{"report_id":"917ec988-7542-4c5a-a0ad-848d02e2fafa","version":0,"status":"done","tags":[],"date":"2026-07-26T13:51:02Z","url":{"schema":"https","addr":"returnbitnestfipool.live/","fqdn":"returnbitnestfipool.live","domain":"returnbitnestfipool.live","tld":"live"},"ip":{"addr":"104.21.61.190","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"returnbitnestfipool.live/home.html","fqdn":"returnbitnestfipool.live","domain":"returnbitnestfipool.live","tld":"live"},"title":"BITNEST","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"returnbitnestfipool.live/","fqdn":"returnbitnestfipool.live","domain":"returnbitnestfipool.live","tld":"live"},"ip":{"addr":"104.21.61.190","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-30T13:51:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"returnbitnestfipool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"returnbitnestfipool.live","ip":{"addr":"104.21.61.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-26T13:22:59.933592Z","last_seen":"2026-07-26T13:22:59.933592Z","alert_count":7,"request_count":7,"received_data":13612609,"sent_data":3632,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bootstrap:5.4.6","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"returnbitnestfipool.live/bootstrap-alert-5.4.6.min.js","fqdn":"returnbitnestfipool.live","domain":"returnbitnestfipool.live","tld":"live"},"ip":{"addr":"104.21.61.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0579ee7046d889d551fcdc37b13587d9","sha1":"7f12467d3adfc82d8fdf89f88fb35edc70cdc3ac","sha256":"56cb77a53a9df5cabe9164f4b8f5732bc70971a040b01c64474c8e0b986ab0c2","sha512":"34e78fbab3bc6c3d8f52fbb3a765ad34cdda6dd12e0c262af0f5d3a52b76e43e492b5dad4c55302fb87342102d47a041ded212196402d89824e72a4e50645012","ssdeep":"1536:RpQjSe8QjSe9av4vk+1e6KdsOhS87nerM2inDg:RdRvv4vXe6Kh8KnDg","tlshash":"039360d5990bd0d48e6122ded477ed09e4680923cdadf2a3b92cdec1745df26848723b","size":89820,"data":"","first_seen":"2026-07-26T13:23:04.163988Z","last_seen":"2026-07-26T13:51:04.334439Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"returnbitnestfipool.live/home.html","fqdn":"returnbitnestfipool.live","domain":"returnbitnestfipool.live","tld":"live"},"ip":{"addr":"104.21.61.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5032964e1038a9a122d591596acd0667","sha1":"7713cba6f5e7cccbc3a2df9d09f63c333e11619f","sha256":"4955912ee9d84651368262670e5381ee8fe9e1a2a3fb01efccd3ab9e068abde2","sha512":"0462ecef0839664c6f2f0c27717efed3d48caf602e1cd3ace1f05d53a2bdea9d48ead2e8aa2c85255b863d4ebebec783957b85b79e33875a5c77b04238b7b66c","ssdeep":"","tlshash":"3a1104757b2a5534cad5514b317ee7a93d3260617a02a045c35ccc289d58d8714efcbe","size":921,"data":"","first_seen":"2026-07-26T13:51:04.335213Z","last_seen":"2026-07-26T13:51:04.335213Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"returnbitnestfipool.live/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"returnbitnestfipool.live","domain":"returnbitnestfipool.live","tld":"live"},"ip":{"addr":"104.21.61.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://returnbitnestfipool.live/home.html","date":"2026-07-26T13:50:19.858Z","timestamp":1785073819858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnbitnestfipool.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 14:34:06 GMT","end":"Tue, 20 Oct 2026 15:32:30 GMT"},"fingerprint":{"sha1":"E7:BE:49:69:63:1D:31:98:C5:88:D4:AC:52:D3:67:1A:69:07:A4:D3","sha256":"75:CB:47:0F:AA:4C:34:8D:7C:71:3E:4F:CF:70:B1:BC:3B:0C:8E:5C:A3:CE:CF:11:43:F6:9D:D8:BB:6C:C4:C6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: returnbitnestfipool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/b0da9f4911ba/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\ndate: Sun, 26 Jul 2026 13:50:19 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a213df6e2c5d5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T15:23:58.936393Z","times_seen":17546519,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"returnbitnestfipool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"returnbitnestfipool.live/secureproxy?e=jscdn/getFile","fqdn":"returnbitnestfipool.live","domain":"returnbitnestfipool.live","tld":"live"},"ip":{"addr":"104.21.61.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://returnbitnestfipool.live/home.html","date":"2026-07-26T13:50:19.865Z","timestamp":1785073819865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnbitnestfipool.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 14:34:06 GMT","end":"Tue, 20 Oct 2026 15:32:30 GMT"},"fingerprint":{"sha1":"E7:BE:49:69:63:1D:31:98:C5:88:D4:AC:52:D3:67:1A:69:07:A4:D3","sha256":"75:CB:47:0F:AA:4C:34:8D:7C:71:3E:4F:CF:70:B1:BC:3B:0C:8E:5C:A3:CE:CF:11:43:F6:9D:D8:BB:6C:C4:C6"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: returnbitnestfipool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://returnbitnestfipool.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"3oevzaqdol4j5nq1t3di\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 13:50:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7ePd8J0LCyv8EfeuE7FqPmh2K9WNMj52rwNK7e8w%2F0bOCgYAlz6KNHxegkQjB7fSsUYyKT7lbYazxTTPvtNSL%2FsZYbPsV38QXVAD8N%2FnMI5bDNHbLS8PihUdAZHpvNbmYGLMBk%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-ray: a213df6e2c5f5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4045840,"size_decoded":3123726,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a0d82deff8ba6084a1cd95cce76182d5","sha1":"66e24a3981e548b5cf3de39e78b3675208c2eef5","sha256":"9167461bf96ebc1719988cb2a624ddfffefd63bb11278f510309f13c3bcb9d72","sha512":"e256d64b6165cd5bb4fa32343eec9d93f062b26853ec9c979ab9fbdce5f7c6c3cb852212c5f7242d7c250dac32e3a4724f580254007d01132c6ed198e370f728","ssdeep":"24576:f7M0RJOwRxY+R2MDMBw5QEHi0c3sQKuW5KtuE:f5JOMVwMDM65mT","tlshash":"e32523e57e03a8298f545edf90ba2c1a44605e504c9861efd7c4e8967bfffb001eb11a","first_seen":"2026-07-26T13:51:04.325591Z","last_seen":"2026-07-26T13:51:04.325591Z","times_seen":1,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":409,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"returnbitnestfipool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"returnbitnestfipool.live/home.html","fqdn":"returnbitnestfipool.live","domain":"returnbitnestfipool.live","tld":"live"},"ip":{"addr":"104.21.61.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-26T13:50:19.080Z","timestamp":1785073819080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnbitnestfipool.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 14:34:06 GMT","end":"Tue, 20 Oct 2026 15:32:30 GMT"},"fingerprint":{"sha1":"E7:BE:49:69:63:1D:31:98:C5:88:D4:AC:52:D3:67:1A:69:07:A4:D3","sha256":"75:CB:47:0F:AA:4C:34:8D:7C:71:3E:4F:CF:70:B1:BC:3B:0C:8E:5C:A3:CE:CF:11:43:F6:9D:D8:BB:6C:C4:C6"}}},"request":{"raw":"GET /home.html HTTP/1.1\r\nHost: returnbitnestfipool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://returnbitnestfipool.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 13:50:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 23 Apr 2026 02:17:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 2175\r\npriority: u=0,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRSRoiQuWsvQOH1DszSgTG3nAW7B1FuaV49DkJQ4ESuEfW7OQzdwBPO4VnyX7zZSs5R1oo2h17qZi3iGA%2FvsSGxWfI5qKloTJE81FYdcqXamqcGFL3gQdS87jhaB0JLONvMCbXH%2BT51KrSQ%3D\"}]}\r\ncf-ray: a213df694c2e5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bootstrap:5.4.6","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9449742,"size_decoded":6379354,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65272)","md5":"c20d54d154f8cf8601f8da675d7a78d5","sha1":"4eb124bee3d6826bee9cd1e24c82c4597006e3a2","sha256":"9b0afe96915a5718394eacd71648e23396457e87aca813b4dbcfd9cbd8ab06ed","sha512":"4f1eb4a6dd0328d532b4ad9e58806c80c025bfb43014873a68ce48887c5ea0e431b9f2b96891ec1eff78be7c3417e0ae896946f459ed6122ac897e48a8ab8b68","ssdeep":"24576:QY5mV42jqniOQaefniOQaepyNk6MWEHqjlk9QBSoJoihxyNk6MWEHqjlk9QBSoJ6:94atavTanTatn","tlshash":"7a25e1365769bccb0bb62d8115843d810c3c994797d8d278ff890667a0daa79ef3cc98","first_seen":"2026-07-26T13:23:04.17015Z","last_seen":"2026-07-26T13:51:04.331467Z","times_seen":3,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"returnbitnestfipool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"returnbitnestfipool.live/cdn-cgi/challenge-platform/h/g/scripts/jsd/b0da9f4911ba/main.js?","fqdn":"returnbitnestfipool.live","domain":"returnbitnestfipool.live","tld":"live"},"ip":{"addr":"104.21.61.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://returnbitnestfipool.live/home.html","date":"2026-07-26T13:50:19.938Z","timestamp":1785073819938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnbitnestfipool.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 14:34:06 GMT","end":"Tue, 20 Oct 2026 15:32:30 GMT"},"fingerprint":{"sha1":"E7:BE:49:69:63:1D:31:98:C5:88:D4:AC:52:D3:67:1A:69:07:A4:D3","sha256":"75:CB:47:0F:AA:4C:34:8D:7C:71:3E:4F:CF:70:B1:BC:3B:0C:8E:5C:A3:CE:CF:11:43:F6:9D:D8:BB:6C:C4:C6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/b0da9f4911ba/main.js? HTTP/1.1\r\nHost: returnbitnestfipool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sun, 26 Jul 2026 13:50:19 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a213df6eac645696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21038,"size_decoded":10201,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21038), with no line terminators","md5":"e71433af9b448a460834c3154e2bf559","sha1":"af12abef578f3ed9519ee427ec6d907bac44f5fe","sha256":"6c1e12c1b3911dc9271c67af4564b2feb2b0bc05a2326b794058c491ddaf221b","sha512":"46d5a1bff52087bc0cd1bbb5fcb215829a8dc436337ca90f565663011820f94011dd4d49fb9ebeb1a8fc951aef2495063c9af716001ec416a5f1d271a871ff00","ssdeep":"384:Uz+rNCfO2kXTQFgVxIXsc2FG2WbmEFLHSts4PoAVeopwUbBqT:UezjsgV02bWbmop4PoCeolbe","tlshash":"ec92b7ca3dc5b881f35b59ad059b30dbb22edc9884149b4cc12294a8bf34f99d93bd4c","first_seen":"2026-07-26T13:51:04.332475Z","last_seen":"2026-07-26T13:51:04.332475Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"returnbitnestfipool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"returnbitnestfipool.live/bootstrap-alert-5.4.6.min.js","fqdn":"returnbitnestfipool.live","domain":"returnbitnestfipool.live","tld":"live"},"ip":{"addr":"104.21.61.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://returnbitnestfipool.live/home.html","date":"2026-07-26T13:50:19.169Z","timestamp":1785073819169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnbitnestfipool.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 14:34:06 GMT","end":"Tue, 20 Oct 2026 15:32:30 GMT"},"fingerprint":{"sha1":"E7:BE:49:69:63:1D:31:98:C5:88:D4:AC:52:D3:67:1A:69:07:A4:D3","sha256":"75:CB:47:0F:AA:4C:34:8D:7C:71:3E:4F:CF:70:B1:BC:3B:0C:8E:5C:A3:CE:CF:11:43:F6:9D:D8:BB:6C:C4:C6"}}},"request":{"raw":"GET /bootstrap-alert-5.4.6.min.js HTTP/1.1\r\nHost: returnbitnestfipool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://returnbitnestfipool.live/home.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 13:50:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 23 Apr 2026 02:17:28 GMT\r\netag: W/\"15edc-19db820c2c0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2175\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzqBbXCCZtFAX11%2B1zBeDJQWREFx%2B5aP96yxjMn2q4sC48y4ZnWgEEy0Q%2B2VEXJ7HE%2FJ8OqxSLGxKJLSLSWFNjest2RPedpgklD%2BSlyJhLTnK32y%2Fg6l8tRXDbcgrws6ZUyU0GHhg9O3Yts%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a213df69dc335696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89820,"size_decoded":28864,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0579ee7046d889d551fcdc37b13587d9","sha1":"7f12467d3adfc82d8fdf89f88fb35edc70cdc3ac","sha256":"56cb77a53a9df5cabe9164f4b8f5732bc70971a040b01c64474c8e0b986ab0c2","sha512":"34e78fbab3bc6c3d8f52fbb3a765ad34cdda6dd12e0c262af0f5d3a52b76e43e492b5dad4c55302fb87342102d47a041ded212196402d89824e72a4e50645012","ssdeep":"1536:RpQjSe8QjSe9av4vk+1e6KdsOhS87nerM2inDg:RdRvv4vXe6Kh8KnDg","tlshash":"039360d5990bd0d48e6122ded477ed09e4680923cdadf2a3b92cdec1745df26848723b","first_seen":"2026-07-26T13:23:04.163988Z","last_seen":"2026-07-26T13:51:04.334439Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"returnbitnestfipool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"returnbitnestfipool.live/cdn-cgi/challenge-platform/h/g/jsd/oneshot/b0da9f4911ba/0.05937673289928036:1785070833:3FtOObobV_2imXJXMVVjNgm7biDr9ey6SZTTQx5g2Jk/a213df694c2e5696","fqdn":"returnbitnestfipool.live","domain":"returnbitnestfipool.live","tld":"live"},"ip":{"addr":"104.21.61.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://returnbitnestfipool.live/home.html","date":"2026-07-26T13:50:20.005Z","timestamp":1785073820005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnbitnestfipool.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 14:34:06 GMT","end":"Tue, 20 Oct 2026 15:32:30 GMT"},"fingerprint":{"sha1":"E7:BE:49:69:63:1D:31:98:C5:88:D4:AC:52:D3:67:1A:69:07:A4:D3","sha256":"75:CB:47:0F:AA:4C:34:8D:7C:71:3E:4F:CF:70:B1:BC:3B:0C:8E:5C:A3:CE:CF:11:43:F6:9D:D8:BB:6C:C4:C6"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/b0da9f4911ba/0.05937673289928036:1785070833:3FtOObobV_2imXJXMVVjNgm7biDr9ey6SZTTQx5g2Jk/a213df694c2e5696 HTTP/1.1\r\nHost: returnbitnestfipool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13846\r\nOrigin: https://returnbitnestfipool.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://returnbitnestfipool.live/home.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13846,"data":"ZPem5nR3LVXMO3yQgc$0eBzk6uU-Gvs+Jn5-ZfloBBNLjbd8BZ6+6GdTGCAmMXMqIbNIdThBrQ+a-GAc-QPOINp+NVC4nhwZp4U8q8oBgU4v1GiDolV6aHaRcT382pssv8HyOo6gkfuAnpNTjaluQXcEFUQk-PzPl1tl1v4ZpyKys9hfrrzX5xLHBCq-cNDv4Ag-0ucx9ahBs8ih2uwOT1bJDZKjS7LvgZqTFqmlffHWQR-X+IU5WBxVs5tjZijfuHWZboCxJzF52SGn6pjvGXsMSWnSHt$EKRj6Z1WXdGF7dLsEzfncJp5Q855$D1b5Cnt$ysqN87Eo904KA7tTT-C+RgvwHVhr4Zcmhvki$2x9$Twi+ULhsFWEJzknOFLjjF2j09tchOcAQ6usHGtThBEPWRTcnpbBE3pdqI04Ta9ABUEjEaiTD9JOH8UNQRgouzChtbANI5phWaKAGxfO349Ubtmdcq5+tRkZlJ5iJ835dI1r7gFiPGryi6xaRRM++qL0rMjZ5Vuj5vK9ni9-VrHjiaGeQ+3qS2t+oHrjEnvxL4HS31VKgMmIHpF9-tvJuLNaIEZsFFJOTeBG0i8jJ1u3209L+8l3ujfijGa-Gt0U0U282RVyT+lseVnVD7TdbXUtFezrAuHhAXRZz4alK2vTgwOtFWTxpP0uL4vL+c5ukutn2zmKlf5I2pkg0gmXFTW1+UMePG4dLhxgqx6JJ1GaI7v4XbgnmMsswERiPMB8f8lGrViIJn86MF64HOumQ+mMf9CqQMDncsmyZrhawtoMzcnAXPVFQz9WSf6rigDGXnCyhN+IqCF2cJmGlC$-gwedNTONVDLh+y2tzDeMk+IlV6uA-Z2OKuiZIiRbeKCUonCiWGZcw-3jESErdvdHfndXW9jTxKzTG5EX1WWwdfxfabv8JG4WRbyDkUc$saBfk1NomNhb-nwRz-l6BzG9-XVXmubl3jxqCPEtEqkxv09DBkVzyyBf8Ai5EedSTdvtLHIDWJnMI-a$Gx4lRvt9zSyZQcvverdgmjeuKswc+NtjRZR1APO$A9gd+DxN+ctz79aSrTWak6UCbpx20NCXLzUPXNsRFrah95t6b4VsMqtum2f5hyJn+U3t50wkFaMXevNcl3OaMfKROj1$6qBdldnbfo4SU-Ci3GLz$tNW03yHk6hlf3xO8JGekPG0imIT507oDlTMtCvmcxg15ukk3cijs87RRJ5nz0R7E1XiagRkbO0Vdv$bf6KO1s6FMFSB8dEiNHuNIHA0$do1FIE0FhBuJQo8ORaoS8fx6XasN4dCoSnCPJmX7Ut2nByBg22Ik$nGD6KyptRL+GFGzV6bDUOiW3Zyv9kvdbSrebe3phTS31RJIGlkmfuuncki6nJqT+rAhbTaDFGZABUEpsBQaW4UcAft-r3WDd$m6r42mZ8Q7f$Gm7cq7tqePr55NuRZk+d2jU8z+QKzA7ZTsF2bK76vt6NE8G1IAV4RN-URR4T6THg2cBNp06EZhTs2w2DfBw48SwL62Aj0gxNa0TbyfaRc$FHgsT39J9aM0+eCZB-RevXsE8F3wBxwJK+yDoexGssLogUpIOHyZe-plTPtmgNo4GNMf$I0fbDy0xlCyCebkVCNG-zmWhUZfNZ7oyZi1AZqQDIQ5J4qkLeHbKBt6v-klDPGatAc8Wqes$mziH7WOWR9q9EzgfFRnLjxI-FffTmc$Qcob22bVh$+iKxCgagNoiyk6RrnsZKuSgZvODl$2Dn46B0-drk5RVhtOW2h4yTc-cDjEo738HXJBg66AOLZskzSh-sZZtsFcLdM94CZL-yR7aBViktUzBepMoTuCZAbG2KxhWMQGxEnLiDogg+PmHeBj8FmRt-OHB3DCSJJ31cGqUSAs-aD9Qjy5R12dBMn0PyuMhEdHjt4S20U-CgucGmkg97mnFBiDnzEjZkuGVrQaLsHQAlzGumTV2vrm7GqkPnFEm8e4Sa9hKqLo4n+dkfuWaTgG+Az0MfPzSpu1JUgjpC3J30dsWkaeU$WXsZvO6ii4VJkDmW-CadJ10+Jr9359BgHlbiOTD04QVI1UGwAJTAXyEFgjmx81uV0mZeh4CORJ8lF8qO+xgR8TqhoNv8F7b6IX98yDlHFVgyZAJQy6GKWPM9CxEJ1z6o3UIcIrvy1nQ-iZAqxjLf9tRlC32POjJ$BZTPeLfniFrtNFQXpVzEm77PaNkQTH+542E$AkqpJQ8gOn4JAUBFmH-hsujnrvZR6JB36pT2SUNGXzrp73IbM3vq16M+-MwurG2eli7nGlzOhiPpORFt-8zfR5vn7+Cs0erJkqJi8Oc3pM3Xb9CmUsAs496-FukI-4O5DHfhEXAAqh$C0JltPN1BU8CltSUvRZlLVtXZBRi8lZMvvNosP16ascLTb57b8+pkPlEokJyUnWKP84cMrmIv$G1R0c9of2GRyslzQBtZeeWZ7G5JTy-R+i3oqPkMjZx5g9VoznLls0NaW6DlQa2bFw119mpLKvzPg58bk3eXwNW$qDPhJgzop1zCBmFDVkkx-UFz-evWZXh1V6QmI-OvUH8uqb9HKdccvgAVT9VqU2deB$9qdzywX3xBX3+$PzWqcM6+R8RVfDgGgu4VbV0C0pnH2xi89tTHoS7gcrNhDZSWgWMb8kNGgh6NqgoW8c18Exh7jLA-aFtgEOeQQ8gafQkgZos0r+mwGejvA$T7p1qv0K$uc7jnULFPvgQCJ1qme4RdpvfUlD7zyf45aXh3CFJXyRD2qxKbc8yhhJ1pHjVTWMDNdfdOzfk4UxebzW9MBvSj4375QUZFFCpnV09Wd5DenE4Ox9xuF9ViAy3yMtzgA0kacV2IpMb2USZitayL3f2vnEyKPW8Z9KMIl-s4aBhAUVShzXJV1lpixh9lA8Ch3NrXBCl9s8lwcs-nH7NpbQkE6DHwSpqdzLUtzfs7AvM6-im4OxW0D9CzJS5R7O7mDVR0jQSp4r51guEw1H7HvCWa+399ddsjxfPXpDtDZo+1385LS122o-FALMuGhvUpJ$14JVW+aeHVqp9gFX+7nr7Tvx8xaNssoezQAKfpm8lBZa3CZ2aQn5AtuHe-dV8Xfnildvph5oDsPFNlbRFnDBHmRezXbCNqE$t4tMvoLv0d53r5l5fceFaagAklPL-pbgF537FmoqPKSZz1NiAFSv6IMpQSfTF7krxW+WcuzJXS$tqjzWDUJZZgyp-ylC-6r6DpVX7wUirzsb47EtBhgDgBjs6HG4kAaMnOnu8lbZZmpo0Qs18KMQN8KG7Vb-IMFuxVZEZ6cdiwpxZpWLTlsOrkoxHEIrjh3pC3U0+slx+dlGCe2dXu3KzPeU8wfQCDeOJ+yH1zs$jMo65adRXO6deABhDZOoL$+KWl7gBCUDuObO$aX1FnjXx1FaGijvMDqeoevGMFHZ0CCRE46D0q$fkcqAPSZxi$fIT+IiTfyhUf$HkM8PJd+w-tx0dktsFF1OPGeJXb-uBSM5sFnIDw0jGllyw07xNX+vcjdVFOZqw1CCFdg$$vACU+lg5ATnXwxLLme0p-BBS$XXjvoMvJOo2Lc-BfTt$oK-Zuw9t9fdHffxHfkTNSy4ys6BBihmi0TR+15KuMhPTFsS2xa9wydZ+TzRZpaDd$TSlhFHWkLJNipm25v+z$IBR4dNXJPXzMIO3yn$68SeXImw2pE0gopbN2$4-mA9vFgWnu5xo$HFfwzm0Tx9Cfh1w-+Q78WyIAbBjShTD$Tufa12$KppyAEyFaPM7sTmqrjyL8hig4MvvuOgTIiPtP-SdO3MvqcXFjhleLnfqVAW6mEdFRIAlGcceJPZMCyAKDQLIe+DBKRdUckfV8MWsMGXntX+58E-G0xX$$62hMx3csAx+Ecu4g9Al$Xdi117TlTZAnKu+QdvFXolzoG1F9bFdWOA9uIBCpcrJiyI8+kuGaR0PndG$cpZxy-Tjw$wah62ksb8ks2nl564ean-qrxXJyoZjNx$K0WdzpdzbJwO2SGi1NpPdqVuQ+VkgTC4JUVbilbSHQ8sjc1rUFHzBGNgo-d+m79SKSKADPcdZ$0fchIrZdkEQm2dhptaVKv6i-ZJIq$ui9Knn$QOq6RjrINNKErt$Byq1LyLxIP1-$uU1Fumqecv1zkfsNbT4PCReEagHBvQjMJiFSuKQhpwNCnJajn6rRuysHy3uzb0tKUvXx1chQqf3HGP4UGtx2dP5onSOVqiQHwmNTUEZETi9Dbiac$seGSRXlqGrs0JOFPHQIznP7Z+IBHy4NdX79e65jb-jsr8vbp59qLxiq72xagF+ST78T$BNlwp-uhkJwZeq2Bv-KQUVZwGNdU8i6igjDvl-sJDq+gDx49gekF3yr1iRvde9GHr4i-FR$5QPh8iNZ2ka1uF4eXEI73GftzgF4Psmr5aNXggUGX56e+xbQ9eZHbjidQuuIFxHQXef3nyzowm3yHop8M4F8KUKXIgRsR5L7bN+umQHK7p+GKqAcRslKO4H9koxQrCF+tCskBsX$bHza9Ltdn7eRCfwVNfTS+tXdgFUN6L6LiQcDm1ANgdI2teFO5Gt5g2A1cZtV9lHqymVUwGSOAyJS0B2PPmjWEgbFgsioTDqMsOJBVEUtaVIOcSSD28sgBo0sU72fTv+4oGqV1C7qdiUla++$VEv-5KfySL1pXoZKeAFtq50jVvsh9vyif4fMnI5HJikRhRFzdUREMsu06BBrrONXi6Db-t8nLe1Ch4njAVO5pU-iyUcqCOvGNCa8D8nqJuN1BvlgWjJo2PkvXK-xg+R3R2MvMNdGgi$0Q-5tJR1lDkU-Tis$p+uE5ia5QfBoD+RCuenQtSEqXcN5Ega74c16OLvF4ybT+PUoxyFqBLBd1N6K1OMrCst9u03MMltwk6UGF$45ooDEtp0grn96qez4jevQkgF9fQ4gKrQG$HLZXO4zuBqw5kGqGqT0Db3sM7e4S0EDtzNvzHH0rpV14n0QSKcLFDy4GSjV-2XoxLqXCFOoSJOyCj+mh9gcco3uIsPMe-fDKqqrw-A6vL4aWedvR8SDbOazymTAtsAXbkkuFGZm6R7vQ6iBQJ6SOXwqk2M$f8c-OaNCCkZDjXQpUiElubdVIOf4sOxpk8DVEezuTilvnuEyXyOyNEv5eef$gEUMg8A2ibTl7aym1c9iWb2xUsZUb+1Vc-+07ApUGZ6JCqWQy$CrFN1NLGPxT9ezgQZzQjcvJkWL9-Qr0dhvIJswwXxnQh1zP5vEC$f3u+ycOrs5-91CADestKUlV33h-9U59Pkr70bpKXW9jh-8LM7maQbGse4tI2xA-99kiO8eSfowXpKhStli2HFwLmLB-cz3AIWRtr7D-5FWinZoiULFmgywz-fO93RB3VfTKwuQZtmzFXu7ZTXLpE7mOWZ35NRdKEK73tXrPnknE0qEewmls8-mckgXm$KgXANpxt4fK0mwV4y8FmtwfqusGX0amZRjLo3HvZLNNVRexS$RBariRKoMut8ZvB1duPzv0zFPb45PtBQgomoEP02uR5nPREQap+y8CAaX0dEBea8bx-bLpnwjUUKF16XtswRrJA-3QA7t6rQHFDby5iBy8iVbgqZPWxKjfkGjcfBFf$hLnelJTkCeIZJo+y23vuS-REwNPMS+PEln1OAH30S9B9fmFcSpMuFPHOyEjuD1e-GKG$p$IjX8Snp2Scaw5N7DIF$5nRDqgtyEUwFONy+tV10TOVl9HUl0wbUvjNW4V9FyjS91VbGWTK9yLw3y53zsBhdsggIUBbmik7uAB5v9QOZVxMyH0n0y$QFUT7hX8x5dBJZ9Cr2hfd9j82Mhz-+Dx+Uqd1Q0p-gfAEC80NPduyDfm+I60VmWcjfW4F83o0hn6EkteK3b1APE3BA46-wZLT+k9nr$IB$InImlhKVF1hkJdCBFubZGUQ2-tAeKTJ9tCh90vIULsZx6BrCNOHJPrM7PPbMPn4cbT0A0SzHT6sfH-3DiaIBxpLMmrayvuIcWFQJ16knSZ9J1d-iDKKAc815DMkRh9SAAwi5csxFQCq8zk67klelm11li1BdyAtttism3EAZUKUTSAfp$c1$BaJpWnJW6DFScJ81UuDKl8LeLr80SOH+imhgASLB2LdKteL7AtTLHV72Axthhs-WSn4aWCwQI-w7imxj9KFHR3NhsG8bJR8z$QSokaTb-TdHD+3aDknvkntBKAJL1PqMX3MLZBTRryr2bf6CtrmguLQcCV7Gjb6P3J3Vph1obfq51d3bwAwHkQk-3$cgy1HmZAdqgBO5qbix9MchfSe8UAFCA+bfPRd$K3Cm6Goh3DKLHX5oz+ZA7k5sdA9Uj1T50eTJrUrubvJGidLFw3RBVAPz7LyZyv5XGnKMSp4AmJGOcw1MK3UwmuoIb$mSWXTyxEpix+gHl1JrUQRS4ROLAz6$Jpq0i0spfem0-p3W974w-rtm5oMhy+wREGn1pI4JsnkFs0z5BUmKEU+dO0wvMwkrXEC+2kOItwf6re-f-4Zh4urpvq28rd5pMtAsD1ARswsH0Q0DpHvzLsTTgAiA$765uGO971Q6VLUyheRB+dpbJpN5KqZKDFxZDAJIvIdREPENUHU4KFaG4505RTtu3AhvJzcFJ9XfpyXX9srerO9d-j0LyxvuUlDGr0Rfy3rEF9E5bxr8kKGErJiSRPG$FIiJ1id1Cvv5HEb+LVtqQU0If8rcz1nXS0l1CWgEN9a90kJ32naItoL$RKHaN0IADfxotPLZMhCEOLXdCoKcVdACB7nKsn0OyQ$ZyiNRJCKQDua3F8M2RyRhDGR8WoOEXr32u6+ZjGjx$N+ig5M8n7yfFg0wG5Uq4vRocXJ7+XuD-xdaaGQqbk609weybDPxHt+lnT36nN3ECJdyNrMq-nz3WNIt-ZWMtTZq7VNMR+kauoUDrpL+zQ-SOI3jwff7LnZVA1LBFZmavpx5gMNb9+amgmho5LqHuw$KDoOJOSTHXCFGkF+xogR8D0mUBZnN-0zPRQJwRfIfjE-An1FVUFkm1cn6wp5BEORhtooOEXlKB11USORkcV6DwCixhLBSreiv8V0p1d+GvXT-SNzva$BQQc0$knnS9baMk0OKt6nq4At9TOFXspJRNL9vgAFZVR$-$TN6f2vuksOuvAbNfu6x6o8ub3lPNQ5MNerwWEd2g8+RaqJaZcXHb2QP7nDo-SyJ$URe+72dV3pzayDUnqwIQX8XcszpTdwvTcq6hLeoLISW5drxSej$6dmB0yWzbvhmrj$umDh3v4p5-h34p+DDvJNkJ0idTsrzqFqlfuey86s$o9IE-MqFf5LnLyFqopc-$hbr8rN0EZN46k$nwaXVpS043nnpvhZ$HQzAU5rJgpBqGug+gPyqkxp-K14oTg4CU+sHjZrS$aBS9rxGuR6g-mahCPsi8SnvQEZlCDbb9du4Ia3$fa8dtdX+WDA6eU81GpVVBh8IQsNRtohJz5DIRHjWWMq3a1OrPD-Io+18XmPzFi3h0$WNDgx0rK4Z3fN2xwNgaxQlVAelnlGKXb6cv-e9rmmXmqrtupM4QA$yqGebMPBZXBvc2IklNE2JRuop1Ikb7wmS+6dGN0IjmydDDGrxALfhICZAXOw7zTRjj6Gitqf8f2HwlauDsKPM3$BycD05D6OSspvEVfSvikX34cOiDw6vvwXwNJZa00yPM2ODFImaQJZ7OJCMLfhXDdmavw4fiFGyVqlnOB6uhasgXZRKs6siOBZEi8dWWNq4NAtBUDQwwOPZsjiBLNUDPG5NwDzcWwO7Zd+6KxcCX2fNrvhCJ+hl74v-dBeyoIX9yxsmqnzGB2kdejLUz9b9-pyB8WAow3$E70cbtbfv+-jdSgvwIFQmz4POWzRDxR1n3$i6wRBuA68SXjV0caZrAHOv9fdR$-7nrRWKLgzHJXsyu9vop5Oibs01+zyHVwitqeprUUf81nJ73OFFhugvLV66RBRl4f2BZCjWRhLVmkLG92i3rpqCRJMmuPBf8e$rp9hgisOU0Fm-A6zESB2iE8CdfT8FhfFnz1kJJZVI9nVd8CwUT9zl3x6ziMGSMp5AlharT-PF4G-fIuQb7rZKa79Q+hPAL6diw6i3ai0jbspELADmDefXqjCv9-oApEXFOIBuGm6TbtCeZbmIZVcvldpk0VI2UEFKog3zoHBK-PsypGWFHp0m23GkmS3iNcVWlGVfUR4NL0HP4GZkSTCtfDLColhWT8P0WZZW-5ylX-VhHzngFFHl4MQl0gIQTePb+pFeVm5ZwhsEdCGKZBHd2uztSFbW2AWKuaeF88tV0q4BPhO2qHOCQJUffyK7q1xXSAhR0le36rADwUzw2UlZlhHZrOXqA97bAerE4RnXNcD-Le3lgALLB28n3RmEV9AyKxK2kF5QZitvtKTZ22iH9+i50qyhMP$u$7B9P8-pgvrJKo0HSfOF6BCADKv2OKBxz9GMo-+0fWIdo5Js$t4fGjVH--a4k8eeWXt6HSu0NEjPV2Gzq4KsdQjOICnAjlgiVoj98Jk+w3joSBtoarhx0L9jl1TDeAtENSvzxi6CLvDtNH5Wyl+8HFjQcU0enrhV6ecey7cRJxWTkKZFa$C1FarOJZMLz$u$KRCrdAXIaxOtrrdGA9RDz-VuF1u5yB5umTw5yNgvHse-P7tVmtZLrE+epJdiiU+qmPwvz3z4HT--AoDq958d7IGFx0C1BQBqpgzGGhyDUu8cHv17w-$xuC1cyGbTRed829BDx5RsCvw90mCThK04jSrsTtCC5Fwr4Rve+Z1F43qvOUcvV6jkNHX4QU-SoEigbmbi+4H5dBXx68uPjn13mPFVyVMqz7lPRkdCXBSbPAUKElf9af6$0n+voaX2aMKcar0VbargWrf90LnzGbkriB5klfENIOPdXdzO2cqw$6H4em8ok0l7uAWaqcSed3XdG8i-81wRwCTGJj2JO-ysAbi3C2Md8jDcUXTR$TgzWUd0nmxxJFmWX-4q$JTa-Lfe2-k6-j541+ehrPZdXnNJEB8$QSOPTje+0HxHv6wabiAMdF9MhpTmvfGs22vjxun7Ll1K43oS4wUZ$v9VqLIWRBneCBazmBLQDlVDRJqnAz2xNZ+$Hvxlke4j1CL6JrEscj7lU59Ultl03MwBKdMlGXlHdOGT45P1Zr6WyArnROJZE-$VwQm8iEs8kalR52D3-zm7xJJNqq$wqjr-7+ryakDsGdsQ3$+bKetbCko+ycNd6l+gwotQxNq-6m1a$RXaci8xlBkGyN53By6bcJocWS52anKu-hWra3VSF$T2p$n12M4WBTGzdRNgNxShpk$KFi4FVWXGz+jNEpNCjNbK5JCBikOfBN6pD2XWAJZM-saPs8$fM+d9RhqgVncgJuEbaWqJgxtNqzZOyeW0a6LgW+OjHTd+kb-76mPvSoJzC1esOggxlS2ha$08+v$HUd8l3g6-UzbHBE$ASqjzXxWfN6dakLnUh9uMlSdTJobFGju-U1ypCM7IcMKOBHFuPb0ye24hUrpzmaxEblcz6il7lPlxSMVjNpnZvjHQ9rLW8X8LCXGsTwTRgNchP$gxpBwyWFzBPhiTNrFaTwhvvw-cOve1HPgpGavtXhUF90t3Azc67Z8DREyLvuAVOXDC$I9gCDXFhqflwMFB$OBychb1zeFtZ09rEAiteKlhXbxTO8m5KNjTiw2Z3vtR+4z2wcHLvsJCArCZi4ETjZrophXTXniPa1O7A5iSDCqdKAjOVj0agbiOUwqEActLxn9yJt$$G8EArzTMZDM-gTTTsHWnAqmEd1aRAIve0Pj2ucebFVe-tCfTgvlDylS-o4mCULRSMo-LqehjuE+42xbEXORMatWDQe-tsRak97HDssKGbgQnQ1Q09IX90+-z-MVVXUtCnA6SIddFTK06MX+oGEc$NiQzL896pn8OXSA2CEO32gbo6IFJqCOWrfyCv$3HPLZh3xQUduGcv+pmdmmgMESSwwkcGf4FNctrbx+kw1BeRdHEawdg5k0TyFMBB2gsPEuWqkqfg+fPA4oINDzi3RX8tw--fNWFng7LeurvkOsGeaHJq-ZfiRhzwJBfh-k0ggW8ztyl0nlISDmbASy1Vrxf9+XAU3shJKQLJymBjVf393MNh2Mt2Gfybif$xl3DK3m-NtUSXxzRmQTsX3Ie6CJdZD1FH4pkX0p+o$6GoPfAt5jONxNKd9hw8S8WsO7+N+bQF+WPaF8+3spkAQninN29pz2Es2$pCHjrQA6oT9XxfBfvPXloeTeUN573Rc+khnQgdccaVgridzw$C6sJBRbJrJQl2QgGGvgWr1aZGaP8IMEn$moeQTyaDMHJodTE258f6SAeV5bJI6Dj96PXyKugGNpPWKfWPxNlm0A-aRx+UFyhj2$NefNzttcA-TqSkUnMmvIQ3fiTFnTzBCav4nN5TbODzUEefdXODqndKpzDk0Iv6R3RBvG-VOch$sd2E2Hk1Ka1swqZhJ9+O8xIaBKFTyv9vGP0kZWC0lGng$dIX$laCx6UXmNWrye8VvuoQ0zNhrJb-snGZTnL7AFZ-Ibd0w6Jn5px7$+vfPsX94gOr8iVay7UrPKraB9vqwXTmLRjqamglSP6GShanxbs8WKj2O2oyw82$r1o5dLf+$yxZjODxXgw8QFsBqGUqnEOw8FcOoxn$MhFWn2ESWe5z4r8sxwKwFcSFxgpWOuf9XPa$lpRl0HJwgn4l1cBoSLRJTbU0hIRV3WBhZH7tPwl4Chyt1cFqtRWP6O+7Wn7+Pj2ltI0F1bijSFjBZahK7i36kEsxLZ90v0zzS2ZFFPxLnQ$IRguwyiSa+ciFVRBLl5H+CdoXH7L7MdWV1ru+Zx86U+1bwm10Fn0Ud9sBMsJ5MddTX4NCsZh7UtGj0VsvqOvG2Do9uTqNUPZkTXok3FGO5ZOX$5RTsHxnEkBmOJpDsxRFduhZOX$xCuHV2Rd0KjD+hEc4F$3v+rTcOR2zUk4JLvhaDcE93Kj5qmS9B1S0zogEMFlVfgcNa68PncWn$9+NIB9lO$zz5z$EG2npKwLPdya5tQr1QcKL8EWZB7gMJ5qhnQNtfU7RbP9UO1JblhI6wCFg6UtiN4bw-mqxlxSLbTws8iaPk65q3Cayw7ejeisW1-pE69xFf1DrP4IQJLi$l1BetOyfkJgmhMjwdRZ0fkXvcn--jBcHoapIxqq7ukS+$0PiD+MfvPVHIAsMDvOuMcqUGG7aDWAI99+zDtt7iS3wRevLnnXuSofUerPk-t+8qhMv9mQvMqBOsyw60-idXV5Ksr6mpTEk+CrAeswgDOj3ZfaToPafPkXmDZBu67zbneqzg39d-fgOFUm72UgRO4vml6hMz4WgExsOrb7$LGmcXBHWoxS993PiOJHIOuiS$6TF2ztnv1$Kb2H8fVb0XHGoTx5jd8f1FXGBbVGzGRKTKvjvshFgTa41r5ikiR6v86Lb1SlgGs7mbvExRbjPuMJ245KvQFIXUxr$+OuQVs1WEomrqvwr8$LulfBn+yJR$Rn$CNasxA3Qu6yKsFCjNnFwgTa7xvpC6wvxbSMhVtEQaP0zlgpbGWobqS6OljUvqp0tvrMsw2u4auiFpAUzUM$XRQb4+tDkODjFN6zokBstrsGCBGxFGHR7dN6VRfXmPgF+$DOfd+x6iEnGUf-$kpnyb4zBJ+xnF3L$O7Tav+ladPUoD0P3aTVKlcdUSp9Zxn2E9oGbjVn9Ab7ty2+r1lGp9Lqx4C4B5Et1E-0KOcsw5ik7OA8i4nS5j00egdcA-$NN+G8cTx4kr7IjcrmC9Aylis7oVSDL8j-znSXwgGlLhdARqzN1pQ90U5KQNUnWEA+ELke4yCFmigPs1oSX4P+zR1EV9n5+r44skoun$XtVNjRJL2NFsHckP-EMX7Rtv1sS7qtZeh171Vdjt530$b-F2gkDss-tK2cPhtvTS1rsN45xRX$bUKsQ6ucP-ZwX3If$oGP5FbG-mrqaCg-jkgzvzXaNR3Eq06ZmZ3KXMX7ErjKl0uJmAcQtO+aGFzvciP51iRHW4SNrkuvO0qjTFjPeqPl9H-DeRariPCGOna41QmoTW6ho7Tur2b4ImJsgsPO08pNnPpWmg30Fm-pFXlZRyDffRUSo8m-Lvtkl5PJ1AzDhCSZ-Omh9Uz1$J+cufC7d0H4wRfZ3b6nIs1r32MKjaaszkF5c9c5pMSy$hERRjBZvc+66yniq-plvzcijJ8b-s+g6Z0eOBMNhnA0UbargpuIT6-F7zLBDe-tLN9s7TuQpfxiPEl1$2Sq23ZTnHJzLAUgOrmJZSKKvGWb9gev1IaSZn1mjLp$FttRFi$WnKwLmJI65$up$wk$JQwTnQRGuNh1bg48wbh6g$ArFb4AG0mfqB3DeP12wH86Ud5O0ztIT+FxEr22MsZJ2gsX+08gposbVNKS3zx-0tOf1mNpamuVxvJtSIj-+o-eAMu+VNugFSU+xM7+aJWTSxv4NCX2O0cLJjn9SPNoMn4TqfC3iLxWId44oiy8HZJwXrqFT+hIE5d036WwaxxTvCiUpy30XQDeQ2CnGdqSJKh83HUsIFT4tQGUnm7dHQh7rCvygRPGMl0jN0RHOe-IuiqlNnhq2jn9oXJ67KFWF2Hq6HXHIz$N+s0Vx6iAI+unZt16j10sDHrl$ODSxoO2yTr2m5EZ4OXWeEHm4Dz8x3a$ikJdu74QUILDD7JWwJDcPNPVUmSHllON7ctInNHHoc1$rZ$k4I$1UHnvBJWkyqrlKAlPRtag8KIsTMwwUpH7ItpskShQsdK-+i$l5AhiMygUDQ9Hj+d17eC-VKbISsC$AqydrfnrCXD8RAvRWtTlcI5mZxjRJUM62ii7WTUjCw2BwjFcm5SEUhjPWVKCX10Plzv3L3WLUchg0HTxP4HKakilf6V9yWZXhJLhTonhb++MVSfQaXi0sNiwX5G9e5MaQl$XGu$fjm6Ho$eZQ0xL2Uh82yssJQuuVPokCtpxCJhkZ0oea+rp1+dAfcvFG3gLef37CijvH+uhJyq6MVMfOIwwGonrUbLwvRmxZn4TudGWjgThXFgoHeM8jh5C0pkOXekU+nF4P7ZtwdvfMCpxBZyTuBd$S2944rO5xxQ$sOFtk$VSw8E1AvMvo6ZhLxis8r-hFQMRQJ1Oyyvbqn5UAiJzIQIIlIXcsi9cjAcA0xozcoeAUzwsWrym6NLM9kwfl1ESqK4Sy6$nyId3ljKTEI7xrguGLGKW756LoBui3FD566AeeCR$u7amiyKjKpFPpyGTa1sikL99AzNbvRE$3GbA-hEV1tUROBuHvwtyEzm3yqxs-ujA7jSSwIKnBA4teQhhVC64LK5yES1cwuDP2ZAzwLrXznLWVoR4f9pepb5l-m+TG7J-MOmd6mkoqTumT2auJrP2bfV9iEyEHfBURcE9cb+qiOW38E-t5qMztvi2dty2U6mV1JAKfBFMsDDvC$tA+SaikFt$ekb8BCP-9PruCQi-WTLue7nfwNanClmKXyg5VA3zsvvKkcvjvGaQJH2ihHkFRSFpx8o-bJRlJL5Qk6tgw7T+ejTLhSjk1jbnafHUDi52Aenqazj7guaXhWGjARiW4vAqKWINA6qC4QysFtVG0IdtD7vuNqOblHrws44vlTcqx2o7ZJEzyIHKOmJyDoiT66ptBH+TOPx88Mg59UuVJgdyoTMnldK23gwIIBQB7vodlhmOnwyzuuzVDjXl72ndpgurGw6K2iFq9vItkCQOIJs-eyE$-uX-2MG$9Vfg1KuXJIoLZn3ZKdT6evrXbEP-f10L2DnPPjzQCkUpDqGjvGrIQgNOIHzmTgO8WncaL0By1s$mCAQkOPttk7TWnaFB"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: BXO3o795pDEt3atYNSRo14r5WdgVDltN0IXrF9QsQO8XfQfNGO9FkUsJGfNceY9ueW0XdjKZr3hQvGdtYP70X2NgrE6bbs6dRc8x3SahI4E/fMRINOOBiQ62kOR/ylfHxWb3V1f2IBHAgwaT0k5R5pjIUkyvOoJqZ2FOrc/p42Y/PvKStmg/niUrv8EFIJrvwjSIi3oVE6q9LYHu82dkA9rflZ6ILuYV3Stf8eoGmRIvyHTfmCPQ52mP2Nmvg1P5YKKw8Del0Dfk/SzOVOIhUw==$mayAxGNqafsi/xIN+NoIgg==\r\nset-cookie: cf_clearance=1Zk6tmxIupCOv.fePDkSH.o6qP.bRHV9hZtcMxIjD04-1785073820-1.2.1.1-qJFxN_RnVEyqLT5NsuIpTjIpmT0.58kVXOEGgpYyVQH56m_R7YAsyIknhFb1fTJVJjtaj2I7Ktqx52VpoXtsDkL7hVyzX7GNAcHE8RFbSH_qkl63_htyk6bl0SE2eTcuoPJb2pHlUp9pZ0zEN8ULp7nc1jVZz1U9oNo3MrWoObeMsDhOioGu3o9gB7sQE6hWF69rXVj6CywVE8bLgNsJUXk1dVAJD1H8CQw2MVVhiIg7y8HVxotabZ.fEzAsXHb0a7FUlEgl93sMcp75yAcmfoXso5jO_Erh9I2uD9ekfVjmXkOdZwtCUUU6QDjUC_v677PDL4L2utSIXJ87oFTjpbTw.tiaUSnuEkEzz9N3GeE; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=returnbitnestfipool.live; Expires=Mon, 26 Jul 2027 13:50:20 GMT\r\ntiming-allow-origin: https://returnbitnestfipool.live\r\ndate: Sun, 26 Jul 2026 13:50:20 GMT\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a213df6f0c695696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15729,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T15:23:58.936393Z","times_seen":17546519,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"returnbitnestfipool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"returnbitnestfipool.live/","fqdn":"returnbitnestfipool.live","domain":"returnbitnestfipool.live","tld":"live"},"ip":{"addr":"104.21.61.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-26T13:50:18.864Z","timestamp":1785073818864,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: returnbitnestfipool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 13:50:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 17 Apr 2026 16:55:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 2175\r\npriority: u=0,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHOPjKl1HJvQ2U92Df%2BNwTwH3d9GM3cnUAnUxzPqb4y2ubwng9sxhW5umao6t%2Flje9eZHXKf7W4OMOBNs2oFU44YlMqafr0w3iAnQ4iv34N8lfecW4yCGimSpgh7K%2Fs6vJCKhpL5cREbxc4%3D\"}]}\r\ncf-ray: a213df681c175696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T15:23:58.936393Z","times_seen":17546519,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"returnbitnestfipool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}