{"report_id":"925d1db5-f7d6-4108-8a3d-ebb0a196971f","version":6,"status":"done","tags":[],"date":"2026-02-11T04:53:59Z","url":{"schema":"https","addr":"bybitron.com/","fqdn":"bybitron.com","domain":"bybitron.com","tld":"com"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"bybitron.com/","fqdn":"bybitron.com","domain":"bybitron.com","tld":"com"},"title":"Bybitron – Professional Bybit Auto Trading Platform","dom":{"size":102312,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33475)","md5":"34d7e195429232698eb230c84add837e","sha1":"ea21c8c307eacf9fb382065b3fd96dfb7787ebb2","sha256":"bf94830619bd7189239a03aa9a2fd7f7afd457161f97c279529567ceb26e63fa","sha512":"7925fae69e16fa8acf3658ffbbd9fd6c0a4f502eba6ac05e5cae4ab389dcf43b7b4fb615cc52b03ca4b496c2c1241f40fda197c182adf5c0396e59cd750c2389","ssdeep":"1536:WXx/c64Jysq7vSiOZPWqB62wfFeE6aLu7urGpQV8888y8888X8888NGETFlQdJAv:WcXun6lQJAaU","tlshash":"14a3953422082e3ca51787e4f7a4733c5139e285e767956cf2ad01b667c7d98a83b7c8","dom_hash":"domhashdcc15d60a3c2f5f5d73914baf93c4c70","first_seen":"2026-02-11T04:54:04.642472Z","last_seen":"2026-02-11T04:54:04.642472Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bybitron.com/","fqdn":"bybitron.com","domain":"bybitron.com","tld":"com"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T04:53:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":4,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-11T04:53:39Z","timestamp":1770785619,"ip_dst":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59798,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING TryCloudFlare Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-11T04:53:39.649410+0000\",\"flow_id\":1385734880875597,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":59798,\"dest_ip\":\"104.16.231.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058175,\"rev\":1,\"signature\":\"ET HUNTING TryCloudFlare Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_12_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_12_10\"]}},\"tls\":{\"sni\":\"satellite-merger-exclusively-pdt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3460,\"start\":\"2026-02-11T04:53:39.644173+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-11T04:53:39Z","timestamp":1770785619,"ip_dst":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59798,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed trycloudflare .com Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-11T04:53:39.649410+0000\",\"flow_id\":1385734880875597,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":59798,\"dest_ip\":\"104.16.231.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2060250,\"rev\":1,\"signature\":\"ET INFO Observed trycloudflare .com Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_02_21\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1665\"],\"mitre_technique_name\":[\"Hide_Infrastructure\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tls_state\":[\"TLSEncrypt\"],\"updated_at\":[\"2025_02_21\"]}},\"tls\":{\"sni\":\"satellite-merger-exclusively-pdt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3460,\"start\":\"2026-02-11T04:53:39.644173+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-11T04:53:39Z","timestamp":1770785619,"ip_dst":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59804,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING TryCloudFlare Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-11T04:53:39.652090+0000\",\"flow_id\":1216433712518448,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":59804,\"dest_ip\":\"104.16.231.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058175,\"rev\":1,\"signature\":\"ET HUNTING TryCloudFlare Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_12_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_12_10\"]}},\"tls\":{\"sni\":\"satellite-merger-exclusively-pdt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":952,\"bytes_toclient\":3536,\"start\":\"2026-02-11T04:53:39.644400+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-11T04:53:39Z","timestamp":1770785619,"ip_dst":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59804,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed trycloudflare .com Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-11T04:53:39.652090+0000\",\"flow_id\":1216433712518448,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":59804,\"dest_ip\":\"104.16.231.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2060250,\"rev\":1,\"signature\":\"ET INFO Observed trycloudflare .com Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_02_21\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1665\"],\"mitre_technique_name\":[\"Hide_Infrastructure\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tls_state\":[\"TLSEncrypt\"],\"updated_at\":[\"2025_02_21\"]}},\"tls\":{\"sni\":\"satellite-merger-exclusively-pdt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":952,\"bytes_toclient\":3536,\"start\":\"2026-02-11T04:53:39.644400+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"satellite-merger-exclusively-pdt.trycloudflare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"satellite-merger-exclusively-pdt.trycloudflare.com","ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-07-07","domain_rank":0,"first_seen":"2026-02-11T04:54:00.34849Z","last_seen":"2026-02-11T04:54:00.34849Z","alert_count":2,"request_count":2,"received_data":949,"sent_data":1077,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"bybitron.com","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":851607,"sent_data":1767,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bybitron.com/assets/index-BXR78VTA.js","fqdn":"bybitron.com","domain":"bybitron.com","tld":"com"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"502f0c5e71470d05e4172d9423b03425","sha1":"26afc57ff25c19e9aa560ba5eb84f5ea75227bb1","sha256":"d9d70ef0cbc5f3a31ed1771b2b1e3c07c8861d023e2044e936a7cbbc43c79041","sha512":"c99283539ca72794fe92c2cd2d1f06a52169d9da1cf5041a63931d0875e10246f728bf4a41efc4e8ec1ce6202f782ce19bffcfd359c80b9ed064323a7790dfe2","ssdeep":"12288:uAWm2lj0/yS1x2Ij9hM2KmsGLfxBWS/Mj:upmbxhj42KjgxBWS/Mj","tlshash":"c1f45a44b051bbbdaf7708d5507f802a712e2b58f82e84a0f07cac392668546b577fed","size":770352,"data":"","first_seen":"2026-02-11T04:54:04.646924Z","last_seen":"2026-02-11T04:54:04.646924Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bybitron.com/","fqdn":"bybitron.com","domain":"bybitron.com","tld":"com"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T04:53:37.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitron.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 10:09:24 GMT","end":"Sat, 02 May 2026 10:09:23 GMT"},"fingerprint":{"sha1":"5B:31:8C:BA:FD:ED:98:BB:C1:7B:F1:FA:0D:80:EB:39:19:15:70:27","sha256":"E7:38:65:B8:DD:AE:01:26:44:12:56:62:30:29:80:18:17:09:30:6F:97:89:69:11:F6:E6:80:CB:B1:18:56:41"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bybitron.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 3393\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 11 Feb 2026 04:53:38 GMT\r\netag: \"64126e6ddc95f35953ece28ea626f05b-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KH5GRE4WAN5RM1TEQ6ZW5J17\r\ncontent-length: 650\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":2027,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"320e705c5ef2cee9fb8b1f590ef50d78","sha1":"4f8d2c176eaa6627c9798164aa8d7c83dd86f502","sha256":"ec1df30df81bc12d16a49029f6f5284281929a8b20b5b4c09c0ac36d6bdf60f5","sha512":"7d3dadf8d8e7189be200213c0d760dd4f25d8c1d2b1acf4ee3e58c91720aa858d6eee926585acf7fab1d5ec4ddd697f91ce28f2edd25622e958651f4bc304308","ssdeep":"","tlshash":"734126ca5a618c2e2361c72114f1f0099a36d1876b819c597b5c707d0fc5feacaf3769","first_seen":"2026-02-11T04:54:04.643856Z","last_seen":"2026-02-11T04:54:04.643856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":112,"dns":65,"connect":22,"send":0,"wait":22,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybitron.com/assets/index-Bd2XQLtt.css","fqdn":"bybitron.com","domain":"bybitron.com","tld":"com"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bybitron.com/","date":"2026-02-11T04:53:38.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitron.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 10:09:24 GMT","end":"Sat, 02 May 2026 10:09:23 GMT"},"fingerprint":{"sha1":"5B:31:8C:BA:FD:ED:98:BB:C1:7B:F1:FA:0D:80:EB:39:19:15:70:27","sha256":"E7:38:65:B8:DD:AE:01:26:44:12:56:62:30:29:80:18:17:09:30:6F:97:89:69:11:F6:E6:80:CB:B1:18:56:41"}}},"request":{"raw":"GET /assets/index-Bd2XQLtt.css HTTP/1.1\r\nHost: bybitron.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybitron.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Wed, 11 Feb 2026 04:53:38 GMT\r\netag: \"42c80be8bc4042558e59d9b3639da0d4-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KH5GREAP8E3HFJ5N7FRXEZF2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75413,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ed2e0ddb27ec49a0045a8fea9a44ec46","sha1":"615c496ce34065dd6183d74b0bfebf676bc73c70","sha256":"c241864d5cc5ac944f442db913056d0109d572c270dc40c1b5cf41b9b1bebb90","sha512":"9870c271ded128abb6ed80218431aae5f0cc7e7d9916314418ad57806106e3359038fc189fa17e7ed07e154dcdf5eedb68bdeafb229b6da566ab73517ed2d719","ssdeep":"1536:VS5z9SAOXXhl1ghmIkJdvB/kQ69UZB9aGSCU378VQZkt5FNCouC:VS5z9SAOXXhl1ghmIkJddkbU9aGSCU3+","tlshash":"f2738519b919617e3c2790e8c3dcb9eca10af0c0de3b06b9be9a41216bd37f61977514","first_seen":"2026-02-11T04:54:04.64575Z","last_seen":"2026-02-11T04:54:04.64575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bybitron.com/assets/index-BXR78VTA.js","fqdn":"bybitron.com","domain":"bybitron.com","tld":"com"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bybitron.com/","date":"2026-02-11T04:53:38.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitron.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 10:09:24 GMT","end":"Sat, 02 May 2026 10:09:23 GMT"},"fingerprint":{"sha1":"5B:31:8C:BA:FD:ED:98:BB:C1:7B:F1:FA:0D:80:EB:39:19:15:70:27","sha256":"E7:38:65:B8:DD:AE:01:26:44:12:56:62:30:29:80:18:17:09:30:6F:97:89:69:11:F6:E6:80:CB:B1:18:56:41"}}},"request":{"raw":"GET /assets/index-BXR78VTA.js HTTP/1.1\r\nHost: bybitron.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybitron.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 11 Feb 2026 04:53:38 GMT\r\netag: \"07e626220b1e1082581350d2ce09860a-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KH5GREAN3784C0KGDRZ2E7XT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":770352,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"502f0c5e71470d05e4172d9423b03425","sha1":"26afc57ff25c19e9aa560ba5eb84f5ea75227bb1","sha256":"d9d70ef0cbc5f3a31ed1771b2b1e3c07c8861d023e2044e936a7cbbc43c79041","sha512":"c99283539ca72794fe92c2cd2d1f06a52169d9da1cf5041a63931d0875e10246f728bf4a41efc4e8ec1ce6202f782ce19bffcfd359c80b9ed064323a7790dfe2","ssdeep":"12288:uAWm2lj0/yS1x2Ij9hM2KmsGLfxBWS/Mj:upmbxhj42KjgxBWS/Mj","tlshash":"c1f45a44b051bbbdaf7708d5507f802a712e2b58f82e84a0f07cac392668546b577fed","first_seen":"2026-02-11T04:54:04.646924Z","last_seen":"2026-02-11T04:54:04.646924Z","times_seen":1,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"satellite-merger-exclusively-pdt.trycloudflare.com/api/db","fqdn":"satellite-merger-exclusively-pdt.trycloudflare.com","domain":"satellite-merger-exclusively-pdt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bybitron.com/","date":"2026-02-11T04:53:39.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 17:55:35 GMT","end":"Sat, 14 Mar 2026 18:55:18 GMT"},"fingerprint":{"sha1":"AB:80:59:D2:9D:91:32:24:C0:A5:A1:EF:E0:13:FF:31:45:5C:7A:E0","sha256":"0B:3F:BC:67:F6:F4:56:0C:76:4A:3D:3E:D0:FB:E9:70:CA:64:DD:E1:E0:F8:B0:AF:FB:2C:31:0A:1B:F4:CF:0D"}}},"request":{"raw":"OPTIONS /api/db HTTP/1.1\r\nHost: satellite-merger-exclusively-pdt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bybitron.com/\r\nOrigin: https://bybitron.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 11 Feb 2026 04:53:39 GMT\r\nserver: cloudflare\r\ncf-ray: 9cc13e6afbf4b1b8-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://bybitron.com\r\nvary: Origin, Access-Control-Request-Headers, Accept-Encoding\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-powered-by: Express\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":45,"dns":34,"connect":1,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"satellite-merger-exclusively-pdt.trycloudflare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybitron.com/favicon.ico","fqdn":"bybitron.com","domain":"bybitron.com","tld":"com"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bybitron.com/","date":"2026-02-11T04:53:39.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitron.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 10:09:24 GMT","end":"Sat, 02 May 2026 10:09:23 GMT"},"fingerprint":{"sha1":"5B:31:8C:BA:FD:ED:98:BB:C1:7B:F1:FA:0D:80:EB:39:19:15:70:27","sha256":"E7:38:65:B8:DD:AE:01:26:44:12:56:62:30:29:80:18:17:09:30:6F:97:89:69:11:F6:E6:80:CB:B1:18:56:41"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bybitron.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bybitron.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 11 Feb 2026 04:53:39 GMT\r\netag: \"64126e6ddc95f35953ece28ea626f05b-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KH5GRFR71R7KH6TMYSH767AZ\r\ncontent-length: 650\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":2027,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"320e705c5ef2cee9fb8b1f590ef50d78","sha1":"4f8d2c176eaa6627c9798164aa8d7c83dd86f502","sha256":"ec1df30df81bc12d16a49029f6f5284281929a8b20b5b4c09c0ac36d6bdf60f5","sha512":"7d3dadf8d8e7189be200213c0d760dd4f25d8c1d2b1acf4ee3e58c91720aa858d6eee926585acf7fab1d5ec4ddd697f91ce28f2edd25622e958651f4bc304308","ssdeep":"","tlshash":"734126ca5a618c2e2361c72114f1f0099a36d1876b819c597b5c707d0fc5feacaf3769","first_seen":"2026-02-11T04:54:04.643856Z","last_seen":"2026-02-11T04:54:04.643856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"satellite-merger-exclusively-pdt.trycloudflare.com/api/db","fqdn":"satellite-merger-exclusively-pdt.trycloudflare.com","domain":"satellite-merger-exclusively-pdt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bybitron.com/","date":"2026-02-11T04:53:40.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 17:55:35 GMT","end":"Sat, 14 Mar 2026 18:55:18 GMT"},"fingerprint":{"sha1":"AB:80:59:D2:9D:91:32:24:C0:A5:A1:EF:E0:13:FF:31:45:5C:7A:E0","sha256":"0B:3F:BC:67:F6:F4:56:0C:76:4A:3D:3E:D0:FB:E9:70:CA:64:DD:E1:E0:F8:B0:AF:FB:2C:31:0A:1B:F4:CF:0D"}}},"request":{"raw":"POST /api/db HTTP/1.1\r\nHost: satellite-merger-exclusively-pdt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bybitron.com/\r\nContent-Type: application/json\r\nContent-Length: 165\r\nOrigin: https://bybitron.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":165,"data":"{\"table\":\"app_settings\",\"action\":\"select\",\"filters\":[{\"op\":\"eq\",\"column\":\"key\",\"value\":\"maintenance_mode\"}],\"data\":null,\"count\":false,\"head\":false,\"returning\":false}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:53:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9cc13e6ce872b1b8-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://bybitron.com\r\netag: W/\"b4-Pu/TnvvNhmEQDldOpGtFBAU3DT0\"\r\nvary: Origin, Accept-Encoding\r\nx-powered-by: Express\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":180,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e8e2946219d974a16fc090b3c697c894","sha1":"3eefd39efbcd8661100e574ea46b450405370d3d","sha256":"2e83a0d9ce07a5e6194129f1bb5b5700f29878e2958a6856c3359317a8850977","sha512":"593882650740f39345636cdaea4ac52dc87409b944c365ffc77965d73b7c3eb11e7a30fb7ee687c1a4c11e9e73f306baa211d0a5c45d8a0682acc33655fd097d","ssdeep":"","tlshash":"42c02236b3a06cb068680d42e08bbb47e20c302e600b80217101e204d0a10622407c0f","first_seen":"2026-02-11T04:54:04.648723Z","last_seen":"2026-02-11T04:54:04.648723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"satellite-merger-exclusively-pdt.trycloudflare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}