{"report_id":"92a86229-9b9a-49ca-9b8e-a43a23508af3","version":0,"status":"done","tags":[],"date":"2026-07-20T11:22:44Z","url":{"schema":"http","addr":"bitbrarwser.com","fqdn":"bitbrarwser.com","domain":"bitbrarwser.com","tld":"com"},"ip":{"addr":"154.91.176.24","port":0,"asn":400619,"as":"AROSS-AS","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"https","addr":"bitbrarwser.com/","fqdn":"bitbrarwser.com","domain":"bitbrarwser.com","tld":"com"},"title":"澳门新普京娱乐城","dom":{"size":2362,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"677606d74dc22592f7bcbb466d2a509d","sha1":"e670684ccf8ed3ff5ef8520cf51b32009152de9d","sha256":"511aaa0f8853f2ade3a164f66b25d7ad37a40005fe261c8a02acf874f3a0eb0e","sha512":"2318f8a6dc6bdca0adf14666bab8bd8876cd27b9864c671c0493defdf839391d885985a9ba67194e56d644ceba23c493b6171066d3370ca8e7ff8abb10f1fe8f","ssdeep":"","tlshash":"6041dc8a9ad3144a7907d0642bf367482765c403e64ecda83e8e71e4cf8a2d595d638d","dom_hash":"domhash83439059cfb59a01d70502079dd49e9b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bitbrarwser.com","fqdn":"bitbrarwser.com","domain":"bitbrarwser.com","tld":"com"},"ip":{"addr":"154.91.176.24","port":0,"asn":400619,"as":"AROSS-AS","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-24T11:22:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"bitbrarwser.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"bitbrarwser.com","ip":{"addr":"154.91.176.24","port":443,"asn":400619,"as":"AROSS-AS","country":"Seychelles","country_code":"SC"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":3,"received_data":751296,"sent_data":1494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bitbrarwser.com/","fqdn":"bitbrarwser.com","domain":"bitbrarwser.com","tld":"com"},"ip":{"addr":"154.91.176.24","port":443,"asn":400619,"as":"AROSS-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T11:22:07.057Z","timestamp":1784546527057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bitbrarwser.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 11:48:33 GMT","end":"Wed, 09 Sep 2026 11:48:32 GMT"},"fingerprint":{"sha1":"8D:98:60:DB:80:CF:EC:F5:08:43:A3:AD:92:4C:33:A6:F3:85:D2:BC","sha256":"32:E4:2A:D3:94:BD:30:98:6D:9D:1D:F2:F5:29:C7:C9:FD:BC:FA:04:29:1C:16:F0:E9:56:3D:CE:A8:73:78:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitbrarwser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 20 Jul 2026 11:22:08 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 19 Jul 2026 09:38:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5c9b11-94c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2380,"size_decoded":1360,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"97b894bd5e9db07f9fb855a681caeafb","sha1":"4e40e9bcf2ef1032ab05cc8724225177e4af7e08","sha256":"24a43972c326f463d7c0fae7b890eb0ba68d9c116f5d3236876dff72fad2f7a6","sha512":"63240b60189bfafe82558f6ebaefe28144d1d28a8ac1e7385872dce2195acafcdd530e2c3ef4a019b1523be3e9d9bf344a64a17dcc4211b6d3e945bae8b5e574","ssdeep":"","tlshash":"0641dc8a9ad3144a7907d0a42bf367482765c403ea4bcda83e8e71e4cfca2d595d738d","first_seen":"2026-07-20T11:22:51.896854Z","last_seen":"2026-07-20T11:23:02.824985Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1120,"timings":{"blocked":-1,"dns":81,"connect":258,"send":0,"wait":257,"receive":0,"ssl":524},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"bitbrarwser.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitbrarwser.com/bg.png","fqdn":"bitbrarwser.com","domain":"bitbrarwser.com","tld":"com"},"ip":{"addr":"154.91.176.24","port":443,"asn":400619,"as":"AROSS-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitbrarwser.com/","date":"2026-07-20T11:22:08.394Z","timestamp":1784546528394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bitbrarwser.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 11:48:33 GMT","end":"Wed, 09 Sep 2026 11:48:32 GMT"},"fingerprint":{"sha1":"8D:98:60:DB:80:CF:EC:F5:08:43:A3:AD:92:4C:33:A6:F3:85:D2:BC","sha256":"32:E4:2A:D3:94:BD:30:98:6D:9D:1D:F2:F5:29:C7:C9:FD:BC:FA:04:29:1C:16:F0:E9:56:3D:CE:A8:73:78:5C"}}},"request":{"raw":"GET /bg.png HTTP/1.1\r\nHost: bitbrarwser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitbrarwser.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 20 Jul 2026 11:22:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Jun 2026 12:17:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2aa74e-b689f\"\r\nexpires: Wed, 19 Aug 2026 11:22:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":747679,"size_decoded":748108,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"831fbeb7829a96173d702f8b3b40cff8","sha1":"7cfbd96de66270a564139495ccc68eeda69e46df","sha256":"32901a7dcd216245b9fd09089f7627636380e77dc2f3f5879b51bee26ed61211","sha512":"c69e15fe359f5eb050cc4267cfbddf4132a115fd234f245b30dc2676523f364f4c861e15c272e3be4a25e1ad27ece40042d633c2c5710c3de66dc73707561164","ssdeep":"12288:nl3fsaX0ZVQxnr1zOB2uyXr5Q5zlm1NTs8mRXZtsnyXC9Jei5RA8cfzO2FxA1O:hs60ZC1qBfyXr5QH+sjRXZDC9rAJfzOS","tlshash":"4af4332565ee498716705661b91742f73cec9262288fe8fececa1d0d12b52a8f1923f1","first_seen":"2023-07-01T18:51:30Z","last_seen":"2026-07-20T11:23:02.826397Z","times_seen":111,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":786,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"bitbrarwser.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitbrarwser.com/favicon.ico","fqdn":"bitbrarwser.com","domain":"bitbrarwser.com","tld":"com"},"ip":{"addr":"154.91.176.24","port":443,"asn":400619,"as":"AROSS-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitbrarwser.com/","date":"2026-07-20T11:22:08.459Z","timestamp":1784546528459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bitbrarwser.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 11:48:33 GMT","end":"Wed, 09 Sep 2026 11:48:32 GMT"},"fingerprint":{"sha1":"8D:98:60:DB:80:CF:EC:F5:08:43:A3:AD:92:4C:33:A6:F3:85:D2:BC","sha256":"32:E4:2A:D3:94:BD:30:98:6D:9D:1D:F2:F5:29:C7:C9:FD:BC:FA:04:29:1C:16:F0:E9:56:3D:CE:A8:73:78:5C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bitbrarwser.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitbrarwser.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 20 Jul 2026 11:22:08 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":279,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-21T15:13:06.839016Z","times_seen":542517,"resource_available":true,"data":null}},"time_used":6043,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3065,"receive":2978,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"bitbrarwser.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}