtuF3cMCClcwQ9xP6b1wg:BC3SUAJaN2KCFziKku9M","tlshash":"b132eddbc279585cc4db1ad3cbb3a8dde82d6519d1c0cfa84e3d9f5bc1982279202729","first_seen":"2026-02-03T09:45:11.802678Z","last_seen":"2026-02-03T09:45:11.802678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"admin.bysbie.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-d3167e40.77570c45.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:57.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-d3167e40.77570c45.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-a89\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2697,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2697), with no line terminators","md5":"e1f55f11ae1f6d99168ea59622034c07","sha1":"22b66de7d55aaa9fb63d0fe4a2559c233253c8d5","sha256":"3e6e3fefba79bfece73647322bb0cac5fcb48f1fcc28814e5e9388539e13610b","sha512":"7f6032425a9b0abf171f34b173648af9b6d8c8433b4be40351f8b5f8d2d8710637bb3679e5fdae085f416ce2492e9cb74689eee6293acc66307cb98f3f6dc76c","ssdeep":"","tlshash":"9f519ca1748c105d6bb3c2793b5dfdf4184ab133c20b4f95629b646a9dc734324bab1d","first_seen":"2026-02-03T09:13:27.279056Z","last_seen":"2026-05-13T06:37:28.801555Z","times_seen":3,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-db95d370.ab480b99.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-db95d370.ab480b99.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-452\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1106,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1106), with no line terminators","md5":"987e959e35a582eedcb971ee1f0ed074","sha1":"fa32775ed8e8648914239c59157254dc6a7d8848","sha256":"89aaa0c6a4534119cb54bfc1c7ffb4711f39949b301cf6d7a77056f75f27f2c6","sha512":"745bef7a9716ea5c88dd945ad476f86cbd7d2468f6963f2b513f70c828154cea151da59c5934de494d3ca0f97d7c72aa0339cc4efc849b77f3d8d3aca9064b36","ssdeep":"","tlshash":"b4117ca1bdcd40057576c36bed0ffa48124e6123ca4b3fa8425720a28dd724624a7338","first_seen":"2023-11-15T14:27:29Z","last_seen":"2026-05-13T06:37:28.95323Z","times_seen":6,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-e9a933c6.cb136b38.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-e9a933c6.cb136b38.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 493\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-1ed\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":493,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (493), with no line terminators","md5":"ccc1a609b1d3461699e35d1e8abd25b6","sha1":"47d8367d2b8f8dc881e65e43ce426b7a9912b2bb","sha256":"8e181e5d6461d3eb9f60991d57fd7b663f1e802496ca1505603e434d6a6e7330","sha512":"d48cc4f602d8d2d1c51c574a266550d51825b56131b20159d94835755a55e6c3f65bc56cd1a61fa73414c778d3f7e6be8aeae88fdac62b15e47178773417736e","ssdeep":"","tlshash":"bef059b43a051028533ac236794e764c960fb573e7fb26c8054e480e8de7f6b158e508","first_seen":"2023-05-17T14:04:53Z","last_seen":"2026-05-13T06:37:28.860527Z","times_seen":11,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-10bd5644.ed895c8b.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-10bd5644.ed895c8b.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-708\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1800,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1794), with no line terminators","md5":"2c34a46c45267a83f2ae6d06589ad071","sha1":"0ffa1490e16bb523976eea41690bf98d88cd6161","sha256":"f848576188cbaf2875355105eb2ef1890398007c1d547baccdd479346346377c","sha512":"41b5e91b6aeec261f2c032e78d82c7c95e83e15e53d7df6b0d073ce93dc139c82359646996d875d7a3d696f16f301773a1e443ab129ea464474a409035dd8cb0","ssdeep":"","tlshash":"9931b025a89b926efcbda163604e3a30d0763af445219443ae74ced01750cbd7b1efa5","first_seen":"2026-02-03T09:13:27.184317Z","last_seen":"2026-05-13T06:37:28.836693Z","times_seen":4,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-4a2e3b3c.4d2aaf84.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:03.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-4a2e3b3c.4d2aaf84.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-3da0\"\r\nexpires: Tue, 03 Feb 2026 21:45:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15776,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15774), with no line terminators","md5":"3c7d40fa59bdd3131ae05f09e787eea4","sha1":"f5cf939e272dd0256336aca79b1a7c50f1cda0ff","sha256":"5597cd14f27c54f3171575fb6fda6c487c6af268641585350026faf8cc1c88ba","sha512":"9e087c120e17c6ccce881252b13f836d5b6278729a4440140526de0e21390e75ff3536fc263c13ffd0c99c601b74bf79dd8db2f21788e6920cea3385939b7a89","ssdeep":"192:c/cRmGABbdA47y+9e2SHwPmXzqOtyuN87iwifDqK3ky0yqLk8qDZ8z0B1jV:c1n8HwPmjJYuNcif/U1fgDZPBn","tlshash":"c96294276897681fa4bd504224593660b0a137986721c2af6f3dfda8b4d4d393e0f7f8","first_seen":"2026-02-03T09:45:11.840762Z","last_seen":"2026-05-13T06:37:28.824024Z","times_seen":3,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/favicon.ico","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:51.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:51 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16376\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-3ff8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16376,"size_decoded":0,"mime_type":"image/x-icon","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"c86a4a4231b05fa3a759648ba7034371","sha1":"ebe7dbcd160dfb8b9d48f35a2d2002ee1d371175","sha256":"80b6b1bc59899da36cf30d5296fb4f8a163e5aa4c09657867b3b88efeae2bb28","sha512":"6af0600a189913241d715d2ac7b0928d7d016e1e4ba9082e5e615f1e30d48fa9dc8e0cbac5c5eb07525d3d48e697f8525d8006af18979b42bb4b1327e7532495","ssdeep":"192:RR14ICXAt3DSetaAqP8wslnhZbDwzcvv0wOmF5E7USFj3oz9tRC2y6b8PlRxzh9B:RR14It3DSf+h8z+NO2MDKy6APL99yxdS","tlshash":"aa72e413c9518f67456ed3f97f131e791b1a2b48e0d237ca60268e8b3b696620dcd05d","first_seen":"2026-02-03T09:13:27.246583Z","last_seen":"2026-05-13T06:37:28.825547Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2405,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2404,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-4a2e3b3c.b56d4420.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-4a2e3b3c.b56d4420.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-d04\"\r\nexpires: Tue, 03 Feb 2026 21:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3332,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3332), with no line terminators","md5":"94a47c5f44cb8fa2292aa926b0e36843","sha1":"96dff3e8c886d9d393aa193d78d6ebc6158e0955","sha256":"5d1c85871f2f818a5e3570d41c16cf226882a004aa078c60afd10a6a47a240a5","sha512":"52e13a4c5780ae5dbd87f387d5c40c5f17683ab03a273c79fc64cd2dfe0429c690468dc00226905c3a311c4a18abbba84e7c9a170b7bd16e6f5bf8a9b7922135","ssdeep":"","tlshash":"f261aa71a65d70086af2c1ef6d89bac450adfa32905b1dd54187391ecccb24b3b94b4d","first_seen":"2026-02-03T09:13:27.223558Z","last_seen":"2026-05-13T06:37:28.978767Z","times_seen":4,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.bysbie.com/home/home/msgcount","fqdn":"admin.bysbie.com","domain":"bysbie.com","tld":"com"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:42:12 GMT","end":"Sun, 22 Mar 2026 09:42:11 GMT"},"fingerprint":{"sha1":"9C:B7:26:D5:DB:C5:27:4D:46:10:57:B6:21:F6:C6:07:92:6B:07:E5","sha256":"23:56:ED:81:45:76:2B:5E:CD:2E:87:3C:0C:4C:41:19:BF:BB:C1:E8:08:3C:36:25:42:3F:C4:E7:FC:EE:A9:9C"}}},"request":{"raw":"GET /home/home/msgcount HTTP/1.1\r\nHost: admin.bysbie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: null\r\nOrigin: https://bysbiy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,GET,POST,PUT,DELETE\r\naccess-control-allow-headers: content-type,token,id,authorization\r\nset-cookie: PHPSESSID=9rada2blq3dn63m55g4utjug2c; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4d5e649e659db95bd8953f7bb344e7f7","sha1":"74946c5ed4944c37915ce249d4beba8055a23550","sha256":"f22ff4a7d4ba183bede9067fb83f2abfd1aa40f073427f0bf9743187d157e099","sha512":"5a636de1c6e2c0f3436f3dc71970b94ba203f7b0e888c0371f21daccfd70969052cb760207e327a390af101513f58833402b7e30dcedddb9fffde19097853a3a","ssdeep":"","tlshash":"8c9004053c5d501374030044450f170540fd3140050003304c7c5133530c175d000d34","first_seen":"2026-02-03T09:13:27.201987Z","last_seen":"2026-02-03T09:45:11.793753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"admin.bysbie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"admin.bysbie.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/img/withdraw.0eb74be2.png","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /img/withdraw.0eb74be2.png HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-16b4\"\r\nexpires: Thu, 05 Mar 2026 09:44:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"0eb74be2dd03aceebe3937a25d35e011","sha1":"c3598bff35412f7adf4c1839aa7753fb0e04fcbe","sha256":"f8d5c02460847d9de9e5087bcede4704d792c26de12ebab072d00455da88720a","sha512":"be2e51cd6af27d07204e63cc9e582ae35aeef5710fa5b2e96114541a75a9228add827d496687ab70ceac64a9709d093ab9736f976e1bf6a7642855cf68f1c9ed","ssdeep":"96:03ORVG09KwXhQ/75CCKfMeEjS5pw+j70fK0wPfvdSqrZaat:0qVl0x7hKfw2l2K0wXlrD","tlshash":"75c18d7a22ae60d1bc10b8f9a6a895e60fe42123cf04e7f312635b71371134b1782c1a","first_seen":"2025-10-17T23:17:25.196439Z","last_seen":"2026-05-13T06:37:28.772053Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1575,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/img/kefu.ead02156.png","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /img/kefu.ead02156.png HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-26ab\"\r\nexpires: Thu, 05 Mar 2026 09:44:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9899,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"ead02156425c1d08b9f2a281c9bed32a","sha1":"294e89b72a7f632c639d0a4f27574ed5585e3f65","sha256":"34269f8cf69c2781a4bb87d489c6fe098cdf03c75ab86422dde9f9df43ad83d0","sha512":"bd3ee90fdb6e5885db1f59680cd63d40bf7b4636e619cb624329fc97adb3a9c79d83db8ac022f0abd408ed98e86f680c9aee2ab4ce4e64c93d568c071bf0c198","ssdeep":"192:trlrshQgti8qxvhKgVmpD7KkJ87uauAvYJf/2P3jlX6TKxw3tW5A0zA:llyQpvhKgVA5Jr/4h6d","tlshash":"4812bf0f9d6c185f1f6956b27ee346b897a311aa6636881f4b806039003bc74209b7bd","first_seen":"2025-10-17T23:17:25.11183Z","last_seen":"2026-05-13T06:37:28.967077Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1785,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-60a6a39b.8a6012fe.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:03.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-60a6a39b.8a6012fe.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-191d\"\r\nexpires: Tue, 03 Feb 2026 21:45:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6429,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6397), with no line terminators","md5":"73c578c05d26b3214386eff2b3c9a6d8","sha1":"5c478a16ef6a19795049f36564ba8c7526fdd3bc","sha256":"2026db5246d4627cb2485b0038b277f01a745edcda10717b9cd8446976884ff3","sha512":"a46c2918ee325e976e970be0bc47c98b28cbe5e1ab7f371e97e819e3987030e388909ab18cfec2f07aa15f1b8455ebee36af27bf58cd8e3da7f47b45ce9790fb","ssdeep":"96:NfcTEFRVpQZ1JZeRZzren43bzH3bE0fXcbkXXDzNhWqDqHrBbeGpFjZK:N0wLV6pCnFPcIXidnZK","tlshash":"63d1a53eb0c775e21afa20e4105f6b0ba1761a94b549c0e6d370e7d15ab4d1c25bbb38","first_seen":"2026-02-03T09:45:11.843836Z","last_seen":"2026-05-13T06:37:28.838429Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1007,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1007,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-vendors.a80ed86b.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:46.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-vendors.a80ed86b.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-6ea04\"\r\nexpires: Tue, 03 Feb 2026 21:44:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":453124,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46334)","md5":"4048dd5ddd2fbd7bbfba0a5c9a99872a","sha1":"705b3c8857f2f024dd470f5eedaab688ffd4bf07","sha256":"b7abf874592a7b913f9500f2884ac43191ee9fc2527b990a404afe42cb802d8a","sha512":"9b94dc38125ee06600af38df98afd0349d63b5c05024a5d81f55f6c191cd6d6627922510dc5bd04dfab182d6b0b9e1bf04855868f745cd12c0480b3290d01f5e","ssdeep":"3072:bE4+r1TDXHcT51hNhxNbNhICRYdJuJG5pvruV9GhR5sLMD01cK+BL0HncXXJ71SU:bE4GcT511brtMV6VQHpFS4M6xy/O","tlshash":"3ea4d78ab2c6b42507a760f0402f150af2372958b40a84dcfab9f4e56d7d95da13bf3d","first_seen":"2026-02-03T09:13:27.229793Z","last_seen":"2026-05-13T06:37:28.785282Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-10bd5644.cff2d474.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-10bd5644.cff2d474.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-835\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2101,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2101), with no line terminators","md5":"2d6fe3c48805639775ad9df1d1fe883d","sha1":"ea2160ff72096d2d7fb3c8949e79c25fa223e38b","sha256":"5483bb3480888bbe2f4e23d3d334180251953e83d1bca9b35a28fe4cb8a80e7e","sha512":"0a5d4db19754e8a25def3707c4968c0b7b6889c31367bfbf48b6bbd350e6d51b5593b48e3e4926aa23ae3e22a6855eee7496b06f5413b82380516de7be4c54a0","ssdeep":"","tlshash":"8c41a036648a1404237ac7673d0d76e560daefb3c15f5aa054cf196b38db28b1be071e","first_seen":"2023-05-17T14:04:53Z","last_seen":"2026-05-13T06:37:28.832209Z","times_seen":10,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-f6566a36.74e916ba.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-f6566a36.74e916ba.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-b25\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2853,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2853), with no line terminators","md5":"ccaa1c7001b211cf9abd6e852ce38fb3","sha1":"ef8088ea09b789282ee0b511e6fc463c3250e6ce","sha256":"9fb91256fc0782a0668015b620debd73612b347f24c490bab51553284b955fdc","sha512":"f569b236f9c5ead021f78ab91876678ac76001e3fc4ea0b12918a9d18611e75e24fc0f0e7b7a0363fad65323cf03e4badfecc15b8bbfcdcbba1e2ca8365f8dfd","ssdeep":"","tlshash":"e1516871708850246637d96a2ccdf988208efa77e8062a9074a7781b0ccb3473e89f9c","first_seen":"2026-02-03T09:13:27.261623Z","last_seen":"2026-05-13T06:37:28.861092Z","times_seen":4,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-2d0dd012.6d2b7f1d.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:02.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-2d0dd012.6d2b7f1d.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-540\"\r\nexpires: Tue, 03 Feb 2026 21:45:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1344,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1299), with no line terminators","md5":"85865235caa1fc412381c2c036fab7b7","sha1":"7965699617e34bd73ec5274735c4e6d80740a33a","sha256":"cfe4bae4384df048103c2b6c192261285d5119eaad4591a67ff3daf3c7b63ab0","sha512":"750ab9138b6d5bc87ec5814ed786d6a04c38098c8934aca89f8a9a3e31fa7905c416b81818e7bf969641005c366ab3a9b09ae96b24cd02906aada6fe7b53ccc8","ssdeep":"","tlshash":"2121f37e708794785e62f135204a5d6090df0b94a425e8eaab74fb806bb6c0c63bc77d","first_seen":"2026-02-03T09:45:11.846581Z","last_seen":"2026-05-13T06:37:28.828618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-664b4e6a.d9c4b4eb.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:03.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-664b4e6a.d9c4b4eb.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 928\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-3a0\"\r\nexpires: Tue, 03 Feb 2026 21:45:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":928,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (928), with no line terminators","md5":"12fd08d14cc3f2c314097cd44f837b33","sha1":"513ca2b769005e4a2cffebbc9eb04d18632c512e","sha256":"358ad16b33b793c57d207e3c13b3dd25a4ac6e98b15bff1372b7f359d09c1949","sha512":"8aabd8bcc5b19fd179d7fb229f7bb42e38ed2638f538e7c4233d3e757b71187b914c582c02517cbc86248cf9c51d1078c0774345ed28b74ab7e8337fc22869e3","ssdeep":"","tlshash":"9e111476b0d2f4e8496b5141010f2361905a3eecf921dcc17f74dec552b09486636b18","first_seen":"2026-02-03T09:45:11.847342Z","last_seen":"2026-05-13T06:37:28.839949Z","times_seen":3,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":711,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-6c077582.90eb8c38.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:45:04.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-6c077582.90eb8c38.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:45:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-5d73\"\r\nexpires: Tue, 03 Feb 2026 21:45:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23923,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23852), with no line terminators","md5":"688f7a85630328077446b7c0e33dc8cf","sha1":"4b255fd1fd47d1e4d3cbc716d2abcca02d538a8b","sha256":"9725ba72f1a27205fbe37b494143074e96cd23fe320332b1e499cb52c586ab9c","sha512":"5ba616260395e672c8bd2ba13b5976ed0ca53a8bd5b8c95a1a292efc1c49118d9a675610f14085fb993b2a4f3340ebdc994a0f0dec289b3beeb79548c8f0beb5","ssdeep":"384:gjdohxxqGTLVZRrj9Po9mHc9KgOfssMO/I:gjinqGTZDjCUc9KgO0x","tlshash":"bcb2f919e8f7941f589a5065309f3910f0762ae8b211c58abb78dee06591d3c3b3f7ac","first_seen":"2026-02-03T09:13:27.18705Z","last_seen":"2026-02-03T09:45:11.793226Z","times_seen":2,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/app.7e87d4cf.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:46.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/app.7e87d4cf.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Dec 2025 09:13:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6931509c-41b63\"\r\nexpires: Tue, 03 Feb 2026 21:44:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":269155,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31344), with NEL line terminators","md5":"b815b88eeda3ccee0691ec7c4eab1bce","sha1":"599e63d297ea98318c2a1fd5f766fda436a4f79f","sha256":"360157e11e81e916389f3e8d14c1b3f961e6662e14566e1634d1ccf9ac4f71c3","sha512":"caf80324591a91e8a809bd14d89fcc018707e48d947c84f91c49ff9a4eed08ba5a3a1d2e865562701c5548e6a660b100fcd52e873c24c9d62bfc8b4ab54b9fdb","ssdeep":"3072:phi5iuFp3sPqh2C7hQDzEdkt8chpRrTjjll+II9q/TrPngbwuWIiUi8Y/qV8fIIY:TurQ39zTjjll+II0LrPgbwpIH8Y","tlshash":"ab543a2d51995bb54be906d2f0972bc61cb9c9d7d7cc982d86edcb2c06cebc4d2062b0","first_seen":"2026-02-03T09:45:11.848221Z","last_seen":"2026-02-03T09:45:11.848221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-44a0fb4a.57b2e40b.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:55.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-44a0fb4a.57b2e40b.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-617\"\r\nexpires: Tue, 03 Feb 2026 21:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1559,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1559), with no line terminators","md5":"38a251640f3f9bf06a9f4713ffde565b","sha1":"331a339d3ef7f5c397c108d2727dd4ef596a6896","sha256":"c02878a60525f9e4b4d08144a16627af472a0606baa2068755277794ed02ffef","sha512":"c3aeb8cf9a22a7212f0ae46ff9fa0f341747fbea1d934e3ed0259e510be69b628865b0f769de229871823c59250794697a27b42a9366dcc5d958bfa43118c136","ssdeep":"","tlshash":"af31c274225c1128e232c55a3c4de9a8465bb133d4433a816987fdb94dcb3bf2791a1d","first_seen":"2023-05-17T14:04:53Z","last_seen":"2026-05-13T06:37:28.890924Z","times_seen":9,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-2914590f.3a458826.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:54.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-2914590f.3a458826.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-713\"\r\nexpires: Tue, 03 Feb 2026 21:44:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1811,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1811), with no line terminators","md5":"8614a8d772cda3fc9c81db3bb7c7f50b","sha1":"0a1580d60b8c6b960fcd95e3ccfe793740cf20b6","sha256":"08f91d31cb475baf8ac1b9ee8a492ebcb1dec7b02b7eff04ece302a085f8a2a0","sha512":"69ee62c97fd95e9ee0797c025b26bbae94048853069b658b52d78ac48a9e581bdd886c27000bcc785da4578eeaedfe2c794021b6429c0f4e5080f6506deffaf0","ssdeep":"","tlshash":"3831ee62b1e8143e1933ca74395ab5d8189a72779109abf174837e2e9ce315371c37cc","first_seen":"2026-02-03T09:13:27.240717Z","last_seen":"2026-05-13T06:37:29.018153Z","times_seen":4,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/img/credit.cd34eb82.png","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /img/credit.cd34eb82.png HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-2497\"\r\nexpires: Thu, 05 Mar 2026 09:44:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 200, 8-bit/color RGBA, non-interlaced","md5":"cd34eb820caaeeec9b13cfa2767858b0","sha1":"8c7622a8412b2334b5774f5141d9426dae566f32","sha256":"0d628f14e9763eb7853f610ecc40cb19cfa6f841427dd4f81d90d3dede2c713f","sha512":"09dc7e1f0647e388cd97c6a53964001931d3e5ad92ef20b88c02bb596a10c5e2af9f5964c1f6332720a3f20e6936798159bb10315616eec1ad72e1df0b4338ec","ssdeep":"192:/P8Im3cHzMi+Oq4EmFhHQe3DS/gogTGx0zdWjBpL5Zmpyh:/P8Im3cHzM6q4EMtTCE6+z8jL5ZMyh","tlshash":"2812b0b4ad80bb99fc225b6bcdcf080efe4b35626811f48377112d1d1da03f3290891a","first_seen":"2025-10-17T23:17:25.215476Z","last_seen":"2026-05-13T06:37:28.944848Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-a062b19a.478b2b46.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:56.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-a062b19a.478b2b46.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 137\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-89\"\r\nexpires: Tue, 03 Feb 2026 21:44:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"ac995acb5ff13d5f83e0ae2bc12c434b","sha1":"991e8087c056652261ba32c32769f123426336f9","sha256":"e8e32e392c9179cbfcf1fd2a939161526a3eb1ecd025611ac3a347e0ce47e511","sha512":"deb10cd59d781ce848b7b0c08b94616276755c110e0a5c15489bb852514d54a3f38d34df9a4e5a07d9d2c8a27cbd04aece223ee8260a6818f26a80269a5b5cf7","ssdeep":"","tlshash":"84c02b3177483631352bc4b10c8a05cc7422a636c03f68ccd81b410803c30230f01088","first_seen":"2023-05-17T14:04:53Z","last_seen":"2026-05-13T06:37:28.938906Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1870,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1870,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/css/chunk-d2d0199c.24b126b3.css","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:57.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /css/chunk-d2d0199c.24b126b3.css HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 500\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\netag: \"692d6b2b-1f4\"\r\nexpires: Tue, 03 Feb 2026 21:44:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":500,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (500), with no line terminators","md5":"39506c848a41769a3ecd4dbec49d52ee","sha1":"1255aadb3bdd9462f888a10aaa207792026e9bda","sha256":"0f69e96f47b34f116ddc8e56b52b16a25427e0dce0cab11ce520d58cbfec9b5d","sha512":"476f8a73c51aaa72dfc6c2eb7ada22cb124e8555a8a43a35039ff54933f5adee8643c4d5239a1d67049af1c22d9dfb1f0b45150104d6b986dbdb0d777b0884e6","ssdeep":"","tlshash":"edf00e21326cd061f632c07a2c4e6a8d225bb332e40b2f91648b9c2945e32770782e0b","first_seen":"2026-02-03T09:13:27.272442Z","last_seen":"2026-05-13T06:37:28.857084Z","times_seen":6,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":323,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-1d228349.4a1ecef8.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-1d228349.4a1ecef8.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-582\"\r\nexpires: Tue, 03 Feb 2026 21:44:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1410,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1410), with no line terminators","md5":"5fa61af7f2f6c98180c731109a4a0e40","sha1":"e34fe207449f7d4ed752e366906c3d66d781fe89","sha256":"48e0fb76c5321ec41f591f2f33c4aca0fd1e1ce0e36ccf6b240272c74cc61835","sha512":"6380c03aaf3bfe579b5517ff40a9228aea7143eba6598d588c117361f3a60f9240856831bfb9d9c0edc0e8f2d2e57a5f9c2f0168bf0401d9a1c140636bfc1bf9","ssdeep":"","tlshash":"5521523eb1d6e9102079b0cd144f6358b0097a5872311caa7ff49ec01ba49dc6329f7b","first_seen":"2026-02-03T09:45:11.851813Z","last_seen":"2026-05-13T06:37:28.924439Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysbiy.xyz/js/chunk-23f4f574.6503fdc8.js","fqdn":"bysbiy.xyz","domain":"bysbiy.xyz","tld":"xyz"},"ip":{"addr":"27.124.25.80","port":443,"asn":152194,"as":"CTG Server Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bysbiy.xyz/","date":"2026-02-03T09:44:58.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysbie.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:41:13 GMT","end":"Sun, 22 Mar 2026 09:41:12 GMT"},"fingerprint":{"sha1":"64:E1:CD:11:AB:3B:14:BB:28:1C:DF:37:73:0A:B7:03:F6:3F:20:39","sha256":"59:C7:14:7E:07:74:6B:1E:C4:EE:61:BD:6E:90:7B:FF:1B:00:58:D8:BC:88:35:E1:3F:0C:76:5F:4A:4D:6A:57"}}},"request":{"raw":"GET /js/chunk-23f4f574.6503fdc8.js HTTP/1.1\r\nHost: bysbiy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysbiy.xyz/\r\nCookie: googtrans=/auto/en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 09:44:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 10:17:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d6b2b-8ae\"\r\nexpires: Tue, 03 Feb 2026 21:44:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2222,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2204), with no line terminators","md5":"c0fc3fe37e0241fc9fe016f87425b783","sha1":"66ec2684917253b499f537ba6288d12f267019dd","sha256":"4ca9c9f0db4621f853df9bb51f8e6d671dd1af0b6e1feca26177760d8522f3e2","sha512":"9ed7973c611f65bfecc867975ae69b79c17f247a54e7cbc4119aa5b6e3a07b822bcee367f76db413f8aab0ea974ded33672839788e797a2094d326230252ecd1","ssdeep":"","tlshash":"9641636fb0d77459182e6058607f625571371b847a6180f2d2b88eaa0bd4e3c1f7fb4c","first_seen":"2026-02-03T09:45:11.852686Z","last_seen":"2026-05-13T06:37:28.864242Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"bysbiy.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bysbiy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}