{"report_id":"92ee2c06-7010-4741-8069-5c57b05f9c30","version":6,"status":"done","tags":[],"date":"2026-05-08T08:34:18Z","url":{"schema":"http","addr":"biva.cc","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"biva.cc/#/","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"title":"WebTrade 3.0","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"biva.cc","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-12T08:34:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"huobicfg.s3.amazonaws.com","ip":{"addr":"3.5.159.137","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":5277579,"first_seen":"2021-11-22T07:40:25Z","last_seen":"2026-05-01T02:43:18.965988Z","alert_count":0,"request_count":5,"received_data":7913,"sent_data":2241,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.222.174.117","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-05-07T09:43:31.001296Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"trade.huanqiubaowang.com","ip":{"addr":"104.21.27.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-18","domain_rank":0,"first_seen":"2024-11-19T13:56:31.05536Z","last_seen":"2026-03-31T09:16:04.294267Z","alert_count":0,"request_count":1,"received_data":159618,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"biva.cc","ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":51,"request_count":51,"received_data":3456494,"sent_data":22558,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"biva.cc/assets/tm-app.1bffbf5f.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"48f69a6538859df08bbaa775cc1559f0","sha1":"c16c1011ba60426b65c3a5878f6f7879339fab3e","sha256":"8d1cc622fa1ebf8437bcb82d8523f3f5dfa4bf084b165a55e22212906fcd2e22","sha512":"95c28eaa676e9bc7209f33065b11f3e620baae319f72a9641f9ab246a3e8d1083da285ff36571741eafec3766f8528118759469dc977f2e44fe4ce3381f7eac6","ssdeep":"","tlshash":"eb51817c31d8727d62730acc64a5470c198b73ad4931abf6a2af68303080d68666bb60","size":2538,"data":"","first_seen":"2026-05-08T08:34:26.125371Z","last_seen":"2026-05-08T08:36:46.778119Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-divider.b9a0c609.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dfabcf01931aaf39a3e7cdefbdd7e9e6","sha1":"8c95405fbd66eef88595c908f89d344a96153235","sha256":"f6bf3ffef8ccd82fbbc04b4f3e188f57479ca6afc24de583dd9ef33929f9e9da","sha512":"876578bb9554d067bd10dbfa25ae0c40a0421447280cda54f02fa4c8c745dfa1cecacfb1e1bf6190ec589f1d60b4daa82a658e138e04b70fc0e542783e337f67","ssdeep":"","tlshash":"d74130283425ae3be6ef494d30100849618befbdd63467e9f5f29d729043c88ba54b5c","size":2100,"data":"","first_seen":"2026-05-08T08:34:26.092968Z","last_seen":"2026-05-08T08:36:46.731434Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/pages-index-index.2956a913.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ace1a68341eb5baa490daf30ac19c24b","sha1":"42989c482284587bf12e05ddd6c03ae44ea7cce9","sha256":"8128549996211a66a64bf00ad7c2eb40ac8b9349a92eb549a199510bfb2555f7","sha512":"4dde4f57c163ec75bfb4243b9301fc2a2d2f832461b4b078684a1f7831d2a7683fd3f347f205e0f7d8859e77df21ba1bc6bdc6790db6d46e77261fc93ec26d0c","ssdeep":"3072:NkQQVfymh6rtn2kEhJr5lVd5Hni3Ml1H5xR096L31l9QTQEttFZZBkOAS/XVR98F:BEh3Uk1M3tLXVOiVwghaBLkMqs","tlshash":"2f344b95fb9a7472639b2440887b4105beaa642c60869d7cf6fcc4e32b70dc4706bf79","size":235253,"data":"","first_seen":"2026-05-08T08:34:26.067426Z","last_seen":"2026-05-08T08:36:46.740879Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/#/","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9b17842362925a3bb8687a7d1026e4b0","sha1":"994082c4dcff505add1f1275dcc83bcc7ed0293d","sha256":"41e51469c2b078616e44fcad038df50ed2ff35567b42fe4166a1412e5a2e13d2","sha512":"35a0a6f5d916cb0823a6533bc7139ff3704b2def345bb254bc6c46f339eaa5a67b779f006312164cb3ff45d4c6a72fc8ca3ff0fcce80d8bef57ef779fbccccae","ssdeep":"","tlshash":"cdc08cc4b0c22d002a0268102aaf36e89024402670481b428cd4d8483e230b08233e9c","size":143,"data":"","first_seen":"2023-06-19T06:03:31Z","last_seen":"2026-05-24T08:01:51.517232Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/#/","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2a43d6fbb84f17c5bd62b0263602d660","sha1":"e54bea1dcf1749db23b7027b52b8bb2d88058157","sha256":"05c39d78e51cb4d55d553ab452231eb358a2768eb568b831d6bacf7151165607","sha512":"dfbb937699890425288c1e551c10ef449066c01d326a5a5e60bea02a9a5cc12c03471878624b81a620e4827ade60d975f48d19fb5e75aae75ed1508d0e4c943c","ssdeep":"","tlshash":"b2c08cc4a0c27e002602641110af38e49024402674881b128c94d8982e230b09233e9c","size":137,"data":"","first_seen":"2023-06-09T19:41:22Z","last_seen":"2026-06-11T05:15:44.225392Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/#/","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"392100965889365d29322e05b8fa705d","sha1":"f0cb678aa2fb11c7074c939bdb6b9ccbc9204271","sha256":"1a1bd234a2c332070cd57ce1ee91f9e5818c730b054dd8fda236084f5403e49b","sha512":"9ae7110ea70b0881f09c673e6bb6ce098175cfce5a49f20265ebaadef6ef3681dd5ee5e986ce5e220d583437b8e787765360d8d79b9ebbc97cc5f98d9ba27a72","ssdeep":"","tlshash":"b4c08cc4a0c62d001646641010af24e4a0244026704c1b03ac94d8882e220b08233e98","size":139,"data":"","first_seen":"2023-05-04T20:29:58Z","last_seen":"2026-05-17T04:40:35.503612Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/#/","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c12ab65ac06833b9985b62159e779cd5","sha1":"5cd9b303250ed9a625f78935a4c37b6b9430f4ae","sha256":"56a5ebc31ec83a57995e1819b53c9a808d37c251baa4ed90de74e5f34eb78ced","sha512":"4717f74a2c9ca7988c6dd21f9037e86af556e1f1fe6da921afd505c7eb54e1c62bd8445dce90c792960c228a74fc97429a35e4fba63f48836f9b86f598017741","ssdeep":"","tlshash":"6bc08cc4e0e22e002602642010af24e4a028402670881b028c95e8482e224b08233eac","size":145,"data":"","first_seen":"2023-08-29T11:19:57Z","last_seen":"2026-05-17T04:40:35.519463Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/index.27fd57ed.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"be5df5b141dfe3d07a182527ca170e06","sha1":"bfd8a4275734986336eaf357678f8a54294b7030","sha256":"2a403d7546f2ad466de9a368027329a605b64b45e69573f092121de1aa5f2776","sha512":"2dd7278e2e5d96afb9bd5dc191cbaf24de2e8e295e3e7c4a121874215811609a267fdaa89b3836a116cfb975bd24f6f024eeea9f70045ee13b65039a30501f7e","ssdeep":"","tlshash":"3821a7c5b0c7a174d31bc14c00d61540b238ee6cb56efa84b479605177e021e909afbe","size":1204,"data":"","first_seen":"2026-05-08T08:34:26.1326Z","last_seen":"2026-05-08T08:36:46.733218Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/use-lazy-render.a56f4403.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c38b9abea0ab8c39192edea41aef9a8a","sha1":"a3f7688c1e1aed6322dd19495464a9c777ae64f8","sha256":"2391e9582c0d4bda43909ee6e83749cb85f5e9067fa3b5cfefd17b5122b6ee50","sha512":"617fd0e8407c9a4ff926cbd6b5df1b5f8cadb9f00aeb045fa782feaf0e9cf7e42017602cf65729fbf0f2bfe3155ff3d5a2d56dcd55c8fd04f4e6fc64cde542ad","ssdeep":"","tlshash":"d011484df456e5b022478cccd11b1125921e27e92511f3f0f4df291033706afa41af17","size":968,"data":"","first_seen":"2026-05-08T08:34:26.094412Z","last_seen":"2026-05-08T08:36:46.77926Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/ConfigProvider.085c748f.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d80e82cc4be2c5884d7cde646e4d2517","sha1":"b14486541205bae315e836527e54209a3bedaffc","sha256":"179f7cc40c4e86060d0861e6b97e7579be152a7cdeaa2f867902ab2d4b50d7f3","sha512":"ecb43d6c155549f8b59d29d20c1f825ed0eba695310e6d56e8aa7cfec6a4340881f875954615b807402cc3ee8dc7765351da20023024c725bd7930bd439d6631","ssdeep":"","tlshash":"571154bae2127830413615ee7452ade1bb097660a939b4f4e04eac8d17336eb8157f4e","size":1013,"data":"","first_seen":"2026-05-08T08:34:26.103985Z","last_seen":"2026-05-08T08:36:46.742384Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1308c1dec2dd281f07bacd9c053c55b2","sha1":"21dd95769221f70b4a3829bc5796350811b24a76","sha256":"d7cb5dda03cfc23ac17cb65209d99dfa76bf4eb5c55ff8cc611ecad7e94d7c68","sha512":"fb86855a70ef12b1896e3efc6c9173992e916f2bece68279b142bf15f88aa303c819b2929944d460c9812387a3172678c4b54dd853d8c56a7b64ea6b90bf6659","ssdeep":"","tlshash":"6ae061c250a7295c0520816a355ec5131f6505739e818d513c8c6765cff9e4bc06d858","size":397,"data":"","first_seen":"2025-08-09T19:30:18.287694Z","last_seen":"2026-05-17T04:40:35.514412Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/index.a82b2c96.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fd03f7038257c801ab77f70334deeda","sha1":"fecd8790854ef398dd300d2ec76c0de039f3dbeb","sha256":"211a89fe8d155e0c69646ed226f582ba22c49c5decb35f288a3594dccef5a4e7","sha512":"88b9ac31661b461730f74b9e14be2bc757b8c8eb0eacddd9fec565c8fd49d1af52007abcebab3eb1a07fd28f536a4044d306a4de00f2c02f3bc1dfad88884527","ssdeep":"49152:vmDY3ZnPMj/oloIfRbyACJeR/djLKTRj6JSD0iLBVCutH40tr+4Axw:vj7w","tlshash":"1375f6d9b7fa244e8794f120e8753e8e4d409dc0c819c3ba6fbd49bbd3d22409957b68","size":1615541,"data":"","first_seen":"2026-05-08T08:34:26.146515Z","last_seen":"2026-05-08T08:36:46.789113Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-drawer.6fb5decd.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"341a0aee8cc861287087422d93154790","sha1":"a7bd28583cc4284c973c01de8c61ec3f6d5af74e","sha256":"59bb7a530b6eac29a4661e84ff7cdb5ece80091f6d5eaf858493cdcb592cd945","sha512":"2df390baf7d071ecc87bc2c799b3f81a3cffcc2bedbbf602ac7c0214597b3d7338397562da7ca44a4b3533c65308f336dde5127e779cf7b4c5c4b29184771045","ssdeep":"96:HF+n9w3F5RUtxr6SDZmwfGSewAD5gzWH6fQsIDuLPzmVQf1y1XgSofL+Z:M9em7Hew/P5f1y9uT+Z","tlshash":"e1c1c6a8746e2373a6b718a5c072880d123d1f5d9568b6c0f2d2183e36f6d089dd8bbc","size":5676,"data":"","first_seen":"2026-05-08T08:34:26.137032Z","last_seen":"2026-05-08T08:36:46.751225Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-button.62620998.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c387d39d94daa10c3b4435e5019384df","sha1":"232ef70e1843884f7d9ff427df5d4e3bdd530c5b","sha256":"34ee8cefca906883baa13d6c5aa76eff9ada69c6a0da4902f86b7fc1287225c4","sha512":"8f261400dc3a6c5ff4fe303d1f81d3c217e40f88b5c3e5939adc042d77f495d288cf46d5561794adc69a9a520a4ec91e6b5baddc185c0d07fa5e108bf9d2fcd7","ssdeep":"96:E3UD//UusxzD9831y6hXFeA615+Vhc8hYFs2GXUx8TvZ8NAwNTgukVZ1ra:E274IpFC1ECpYUSTvUAwNTeVZ1ra","tlshash":"cea1e8143179cd7b6ecbefd83064290661299baee53475d1fea8607613cb8e590ccb28","size":4768,"data":"","first_seen":"2026-05-08T08:34:26.084556Z","last_seen":"2026-05-08T08:36:46.720151Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/index.9fe959f4.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6ad166edf943148ae80ca1398f5eaf1d","sha1":"d8d5221e1a02e48569d3606679ff1c6c1d9f03c0","sha256":"358d05e77a2c33ba93a6a8673d6485129f253eafa688bb26837cad8af3c46471","sha512":"1070a0652314360c23196873681047dd8fb61c44da8e9f3b098152279c61abf59057d98ba03f8a2f783215767ebcf9565d5cc7c3c65fd7e3f01fefac6f36ab5b","ssdeep":"96:+PCVWWHhfNiJGCzlNbJ7UHAEU+LgP6RBC1YoAZQOGkDUBeAlLOrBR2/vB:Tnhf0JGCBN95+LgCRI1YW8oBRIR2HB","tlshash":"0a91d586f80a7a3101b784a1c43c0c50d7391795b52f8ae1f4bfad2a32d86c6225ff69","size":4350,"data":"","first_seen":"2026-05-08T08:34:26.130862Z","last_seen":"2026-05-08T08:36:46.754419Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/index.2661abdc.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e2a14dd6a80f4148dd93b35b2f9247d6","sha1":"5260018a5f3293833bba0728c6a0b032c5490521","sha256":"5a89e272ecd649eeced4ce99581511cf900efdf644c8b24503d54a7b833ae9b4","sha512":"fa293aba4d40cdfeaa25d59c2c117201ffc77c89d9a871907e7bb90273f3a8c90afac26ab31203a17680e0e24794035604b88203d5c1e572925cbff8577e2181","ssdeep":"96:LxeYIPDK0t/m4Ch+DbtGaCLplGxbJKahiEzqoqIwyc:LxeNPu0t/m4CsDbgaCLplG2ah8yc","tlshash":"d291858c75384a3cba1f55489394700032c55cffa6115698f2ff0c79bb76fd499967a0","size":4248,"data":"","first_seen":"2026-05-08T08:34:26.076092Z","last_seen":"2026-05-08T08:36:46.729116Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-tag.3076d27f.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"97b1d5d224a7016e3ea9678b9eaa39cd","sha1":"530b450d86e5c7111b6a83c7eb537b1ca4cff0d9","sha256":"a599d682fd6c53991f6e53de83c86a00f85c7bee3db873c8953807719cb6d9ed","sha512":"9728304473a232b82972673aa016a12652866714fa87e4becbb65466a6a4c89b733f3905ac525b1e428628a2a0783eb76e86d24af4188f24170c58a2e69bf8c0","ssdeep":"","tlshash":"a88165b43d1848f686ff4acca172ae0d4929256eec357ff2f4a121245cf1925a04e73c","size":4008,"data":"","first_seen":"2026-05-08T08:34:26.073258Z","last_seen":"2026-05-08T08:36:46.756001Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/with-install.d4a5ec5c.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"37960ca6bb9500aac9e3cad6fa155303","sha1":"fd7ae0178ad78dc27da04d342efccd49fb13d9e3","sha256":"37b5f0e7e540b465c4bcfc23b919ecea05a9e61f787a2e845c638ca8959fee81","sha512":"1fc87864e9c5982c3b80bc214a04b680360c11e8900b4bcc74cab909a8ae4f07673acd455b03c74ccc184afe6c977ec4cdc81db47e85e9ad626edb44f1f23726","ssdeep":"192:PG0ODo7R2UDDGgIm/2YyVUofuvpdxxw6/9zunE5eXCAMw:BCo7R2UfGgn2YuqvpdrweF75eFMw","tlshash":"d9f1c4dc3191743547b784d104bfa64af1b42e64318ed480e11eeca83e3246e9ae7ead","size":8070,"data":"","first_seen":"2026-05-08T08:34:26.078737Z","last_seen":"2026-05-08T08:36:46.767164Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/use-touch.feb93f71.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1fb6da613b479707fae9cfae9b949783","sha1":"4439a37132764519a4f2f7a496c1f5fe2f303de9","sha256":"d2ca92a8176702b56ec44fbbd96521a6e2a154bac8bb6dc1cf83badba79dbd93","sha512":"fa9e4a99433cdf5f1063059967c41c4e5de31730d9e733dd259b8021d6ef8755ba3fa05c1e369f3c7ff3dbb3eae5be6e01c4a3ba70a3df584750fc3a57956b34","ssdeep":"","tlshash":"cc016d5a7082f8328f300ed4d2129099d33513a811a7f9f4746d065b3b73c7967af906","size":828,"data":"","first_seen":"2026-05-08T08:34:26.070523Z","last_seen":"2026-05-08T08:36:46.747278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/#/","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a80e94766b125a0d4d6063b437dfb5e8","sha1":"8b7536c01174aef421261d2a20ad2e295ccc8d43","sha256":"4c87f2c288a8488747db0832065507d138d7cae4fd0eb9ce4f47e188461cca78","sha512":"bce514270b8b009af228e25cb2a0074d44ee081f1cec73c1c303fb3750800c2b49798a18c5310e178ed5cdb06861af439ca7537496554fd7f1ba66ef2c2596e3","ssdeep":"","tlshash":"29c08cc4a0c22e106a02655118bf38f4d034442675485b528dd8d8592e230f08233edc","size":149,"data":"","first_seen":"2024-08-20T14:59:52.400895Z","last_seen":"2026-05-17T04:40:35.504781Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/#/","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"32c60813b9988ce47d5b692d6f12efdd","sha1":"6063fd5ab85159f95e5b76b6ec1905f0747383fb","sha256":"bf5fdfacf77427f051f09749afae56679af4219f0ceae90746d5c17583745431","sha512":"3177447d38ae1c0b9fc936c4beb67dcee474011856a89b0c39d167dd97d5764c36c36d6232d5766db702fe79a9dd53840347e1034c28092fdadecea8e64335c3","ssdeep":"","tlshash":"5fc08cc4a0d62d006a22641020af25e490244026b0481b128da8d84a2e624b48233ee8","size":143,"data":"","first_seen":"2025-11-24T11:54:58.014486Z","last_seen":"2026-05-08T08:36:46.787344Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/#/","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-11T22:52:33.948223Z","times_seen":805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/#/","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a4d63942d23f97d6dea4e2b178c00e55","sha1":"a3e0ce6720191ebc8577f661471b36ce5360d7b5","sha256":"d7c590a65bc23b551e0a7d93fccb4ef6f08716d5726f086ec7e129559976a868","sha512":"fba1aa98ddd0cda92f4c30d605ba5167e7700008273ddbcbd0bcf6c8903762e6c2f0e8dc2aeb364e35009a855445204a6551ad8dc8758edfddcbcc8036b1fee3","ssdeep":"","tlshash":"5cc08cc8a0c26e002652a45014af24e4a034442b70485b02cc94e88a2e220b08233e9c","size":142,"data":"","first_seen":"2024-08-21T09:32:30.51801Z","last_seen":"2026-05-18T21:31:53.570933Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/on-popup-reopen.cfb4df12.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"749ea06b66941cf71c6112232609964a","sha1":"e042df2cfed54f1ed9b87ee81730a3aa36bf72fa","sha256":"7c25abb027836d6eefb0ad6183c0d25c99bd788f7ea108daa1cda0f241223521","sha512":"904267f21965ac2f765353490a5c7ae1aede6b7f2e535594899bda0f1e42c9e684d7d0d0ea74981798e4a3a0dc1174afaa460920d03f7b984c15aa01b3868dd1","ssdeep":"","tlshash":"34e0264f440b18701ea7108bd00b2d16839392fb77c283e0812eab701a714ee429ae02","size":338,"data":"","first_seen":"2026-05-08T08:34:26.101863Z","last_seen":"2026-05-08T08:36:46.773433Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-image.9f477769.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"862f2d12648bd9ebcb932af2aa186ffb","sha1":"ebffdef73ee421ddae27b2093d7ef2a54497fb42","sha256":"15a64c743f40750d8506df278cc291fe1803112e10cee62b458bad6a1bac3622","sha512":"ff91d3d008102e91a6938543bd7f4ae41e2b56b3efaa9cb8089624d049f035559b0cb6e2559c535739929a26fd4813afaee21b90f01695342691f556308118bc","ssdeep":"96:bOpN2VYyRTz7wmZIiMQAO32iFBZY8wfnNBA0AXgKy19:bOI7wmZIi/FB/6nNBA0Aw9","tlshash":"9691a53831bcd93f65fb55dc6061a94958499f2dab30bbd0fae2103690efc805129f2c","size":4214,"data":"","first_seen":"2026-05-08T08:34:26.087901Z","last_seen":"2026-05-08T08:36:46.752873Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/#/","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0356f7473ac3215c8bbd6cf5b93b8048","sha1":"1f4ea3ba22509d8b69cf0adc8eb6bf244c870c7d","sha256":"1b02bb051a0b8b39b12fe4574c85f962f18fcb29baaf2384e5c3640191fff26b","sha512":"fdbcf837aade173a247be7259fbbef35915c11904166c2e3ae701d9d9341cc5492bcb2c4967d43cc7dc046e0c306d6e0cae2b971ec12934922b607b67b067571","ssdeep":"","tlshash":"46c08cc8a0c36e001a42755419bf24e4e024442b70489b038ce4d8482e230b09237ea8","size":147,"data":"","first_seen":"2023-12-25T20:28:35Z","last_seen":"2026-05-17T04:40:35.502622Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"biva.cc/assets/index.38a96ddb.css","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/index.38a96ddb.css HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-1bd3\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NubPN%2FVKvLV2OUOg69U15okwUP%2Bdw7%2FIi7PTzHi78tTngal%2BBAKkBcqCjHGKctBKnwicBtax96e%2FNz2bS6c%2FQc6sp%2F%2B7xwTqhFhtIsyq2fhBQ%2BPDIqAqayrK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f0e61723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7123,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7122)","md5":"2940324f1c75175d532d22f396ee9f15","sha1":"95774c38fec37ccca36660f2d146e500628b8d61","sha256":"0e8cd4731d3207515d6053d99339630ec87c751eb9cfec36be96baf6629eda25","sha512":"89e3645da703969cef47aa7df5fca0ccb0a0849c30e51b99a26853f6908df296f91a73ce197f32583c10db223641d0b5e1a6e31cbbd040670193597fff97a428","ssdeep":"96:cj7v7z9NLdefs9VBwlIItUxDBHA1PRP+bAu18u1e:oL7xNpYI1A1PRP+bAu18u1e","tlshash":"11e1eb6f630481a9a3afd3571598faac12787723b2234d1ca3632cf5de060d96a32719","first_seen":"2026-05-08T08:34:26.064066Z","last_seen":"2026-05-08T08:36:46.745077Z","times_seen":2,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/pages-index-index.2956a913.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/pages-index-index.2956a913.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-396f5\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3UclonTkpIChyTdbMVyXQUxvXTEXDs0PGgX9uZaOIZy9HnrtUPCac0FwQfeVEF4fZim%2BxboVDRW061wvwPTdwtnHGmz7BewdZD2WMXMGy0a07pLBbpDyqrN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f3e66723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":235253,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (44583)","md5":"ace1a68341eb5baa490daf30ac19c24b","sha1":"42989c482284587bf12e05ddd6c03ae44ea7cce9","sha256":"8128549996211a66a64bf00ad7c2eb40ac8b9349a92eb549a199510bfb2555f7","sha512":"4dde4f57c163ec75bfb4243b9301fc2a2d2f832461b4b078684a1f7831d2a7683fd3f347f205e0f7d8859e77df21ba1bc6bdc6790db6d46e77261fc93ec26d0c","ssdeep":"3072:NkQQVfymh6rtn2kEhJr5lVd5Hni3Ml1H5xR096L31l9QTQEttFZZBkOAS/XVR98F:BEh3Uk1M3tLXVOiVwghaBLkMqs","tlshash":"2f344b95fb9a7472639b2440887b4105beaa642c60869d7cf6fcc4e32b70dc4706bf79","first_seen":"2026-05-08T08:34:26.067426Z","last_seen":"2026-05-08T08:36:46.740879Z","times_seen":2,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/use-touch.feb93f71.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/use-touch.feb93f71.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de29df-33c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kWSTh4hvJ3bateBzOXXYYg%2B8%2B6aomZy0DnXXn6YBX3DPhwraQZYMyr9tCTtsuI8nPddzzYIp7%2B5pXLPIlHPNtbW9No9fJG12hhQ7nn2Ia7UXdVQ%2FKpTbEKex\"}]}\r\ncf-ray: 9f871f5f3e6f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (827)","md5":"1fb6da613b479707fae9cfae9b949783","sha1":"4439a37132764519a4f2f7a496c1f5fe2f303de9","sha256":"d2ca92a8176702b56ec44fbbd96521a6e2a154bac8bb6dc1cf83badba79dbd93","sha512":"fa9e4a99433cdf5f1063059967c41c4e5de31730d9e733dd259b8021d6ef8755ba3fa05c1e369f3c7ff3dbb3eae5be6e01c4a3ba70a3df584750fc3a57956b34","ssdeep":"","tlshash":"cc016d5a7082f8328f300ed4d2129099d33513a811a7f9f4746d065b3b73c7967af906","first_seen":"2026-05-08T08:34:26.070523Z","last_seen":"2026-05-08T08:36:46.747278Z","times_seen":2,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-tag.3076d27f.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-tag.3076d27f.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-fa8\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T9pvD7z4RiMvl0mBaGnjZTOQ%2F12bLzKz2U20p%2B8MJG3DApZTATNqfGHgV%2BW4K6NcvRdy08gRzzC3Z2uVE7HBrhUtKTgvXPh4oXpGufY3fQfOwmA738TDd3Qi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f3e75723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4008,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4007)","md5":"97b1d5d224a7016e3ea9678b9eaa39cd","sha1":"530b450d86e5c7111b6a83c7eb537b1ca4cff0d9","sha256":"a599d682fd6c53991f6e53de83c86a00f85c7bee3db873c8953807719cb6d9ed","sha512":"9728304473a232b82972673aa016a12652866714fa87e4becbb65466a6a4c89b733f3905ac525b1e428628a2a0783eb76e86d24af4188f24170c58a2e69bf8c0","ssdeep":"","tlshash":"a88165b43d1848f686ff4acca172ae0d4929256eec357ff2f4a121245cf1925a04e73c","first_seen":"2026-05-08T08:34:26.073258Z","last_seen":"2026-05-08T08:36:46.756001Z","times_seen":2,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/index.2661abdc.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/index.2661abdc.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-1098\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAYFUlNN1KhOv9enyCLWUtrw7lQOAIukqOjSygH8H5lGcrh0Xk6YAVZ9PyeHq%2BLDeHwgQNW%2BmEdDzcpv3ChkCri5L%2BzMefLrtjdxsxylKlo4b0cly9xuhUS9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f617eb8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4248,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3029)","md5":"e2a14dd6a80f4148dd93b35b2f9247d6","sha1":"5260018a5f3293833bba0728c6a0b032c5490521","sha256":"5a89e272ecd649eeced4ce99581511cf900efdf644c8b24503d54a7b833ae9b4","sha512":"fa293aba4d40cdfeaa25d59c2c117201ffc77c89d9a871907e7bb90273f3a8c90afac26ab31203a17680e0e24794035604b88203d5c1e572925cbff8577e2181","ssdeep":"96:LxeYIPDK0t/m4Ch+DbtGaCLplGxbJKahiEzqoqIwyc:LxeNPu0t/m4CsDbgaCLplG2ah8yc","tlshash":"d291858c75384a3cba1f55489394700032c55cffa6115698f2ff0c79bb76fd499967a0","first_seen":"2026-05-08T08:34:26.076092Z","last_seen":"2026-05-08T08:36:46.729116Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/with-install.d4a5ec5c.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/with-install.d4a5ec5c.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-1f86\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70z7GqGn%2B2FbFVSy8YICv6VnslcQIUeqRBtKWU5FtVvuGMk5N39yA3TzQW7ZP9Mcx00hoVFnYB4GWTEYSTD5CIsrpkdeBcQiMw8TvHR%2Bu2mythKkGcdA8yhw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f61aec1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8070,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8069)","md5":"37960ca6bb9500aac9e3cad6fa155303","sha1":"fd7ae0178ad78dc27da04d342efccd49fb13d9e3","sha256":"37b5f0e7e540b465c4bcfc23b919ecea05a9e61f787a2e845c638ca8959fee81","sha512":"1fc87864e9c5982c3b80bc214a04b680360c11e8900b4bcc74cab909a8ae4f07673acd455b03c74ccc184afe6c977ec4cdc81db47e85e9ad626edb44f1f23726","ssdeep":"192:PG0ODo7R2UDDGgIm/2YyVUofuvpdxxw6/9zunE5eXCAMw:BCo7R2UfGgn2YuqvpdrweF75eFMw","tlshash":"d9f1c4dc3191743547b784d104bfa64af1b42e64318ed480e11eeca83e3246e9ae7ead","first_seen":"2026-05-08T08:34:26.078737Z","last_seen":"2026-05-08T08:36:46.767164Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/menu_icon_account.e9b0e83b.svg","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/menu_icon_account.e9b0e83b.svg HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-61b\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xswNc4XFhNRhNBVb9uGfZtirwidvBKOilIjof%2FVcKCbHIrAiI03L9HiFb%2Fsq7zdaY8NVSVhwmmSXX1bHsbP6I91Piif7dransArMMYDLDFzqE7JiHXj%2BMxta\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f665fd3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1563,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"375eb58aec5d06875add1f3c34a7d278","sha1":"c8e3eee7f3e636b9619f025bc70d662b765e44aa","sha256":"e9b0e83bef3709ff4e138a3e24f13bb5f16f49b1b57de3e6e30d7e46484c21e7","sha512":"f46d84e3b5a6e1c819f4e323e05c95bdbdd033086fa998ca1dc742a3ea21cebd5549c7a8be60ddba2f16a4642ae3df7c5bc25317a554ca076e96855862998b1e","ssdeep":"","tlshash":"043112d8197acc74b506c926cbf8f421596131c236d408acf6dc0c456fa54ef4667b5e","first_seen":"2023-05-10T20:40:30Z","last_seen":"2026-05-17T04:40:35.410125Z","times_seen":86,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/index.a82b2c96.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:56.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/index.a82b2c96.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-18a6b5\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=55zKLUsbCSyW5gSBwn6UvnJoxOhtpKCEblQkOlT8Sx8ZC3qc34%2Bx6Xqc8SViHNQG3MenYDJZ0TVSxUNmIP%2FjoYWeD6%2BJjp0Z47L%2BXtffNKrpSL2eH%2BwV9Ilz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5a8d63723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1615541,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60832)","md5":"df3ae40dcdff45ee20c842409b584eb3","sha1":"4c7a81598d063702bca14f97d2f98f65904c87b0","sha256":"1bb773d8b0b4732ee2fc57a9f082413ed78819298f7f414d306866c3aff3a23c","sha512":"b4847a1f3a9c108fadb56e8983a44ba7659656b31d20b5f401320510a4dd7e8d7714596a14c377c133e9f1b81719afc369d1250624e7222055163f5479c3f9cd","ssdeep":"24576:vmDY3ZnPMj/oloIfRbyACJeR/djLKTRj6tIt8SDXhk0wPMWDLPLdsX/:vmDY3ZnPMj/oloIfRbyACJeR/djLKTRj","tlshash":"e52570d9bbfa644e8794f201e8762e8e1c409dc1cc15c3366f7c4abbc3d26409e5ab59","first_seen":"2026-05-08T08:34:26.082754Z","last_seen":"2026-05-08T08:36:46.772161Z","times_seen":2,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-button.62620998.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-button.62620998.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-12a0\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dmtsdLLU%2FriQkBsK%2BnwlWDe94e00FNMuABzm8r78xZksgyQ2eBnFAv841f%2BcE209BBBK1QShNZ43VXG7SRyaqGFvzgd1%2FS1ZH4osowBJnU1j1KkXBfb33zWp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f3e69723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4768,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4767)","md5":"c387d39d94daa10c3b4435e5019384df","sha1":"232ef70e1843884f7d9ff427df5d4e3bdd530c5b","sha256":"34ee8cefca906883baa13d6c5aa76eff9ada69c6a0da4902f86b7fc1287225c4","sha512":"8f261400dc3a6c5ff4fe303d1f81d3c217e40f88b5c3e5939adc042d77f495d288cf46d5561794adc69a9a520a4ec91e6b5baddc185c0d07fa5e108bf9d2fcd7","ssdeep":"96:E3UD//UusxzD9831y6hXFeA615+Vhc8hYFs2GXUx8TvZ8NAwNTgukVZ1ra:E274IpFC1ECpYUSTvUAwNTeVZ1ra","tlshash":"cea1e8143179cd7b6ecbefd83064290661299baee53475d1fea8607613cb8e590ccb28","first_seen":"2026-05-08T08:34:26.084556Z","last_seen":"2026-05-08T08:36:46.720151Z","times_seen":2,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tibi.ae56cb3e.svg","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tibi.ae56cb3e.svg HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69de29df-334\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c8xoHVZxV4%2FKcoehS83o2w%2FEBSOuWc1%2FGtYuzGzFKOMH%2FWb5C7tokrNudReFxFZmaGi%2BvwdbI4lTNIS%2Fz8IKran6l05Sz7Y2CZpxLcdHWJPCo0WtI5bbL3V0\"}]}\r\ncf-ray: 9f871f665fd4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":820,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa39d0c9a6350c0bab9253b73f3da5c0","sha1":"391fe2841df6eae228c2d8470497eb80e5f4660a","sha256":"ae56cb3e05100507a46d47c7d614aa2328aef1bedc42a8d989b211d271b65618","sha512":"d44f580092954742cba28322be3bc82e0371281da4163db23ef4e41b06f2fb262a26f237342dce59874ad8dc569c1f7e3cd21d81371345b503763be65501f8cf","ssdeep":"","tlshash":"a901c22bf74631ccc52f53dd5516514cb36c10bebc524969cd8da8619e439a0de42aca","first_seen":"2024-11-20T02:08:28.543854Z","last_seen":"2026-05-17T04:40:35.458384Z","times_seen":32,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-image.9f477769.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-image.9f477769.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-1076\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ir1UXYYjeTWjBGjQBOPPrPgW7VhqWVOBJnjMPAJ%2BN9yz08ZwG6F602uL24McekS%2FXKZhZ%2BKzNPoXwWHz27aXzyFvJw2P4eZG7l1qKWiAq7BLcUBsQiyz0Sea\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f619ebd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4214,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4213)","md5":"862f2d12648bd9ebcb932af2aa186ffb","sha1":"ebffdef73ee421ddae27b2093d7ef2a54497fb42","sha256":"15a64c743f40750d8506df278cc291fe1803112e10cee62b458bad6a1bac3622","sha512":"ff91d3d008102e91a6938543bd7f4ae41e2b56b3efaa9cb8089624d049f035559b0cb6e2559c535739929a26fd4813afaee21b90f01695342691f556308118bc","ssdeep":"96:bOpN2VYyRTz7wmZIiMQAO32iFBZY8wfnNBA0AXgKy19:bOI7wmZIi/FB/6nNBA0Aw9","tlshash":"9691a53831bcd93f65fb55dc6061a94958499f2dab30bbd0fae2103690efc805129f2c","first_seen":"2026-05-08T08:34:26.087901Z","last_seen":"2026-05-08T08:36:46.752873Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/v1/api/pay/getCurrencyRate","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /v1/api/pay/getCurrencyRate HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en\r\nauthorize: null\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=07ZDxRThEyBoQ0WQuXJEP602oWHMbjUcoOA9yQsNbtWnDSP33Bbg72wTe3paLRdQ2ng%2FXXk9qNhFHshw7J%2BiNnpXae0mWppIViLVDs0rlvH6NZqBvquX2nPW\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f871f5f4e78723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"521649b6ae8af5619a21833d7518a347","sha1":"5c11d28975fb65b0158833056927f8198c8c24c6","sha256":"a39e10e061a934ac66ea8941ecc0ed6eb720025b4abb884aad08b4a84b10d9e5","sha512":"34e7f58295c281e3b4261fa055c0c5243ee45f1fdec0f969efe3dec0e4d93c9a87d17c0ce6665f9295a58631a97cb463639a016db1f0e30630fded26ccb842f9","ssdeep":"","tlshash":"6ab01255fd1894f3e811d442412fffc0ae68306283c0473094cc471d9944171a042826","first_seen":"2026-05-08T08:34:26.089544Z","last_seen":"2026-05-08T08:34:26.089544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/uni.f3037b54.css","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:56.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/uni.f3037b54.css HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-5330\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2F2CYXbSxjqTlCQH3U4Rzlnx4GA832Geamf%2FcmoGaNseWAuP374YoO8M7UNO%2FHS854gFOXk7LjdQ0e9wP3ZJYUQgFelhlIarhVhMiUO0iVPfAiA%2BiGbEzEdX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5a8d62723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21295)","md5":"42a2a9410f1df862a3f7db5cb17b0a9f","sha1":"b6083ccd01bf5bbf063372e9888f38122b8bd5ea","sha256":"f3037b547b7b8832a1129586f8d86ab925e38974716515855c996543b090080e","sha512":"b3d09236f71a4fa6a7933baec190b24f906ea956c8e879d7015f61900ffc8df3b01f0f04f576d0b41eafcc438f06415bc282c6c11d47428fe3c3e848ad5f0844","ssdeep":"384:yRO8QQXpmL+LEH1Zmv1GVQ70PfDcwp57fh+:PQaH1ZmHYnDcwpe","tlshash":"3ea2b631aa012a3df867ca2969d1db8f2231c4b3d9931f1deb7575248b9e4c9193e3c4","first_seen":"2025-08-09T19:30:18.264018Z","last_seen":"2026-05-17T04:40:35.421007Z","times_seen":26,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-image.9f477769.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-image.9f477769.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-1076\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kw6rGtDqE0CPD6Em%2FQOjFphb%2F8m%2BbE8itt%2F8z77lsv%2FmJlfx2tKum10AHzyn9J%2FbrpNqRK6XOnochx9%2BUeaxCbilAqYC1WW880ZohOOMAwEVJRppLQQuJJ7a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f3e6b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4214,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4213)","md5":"862f2d12648bd9ebcb932af2aa186ffb","sha1":"ebffdef73ee421ddae27b2093d7ef2a54497fb42","sha256":"15a64c743f40750d8506df278cc291fe1803112e10cee62b458bad6a1bac3622","sha512":"ff91d3d008102e91a6938543bd7f4ae41e2b56b3efaa9cb8089624d049f035559b0cb6e2559c535739929a26fd4813afaee21b90f01695342691f556308118bc","ssdeep":"96:bOpN2VYyRTz7wmZIiMQAO32iFBZY8wfnNBA0AXgKy19:bOI7wmZIi/FB/6nNBA0Aw9","tlshash":"9691a53831bcd93f65fb55dc6061a94958499f2dab30bbd0fae2103690efc805129f2c","first_seen":"2026-05-08T08:34:26.087901Z","last_seen":"2026-05-08T08:36:46.752873Z","times_seen":2,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-divider.b9a0c609.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-divider.b9a0c609.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-834\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMpQFPnRUFYJwMqMCKh9hO7u8fYhWXtofn3V8Xx7yZ0F7JqVvj0Hj7BX3AQte3jkbRwFZzG5j2eXLCcuLm0mbRHbBofVkFUU9o8BwgKFyUxM7bclnDpROgf7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f4e76723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2100,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2099)","md5":"dfabcf01931aaf39a3e7cdefbdd7e9e6","sha1":"8c95405fbd66eef88595c908f89d344a96153235","sha256":"f6bf3ffef8ccd82fbbc04b4f3e188f57479ca6afc24de583dd9ef33929f9e9da","sha512":"876578bb9554d067bd10dbfa25ae0c40a0421447280cda54f02fa4c8c745dfa1cecacfb1e1bf6190ec589f1d60b4daa82a658e138e04b70fc0e542783e337f67","ssdeep":"","tlshash":"d74130283425ae3be6ef494d30100849618befbdd63467e9f5f29d729043c88ba54b5c","first_seen":"2026-05-08T08:34:26.092968Z","last_seen":"2026-05-08T08:36:46.731434Z","times_seen":2,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/use-lazy-render.a56f4403.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/use-lazy-render.a56f4403.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69de29df-3c8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QSBf2GjrR1IBC52BhK03YDWcIThQ38tgj%2Fh2tCZgZ7BlmTq3embocEiJwTqeoi9vm5k8HH91007NwZuxSAkC5Pt%2BPA9zoVixhUDj%2BOYy1t0SKLaOgKIIaG9n\"}]}\r\ncf-ray: 9f871f61aec6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":968,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (967)","md5":"c38b9abea0ab8c39192edea41aef9a8a","sha1":"a3f7688c1e1aed6322dd19495464a9c777ae64f8","sha256":"2391e9582c0d4bda43909ee6e83749cb85f5e9067fa3b5cfefd17b5122b6ee50","sha512":"617fd0e8407c9a4ff926cbd6b5df1b5f8cadb9f00aeb045fa782feaf0e9cf7e42017602cf65729fbf0f2bfe3155ff3d5a2d56dcd55c8fd04f4e6fc64cde542ad","ssdeep":"","tlshash":"d011484df456e5b022478cccd11b1125921e27e92511f3f0f4df291033706afa41af17","first_seen":"2026-05-08T08:34:26.094412Z","last_seen":"2026-05-08T08:36:46.77926Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/menu_icon_arbitrage.e895c6df.svg","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/menu_icon_arbitrage.e895c6df.svg HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-1502\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tS3Jaoh8JQaxUoH9BPc72HN%2B8Aoe8PqpLKddFWgItyXehtLx%2B6sZsoVGFqIccsWHQv2TeuDzmYu1Cl23iCmC4UFUK5E%2BstUyZAvI9jVbT%2FUqTokwKLMp2NLO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f666fd5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5378,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44b770cb402621f26a223e192f1fc2c4","sha1":"b2269dbc6193c55f28077f586d706b772ee2f764","sha256":"e895c6df97459d1081b304c528a37a9be52a2a2f4ee92531fe32e30fe56a3c88","sha512":"4b79894b67b1b6643254a4fab1926f483304976c3e6c9dd4a2b3bd7babedb2aefb56aef9826f19d0e5d63951d16ddecd794a7da550c1f0128f0f4c3fe04b4079","ssdeep":"96:aVlaKeFfbzwhRCmjVRbb1uVED//LcytmcVGgHfQ0A77VOuVee97gKn+rr:azaKeFfb8l3LcHcNLqTg5","tlshash":"79b1948051744db1f900cbfc94a15568787939a6ba3302bdfccee191bf12cd909b996f","first_seen":"2023-05-10T20:40:30Z","last_seen":"2026-05-17T04:40:35.440926Z","times_seen":99,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/btc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.137","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/btc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ocltjN0dqAXUnBK1JaZlQ13AJBNBINr34cgXimHymxoAD/GrYK8uct8rTM70sISdTGxpFfzYGd+heUl0+eGnMBkUj1LblXkR\r\nx-amz-request-id: ZDJ84QSK0NYDNWC8\r\nDate: Fri, 08 May 2026 08:34:00 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:37:53 GMT\r\nETag: \"03c74454bc971a3437d588396a5e610e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1947\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c74454bc971a3437d588396a5e610e","sha1":"1a359cf1c14e757eaee1c5c807cf6c7732646b15","sha256":"733d0c0a99a79f263e8b548b8b1988ccfe80e156d36120371495955b4e51e382","sha512":"dede5e3cd5e0f080f4662e4e2df58482d19df970a2cc3f505eda82fb180a736a4c82523fe35b7a613293f572197e44c3bf963bcbaa32174c00d80b0b1e08bb2a","ssdeep":"","tlshash":"24419620d7bec18cf00196fcda29c87479971cc53e28d089d6e9485ab66405d1d72cff","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.034886Z","times_seen":471,"resource_available":false,"data":null}},"time_used":1936,"timings":{"blocked":815,"dns":16,"connect":269,"send":0,"wait":303,"receive":0,"ssl":529},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.222.174.117","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:34:00.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 08:34:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Fri, 08 May 2026 15:34:01 GMT\r\ncache-control: max-age=25200\r\nset-cookie: __uni__uid=rBEQa2n9n/mY/5PXA3k9Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-06-13T08:30:18.822065Z","times_seen":16327,"resource_available":false,"data":null}},"time_used":1778,"timings":{"blocked":754,"dns":43,"connect":268,"send":0,"wait":267,"receive":0,"ssl":442},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/index.64b2c9ed.css","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/index.64b2c9ed.css HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-4818\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AGZAGxs8p%2Fdo1q1ZlnyPWfih1Tx5f4iB19r3FOEEEk2Jwlk3nAoVGRNgeXaqf%2B1JjAPFTt93AhRsGMyUTwN28cOuNER0Kg4GCHQNHL5oRAgRnHoMdEHOl3Hw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f0e60723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18455)","md5":"cacbaedb231da5ed578aed037dc6c03e","sha1":"ec24ae5bd9cd02ea329f1bf2d281553101cdadd4","sha256":"312bf8567beb146ad1bfbaa1c4fee59e7cc14d4c34d638a8d58b417643344ec7","sha512":"a3a1b7f504326758b77d1731ecdaa570f33115e4d42a06e72efe60a284ae51969a6e52832c33f5d462b5fb574d955a5543778779d03eee35f333785cec50a46f","ssdeep":"384:U2Dxf5KpHzPFZ9yd8VJKIgmROlAYP3dvD8IV7WBe8HB1RN0v0cIy0W6JL0e:U2DAbL0e","tlshash":"3e82ef2bf74e613a71b7c127a185a7ae1029737379028f2c67567c2c9e575c23f32988","first_seen":"2026-05-08T08:34:26.099825Z","last_seen":"2026-05-08T08:36:46.768796Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/use-lazy-render.a56f4403.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/use-lazy-render.a56f4403.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de29df-3c8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NP%2FyhkDWd%2FVu%2F8bv9%2BAYWBTT4Anyl4jzPH4VI3ee%2BiKMKrLt3COCERYXhgIWE6eNh%2BI4nWEHv3NfiSASr40u%2Bx3Rm3hWH4clNWiLeXbdhUPx%2FzJy9MKuWhYX\"}]}\r\ncf-ray: 9f871f5f3e72723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":968,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (967)","md5":"c38b9abea0ab8c39192edea41aef9a8a","sha1":"a3f7688c1e1aed6322dd19495464a9c777ae64f8","sha256":"2391e9582c0d4bda43909ee6e83749cb85f5e9067fa3b5cfefd17b5122b6ee50","sha512":"617fd0e8407c9a4ff926cbd6b5df1b5f8cadb9f00aeb045fa782feaf0e9cf7e42017602cf65729fbf0f2bfe3155ff3d5a2d56dcd55c8fd04f4e6fc64cde542ad","ssdeep":"","tlshash":"d011484df456e5b022478cccd11b1125921e27e92511f3f0f4df291033706afa41af17","first_seen":"2026-05-08T08:34:26.094412Z","last_seen":"2026-05-08T08:36:46.77926Z","times_seen":2,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/on-popup-reopen.cfb4df12.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/on-popup-reopen.cfb4df12.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de29df-152\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d8WNslTvCgQdHFSJf1vnuLHeEwmsLUEmUnBbzEge%2FmbpjWJBEmeePA%2BdYMn4Rs1j1y%2B2j4Ap%2FCU46mZz2hxfCbcxccgrU8QSQPajczXyc1I03Agt7b2D4TPx\"}]}\r\ncf-ray: 9f871f5f3e74723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":338,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (337)","md5":"749ea06b66941cf71c6112232609964a","sha1":"e042df2cfed54f1ed9b87ee81730a3aa36bf72fa","sha256":"7c25abb027836d6eefb0ad6183c0d25c99bd788f7ea108daa1cda0f241223521","sha512":"904267f21965ac2f765353490a5c7ae1aede6b7f2e535594899bda0f1e42c9e684d7d0d0ea74981798e4a3a0dc1174afaa460920d03f7b984c15aa01b3868dd1","ssdeep":"","tlshash":"34e0264f440b18701ea7108bd00b2d16839392fb77c283e0812eab701a714ee429ae02","first_seen":"2026-05-08T08:34:26.101863Z","last_seen":"2026-05-08T08:36:46.773433Z","times_seen":2,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/ConfigProvider.085c748f.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/ConfigProvider.085c748f.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69de29df-3f5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iZQN9oWZWeAzmORWldUSKiOkXB1giSLoWmwWSXuQX03T5m%2FT6w7N%2FqEhKPPXxxmwgIRD%2BmKtE%2FLq%2FALjs8rChOMgQR9aeuhsngN9Q%2BTWVp5oGARL8H1pi5dI\"}]}\r\ncf-ray: 9f871f61aec7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1012)","md5":"d80e82cc4be2c5884d7cde646e4d2517","sha1":"b14486541205bae315e836527e54209a3bedaffc","sha256":"179f7cc40c4e86060d0861e6b97e7579be152a7cdeaa2f867902ab2d4b50d7f3","sha512":"ecb43d6c155549f8b59d29d20c1f825ed0eba695310e6d56e8aa7cfec6a4340881f875954615b807402cc3ee8dc7765351da20023024c725bd7930bd439d6631","ssdeep":"","tlshash":"571154bae2127830413615ee7452ade1bb097660a939b4f4e04eac8d17336eb8157f4e","first_seen":"2026-05-08T08:34:26.103985Z","last_seen":"2026-05-08T08:36:46.742384Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/menu_icon_chat.05117d1f.svg","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/menu_icon_chat.05117d1f.svg HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-5cf\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oPg7mHxL5nlL0aNmKMYaN98d8OaQUjTJ3rQ6IFfJ3qmzoBkUK5ptJwhfCNMih2YSO0xbHEHSmKRwnge9I7vNRDzxm7f5IZTpssshOZYVTYdxCnjTQlp1nDMy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f666fd7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1487,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a34be8fbd62a82fcd5918e8abab2b781","sha1":"c3ed4e808ed09db34256bc7cd137c2cd9be5aea6","sha256":"05117d1f134df0eb0ae9213ed20ef54872112eb3f83055b370192be95171b208","sha512":"5e423bf19a6b7b8dc08d79e8df1fb2c19ebb3a2f13adf1fb3ae4df6f71ce50de406989135ef48ae06591033b8f12aa70092b7f220e2922bb6ee72f1a1e116d1d","ssdeep":"","tlshash":"213144c482a58770f148c3a4def4a46755f635e235f00891bade08556b9b0e909fb17f","first_seen":"2023-05-10T20:40:30Z","last_seen":"2026-05-17T04:40:35.492756Z","times_seen":86,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/file/images/123124-20231219040111746.png","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:34:00.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /file/images/123124-20231219040111746.png HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:34:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LiqGcuaYo34R49W%2FXs84k4%2F54vWIGOn1%2FLTCzRwfTqIb0CxKMFyQPXgjqOaXrYYICNDCOnyUCrnGD%2FhSnghIO8FRL9G2Iaf%2FhM03HRBlAnLJWE6ul1ILwCID\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f871f6ea8c2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6ef2866cae58304cb33c620c0494da4b","sha1":"68fe071190d4b5a9565c67d0e8dafe5127ba34f8","sha256":"2d3d7f7269d39561d9dbf77dd46ccdbe3c7ed3d0152a205266126942a45a9597","sha512":"9313ff4991cb526263fce2894b96cf5dd9162a85d76a9da03ab26034314f2d941628d14bcaafe300318081b75f20a98617b330c20a6722689452f8887ac8ca63","ssdeep":"","tlshash":"3ec02220230230eb8f02c223b00a22222280bac280208ea22aac8e28e88082b0028800","first_seen":"2026-05-08T08:34:26.107681Z","last_seen":"2026-05-08T08:34:26.107681Z","times_seen":1,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T08:33:56.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 08:33:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8s%2Blt7Rules2gREXjxEQGbaHYnCV9x2tBrgmDiOykFag9HfKstVilaXep2PpFN74mNonsYtTc7ygn4waQUrJfZoFuizAEWshcl%2BTRY2tEqEbwAOuWdFjCJxK\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f871f582bd00b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":821,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"864bce492cf5c6595587cb6b70f4b579","sha1":"6f39c960f5565094d5b16f310e0d17284c3fb799","sha256":"164343dbd5de996608c11c03436358a6365f8d14a090080ce05d820583b42ff5","sha512":"ee9ccce133676ac3dab6b348571b42be22d0efff84a1f5bc4258e6ad05c1966d64ae4cf33b32e4dc0e01f465ca2ceaba8d018babbecb36ffbf2356663cfda7a0","ssdeep":"","tlshash":"7d0146c180825d085260425929d9f85b6ad6cb774949dda03cdd61748fe878dc45fc64","first_seen":"2026-05-08T08:34:26.10973Z","last_seen":"2026-05-08T08:36:46.76307Z","times_seen":2,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":27,"dns":10,"connect":1,"send":0,"wait":196,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/v1/api/exchange/getSymbolConfig","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en\r\nauthorize: null\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VlrECYJTxTETpMtI6mn7r2O0j6IgQV40MSB3W%2F0viazfhEOjpD2ElR56yUsBTFM%2BTIxiMBvTqLZBrTJybwOoGaTmPeIUTJCOTVpWY2DjsQbArXrD5NxOrqNA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f4e7a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33365,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a43a0413664d9da56da50b8c74c77a9","sha1":"931597684894dcb070447891f6189c14ba11be1b","sha256":"925c0fd1bf7d2dc76c1c3d0c82dadfac0d743b6dc412bb74dacdea72410de391","sha512":"171a253b1070f46793eb25a395583cde9d282c4c658e4c3a088ba5f9a3c3d8944957c51eb0f00455bf057b5710f3947d18aef48b2ce6682f6617b0705ab72e19","ssdeep":"384:hwNmkAP+CkJPd8He2RVlivYplxLoOmkMeaWoA2RSmTiO8HxV8Q7d:hwAkAP3kJPQfRIGlxLGXNWoA2RmRV8Qp","tlshash":"85e2c84527614bafc520a1c21cd23fdc546f69a62cd61b52a5ffde9e8304dee3223722","first_seen":"2026-05-08T08:34:26.111566Z","last_seen":"2026-05-08T08:34:26.111566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":984,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/pages-index-index.2956a913.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/pages-index-index.2956a913.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/index.a82b2c96.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-396f5\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rcAHkpZ2Mul6aXw05f9IskSNWmbuFONjisz%2BMUifg2sRdGFrrSZ2kf%2FpW9G2%2BlTyPoz3LkmuVSCjuAHMjBqA%2FqfPXwui7Qg1Ete0Ej5XDAHr4KHKOjFh1KQx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f60ce9f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235253,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (44583)","md5":"ace1a68341eb5baa490daf30ac19c24b","sha1":"42989c482284587bf12e05ddd6c03ae44ea7cce9","sha256":"8128549996211a66a64bf00ad7c2eb40ac8b9349a92eb549a199510bfb2555f7","sha512":"4dde4f57c163ec75bfb4243b9301fc2a2d2f832461b4b078684a1f7831d2a7683fd3f347f205e0f7d8859e77df21ba1bc6bdc6790db6d46e77261fc93ec26d0c","ssdeep":"3072:NkQQVfymh6rtn2kEhJr5lVd5Hni3Ml1H5xR096L31l9QTQEttFZZBkOAS/XVR98F:BEh3Uk1M3tLXVOiVwghaBLkMqs","tlshash":"2f344b95fb9a7472639b2440887b4105beaa642c60869d7cf6fcc4e32b70dc4706bf79","first_seen":"2026-05-08T08:34:26.067426Z","last_seen":"2026-05-08T08:36:46.740879Z","times_seen":2,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-button.62620998.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-button.62620998.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-12a0\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSRg9yN8L0%2BJMWYiPcQSg0LifcUgAmBkz2m1zCIzGD1DzJuQCCnRpNUJeGB%2FrA5ltUrZCYbwDV4o73uhSoX6AJ967I431BODzMKYm4QEFfyHv63JQfJu99b6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f618eba723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4768,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4767)","md5":"c387d39d94daa10c3b4435e5019384df","sha1":"232ef70e1843884f7d9ff427df5d4e3bdd530c5b","sha256":"34ee8cefca906883baa13d6c5aa76eff9ada69c6a0da4902f86b7fc1287225c4","sha512":"8f261400dc3a6c5ff4fe303d1f81d3c217e40f88b5c3e5939adc042d77f495d288cf46d5561794adc69a9a520a4ec91e6b5baddc185c0d07fa5e108bf9d2fcd7","ssdeep":"96:E3UD//UusxzD9831y6hXFeA615+Vhc8hYFs2GXUx8TvZ8NAwNTgukVZ1ra:E274IpFC1ECpYUSTvUAwNTeVZ1ra","tlshash":"cea1e8143179cd7b6ecbefd83064290661299baee53475d1fea8607613cb8e590ccb28","first_seen":"2026-05-08T08:34:26.084556Z","last_seen":"2026-05-08T08:36:46.720151Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trade.huanqiubaowang.com/upload/image/20230609/9f84c22b099299263f5d1741a2d24786.jpg","fqdn":"trade.huanqiubaowang.com","domain":"huanqiubaowang.com","tld":"com"},"ip":{"addr":"104.21.27.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huanqiubaowang.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 07:27:52 GMT","end":"Fri, 03 Jul 2026 08:26:37 GMT"},"fingerprint":{"sha1":"07:D6:E7:62:DB:D1:1D:A5:93:B3:77:4D:14:6E:7F:05:F1:E8:A5:43","sha256":"D1:28:9F:E0:5C:18:D2:71:A0:0E:16:5B:F2:08:85:1F:F2:3F:7B:F1:E2:1D:D6:F6:58:11:2D:57:75:E6:52:01"}}},"request":{"raw":"GET /upload/image/20230609/9f84c22b099299263f5d1741a2d24786.jpg HTTP/1.1\r\nHost: trade.huanqiubaowang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 08:33:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 158845\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jun 2023 09:48:01 GMT\r\netag: \"6482f551-26c7d\"\r\nexpires: Sun, 07 Jun 2026 08:33:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzTu%2FqxCQOaHya9YaXdQOnOpWjGKu5Mu8BxrditbCm5dal8oxAuleZJi%2FaLrsg6Oi7DUNQrgzV1qLOW357R53leQRaqisH1RWKC3rSrbS0pJP1HUeQYAy9oHnJXCu9NlqhZZ%2FPL5SO1%2BwVw%3D\"}]}\r\ncf-ray: 9f871f67cff3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158845,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1042x583, components 3","md5":"ae5e9d7b6edd9f702a3085a0cbdad0c9","sha1":"090b9466384005b52d2b91122ff5a6f8df0262e5","sha256":"93b44eb453f20195e9d70d681cfced3947216241e8bfceebac3677d4f2fcd6e8","sha512":"a5c8a36c24317de52bc5b320e86d287132e18ad121a557041ef84787545a7f4d2e22ae1b808c2f0c64b572cb1a725e19c81bd9136101bffb9a67141dec3e1321","ssdeep":"3072:vMpK3x3RX1a6lh0dse/edF13fAdET00KM4haNb4Kj3L+YI57KhBCqCzcsXboG1:06JRX1Rrne44qT00L087I1aBCqacZQ","tlshash":"5cf312a7b961cc164a8e320ccbbd89ca750f4a89f55208ee3cf38f1db45e7774869614","first_seen":"2024-11-19T13:56:39.552356Z","last_seen":"2026-05-17T04:40:35.49991Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1171,"timings":{"blocked":38,"dns":12,"connect":1,"send":0,"wait":515,"receive":578,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-drawer.1d7b6c39.css","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-drawer.1d7b6c39.css HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de29df-1f1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NuY%2FQ9GEYCMnOTxWWaWe4qmpNtnkXsx7K4N3jPm9IDo2OVID0grJOeWanp9iFCYU2otIBA1z5mpev8r%2ByIzY4kvCAfb7vAwu2L2PNZFiqRFsWmh15GfC%2F6QS\"}]}\r\ncf-ray: 9f871f5f0e63723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (496)","md5":"bea74b426f5e14abc96acaa198e13963","sha1":"f0f56264e9de90cc7ff3d56e52622854b674802f","sha256":"5c3e253fd146ab28d5da6fb4e05aad55cd8957e510ae1b5c62a671a91ccbdb94","sha512":"ccf8a1dc8918fdad0bed3b09c22a8aa8b063787df50fa9dd9ffe17ea1eba57c99ad02cb394694536c6df21241860b75602606ed0e33ba0f21e94f670fb0317c1","ssdeep":"","tlshash":"6cf05446223d1f74daabd88d9c652f0b8092e510cb1ff048919b2b6e58df6858e645dc","first_seen":"2026-02-06T16:55:22.506305Z","last_seen":"2026-06-02T07:26:04.012645Z","times_seen":17,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/use-touch.feb93f71.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/use-touch.feb93f71.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69de29df-33c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEgcd6HrZMxriRcBP2uW8J%2B2kn3NQnG0ELgZoBE%2FEFnOHctM82YY%2FOqwpwcsP4bvpVi6FErTb01%2BZp3YbfxhyDgXX1WiKG8AuFSbEog3ClIzmcgSH8wSoT8W\"}]}\r\ncf-ray: 9f871f61aec5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (827)","md5":"1fb6da613b479707fae9cfae9b949783","sha1":"4439a37132764519a4f2f7a496c1f5fe2f303de9","sha256":"d2ca92a8176702b56ec44fbbd96521a6e2a154bac8bb6dc1cf83badba79dbd93","sha512":"fa9e4a99433cdf5f1063059967c41c4e5de31730d9e733dd259b8021d6ef8755ba3fa05c1e369f3c7ff3dbb3eae5be6e01c4a3ba70a3df584750fc3a57956b34","ssdeep":"","tlshash":"cc016d5a7082f8328f300ed4d2129099d33513a811a7f9f4746d065b3b73c7967af906","first_seen":"2026-05-08T08:34:26.070523Z","last_seen":"2026-05-08T08:36:46.747278Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eth.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.137","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eth.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: UAh13MFfkjuJ0nSZLfFdzP9DnJ+G2BCOu5RkRkcsLamQ+YREiZloF1XN1wLH2JLTGYl112DopT0NowzQKNR/L/7VFcMyRxgP\r\nx-amz-request-id: ZDJAKB3Q9K0SYX1Q\r\nDate: Fri, 08 May 2026 08:34:00 GMT\r\nLast-Modified: Wed, 23 Nov 2022 07:24:47 GMT\r\nETag: \"d8a57c2396575a058eb68a6c0e32caef\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 616\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8a57c2396575a058eb68a6c0e32caef","sha1":"6495d31828866f3dbabc4aad7c77e02ff457cfb8","sha256":"b05bb6169930a076c463a15280a165560bd30972e2599f71ca62f44c023d666c","sha512":"7bf60d4e2903aa9f5be3e9268a3379da63feb8a312534d17c48686419a4fb52993c0c75b3686ca004145502266f58d9fa39cf59f19b7ab9dee6b503b877c3f58","ssdeep":"","tlshash":"f1f0a498354a14204804c77b1adead3a625329ecb7a6c0c5bfd91b0b79c48eb3cb55cd","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.035689Z","times_seen":494,"resource_available":false,"data":null}},"time_used":1470,"timings":{"blocked":587,"dns":14,"connect":272,"send":0,"wait":293,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xmr.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.137","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xmr.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: mirWCJ3ZZml8x7Mjou4/TOgcWknv1PYJcRh4aj/zsJz6fjqlCXRfKIyvy6sBwunw4blf32x+fXSnAhzFWJuQz47k06RbyMUO\r\nx-amz-request-id: ZDJ4NC8FTZRZ9WH0\r\nDate: Fri, 08 May 2026 08:34:00 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:26:40 GMT\r\nETag: \"fdddffb238bc363e6e7d7e9fb8b2cbfc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 627\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdddffb238bc363e6e7d7e9fb8b2cbfc","sha1":"2472cd3130002709666e130d8bc96fe1fe23fae7","sha256":"d4056d45614e9aa58321b8db2cac9ecbc6c3d9048d49ccae12a6ca5a5a31a06a","sha512":"da68083024e8e5b8412c24febd6fe422cc780c08242b2a4ccd59ff1c37feb820e78046b3732991589d28681f4480661505107dc06616f178be39b310a7674fd3","ssdeep":"","tlshash":"64f002a8f1d8a71c78086344e73b6be061d17ed5f6434351f388bb25b2440569c106d3","first_seen":"2024-01-11T12:12:53Z","last_seen":"2026-05-31T17:09:56.204986Z","times_seen":154,"resource_available":false,"data":null}},"time_used":1439,"timings":{"blocked":574,"dns":7,"connect":262,"send":0,"wait":284,"receive":4,"ssl":305},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-button.a6a4debe.css","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-button.a6a4debe.css HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de29df-12d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WI8y8WmoTqRYznmdp1Z%2FgjomfQjZ%2FQqt0b5WDMd1jCliBoZhyP1Ev3uFJQ7f6UI0f%2B8ZNGd4KyDbA8QldE%2B%2FkOp%2Bmk1o0tIpdEchIarYlr3ucLwovaAWnhuW\"}]}\r\ncf-ray: 9f871f5f0e62723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":301,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ee83483b4edf808d8872951cb442312b","sha1":"40e887d2ae655169f1e9a1323a97864477fc6ff7","sha256":"d135221983b41763a2f33e3320d184787d0ff8c10a3eec4f7981a59cce2c0bf7","sha512":"285087c8fae11227d7c78a1aef558797938844e6b881a2686daf5375ef812a871c26aad4d045ca650e7b24ed172a1cfc7d78945a0bb17334bc448b1b5a0172e0","ssdeep":"","tlshash":"9ee0c2b1b184002c6137d352203dc019e392252bbb18eb2916ed30c10c0208fb4a8e8c","first_seen":"2026-02-06T16:55:22.515106Z","last_seen":"2026-06-02T07:26:04.037848Z","times_seen":17,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/v1/api/config/platformConfig","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en\r\nauthorize: null\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIrAcsqsGVQQQQitUe4mpi8EPAH8067d2oFOLgCAQCSds%2B8aWvIJ4lc88JQv0c7dUW%2F5nZQPASZEJlwItkY7whLUqK1RwZJutsBwfIL2xLseoy%2BHmE9BjrDN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f621ed2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3788,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"eac84e8bcf7c01bffac92dc1cd5ece9c","sha1":"63d27ca858eed6116213b161e2118c537e0543ef","sha256":"8a4f033e3a77ac2cae0f5d51ebe6234292478977ea9bb948178ff0d8b1a365d0","sha512":"5731fefd86d95cc9f023d91cbab60c47ce15b7f349b217e38f4bc33d429740fccb14e05de540f2bc2cbf069ea7d3a6bd08b2e41af826380bc7bc1ec4579023be","ssdeep":"","tlshash":"2171549e2322a5f4c7e012c7d4d728281f3ca9d76984f54fd39aec653ef74916128247","first_seen":"2026-05-08T08:34:26.119245Z","last_seen":"2026-05-08T08:34:26.119245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-divider.b9a0c609.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-divider.b9a0c609.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-834\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTevpve1VN7H2k%2BGk40WBd%2Bq8A3a5MMqAv8lyj20AzuX7VsCRD0uv9MDdlkNgp0PRPNMexSvc7h0%2FqOKarTspXJ1PwJ6J2j79zh9oNHox4%2FhAufOjySvGyRd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f61aec3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2100,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2099)","md5":"dfabcf01931aaf39a3e7cdefbdd7e9e6","sha1":"8c95405fbd66eef88595c908f89d344a96153235","sha256":"f6bf3ffef8ccd82fbbc04b4f3e188f57479ca6afc24de583dd9ef33929f9e9da","sha512":"876578bb9554d067bd10dbfa25ae0c40a0421447280cda54f02fa4c8c745dfa1cecacfb1e1bf6190ec589f1d60b4daa82a658e138e04b70fc0e542783e337f67","ssdeep":"","tlshash":"d74130283425ae3be6ef494d30100849618befbdd63467e9f5f29d729043c88ba54b5c","first_seen":"2026-05-08T08:34:26.092968Z","last_seen":"2026-05-08T08:36:46.731434Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/file/images/123124-20231219040111746.png","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /file/images/123124-20231219040111746.png HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:59 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBoXzio5VQerFB3OK%2B8jwKOqVfQLG0gVHEOmFwDn5lTHTxEP3Nz9bpyD8FtCBO%2B2WVU27QKqdyTcI42B9bXQwL09I%2BTKZwxzJR%2BxKlAh0%2F4xCmxGQ07ghRJs\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f871f65efc7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1ec64430f9ceda751b9d801c1881c749","sha1":"9896b414b7cda6634a4245bc7a00e337af2c2984","sha256":"d0b7dba3899d576e81c3f73cb0ccef330f975b06fe5b9fd099ab286b46aad191","sha512":"4fcdaf6470f6463ffd56d23f181d8be0b6f035105cc9e43a0dda1f34ce324a44a928a4cdac7da77fdd5c16d94c1f6235e44a458a6bf4bb1788e2fd09570216e2","ssdeep":"","tlshash":"59c09b10175534eb5f01c553744b2555568079d140249d71565c9a69d94085b5565404","first_seen":"2026-05-08T08:34:26.120892Z","last_seen":"2026-05-08T08:34:26.120892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":718,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bsv.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.137","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bsv.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9k/TKmwUx83MrqyFfc7vo+BgnbbMkypaN8RbR3Ngvt4DcvNrkeWBOMFwVEBmqoqZnUnG0+Fy2jmSITigl+z1LJ8CJmxIeRdz\r\nx-amz-request-id: ZDJ879DG3BFKBQZY\r\nDate: Fri, 08 May 2026 08:34:00 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:36:30 GMT\r\nETag: \"0a6c14a948ec11e6b3bc19ae2aed7c22\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1817\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a6c14a948ec11e6b3bc19ae2aed7c22","sha1":"0f79ca42c47a7a37253f23b608fcfbc2493dd84b","sha256":"fdb30ade7093c96b4c5968e4a3721388c3be1e0325266645f40a995d8667486c","sha512":"3d6acc8ed9dae0981c23574fb5319dc64591b22082392253e9da74f64832f45cafd2db8a652d40478edbf2752c22576938acd4757d6ce293c34653b4e79e8233","ssdeep":"","tlshash":"78312555a370f368b904b3f8d36494b1752664fbb253d50896fe2125fb4881e0cfb98b","first_seen":"2023-07-01T20:42:20Z","last_seen":"2026-05-31T17:09:56.287656Z","times_seen":342,"resource_available":false,"data":null}},"time_used":1904,"timings":{"blocked":809,"dns":9,"connect":259,"send":0,"wait":284,"receive":0,"ssl":539},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/2.590769d8.png","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/2.590769d8.png HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/index.64b2c9ed.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-439ec\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jgzf8KemBgljoyuWf0ZX5Ndk6nngku31vYmrRmKRsfTYMZFgfRn7U5YlnFg87g3GMbVEnitMVRxZl%2BFgnGMz1NM7NzvJsYlpH3XX9t%2BVyfUNKB8fynouU9el\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f670ff4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":276972,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1153 x 961, 8-bit/color RGBA, non-interlaced","md5":"a4ad28e17282b2e2bbb715a785155612","sha1":"346ac33f9d4703f21b5e895b04bf4493fdca9d0a","sha256":"590769d85e0041d5419bfbfaaa2e19add88e1ca04c5b684ea95e36c229601522","sha512":"038d50c055b3061e69621073eb54444f73622a46123bf4b4c11972da7b51e9b5d5d31e6cc85d980687c522da98e911469e0c0a06d39dec52d9ec2f313ea6ad47","ssdeep":"6144:d/xeTo5ccdmp92i1sI9XzuKSGP+8hikRUdui643Yk:d/Imo+5INVSGLQkRHi6AYk","tlshash":"71440193edd1707fa50a3255a793b9e2d038189732042f3f0f9688745e13ae8f57ac4a","first_seen":"2024-11-19T13:56:39.629589Z","last_seen":"2026-05-17T04:40:35.475404Z","times_seen":34,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-app.1bffbf5f.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-app.1bffbf5f.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-9ea\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pnPIvB7xsohzjWWJB1x3j74jnbEkZvL1fGTV2KCLcvuDU2pMhFN8C0vyyrfwj3U5ngVT0BIjHG0Wzj%2BAY377Pme3xp9ntjPbXJJnL1svrpcMHpXcCtSWl%2FQO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f3e67723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2538,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1954)","md5":"48f69a6538859df08bbaa775cc1559f0","sha1":"c16c1011ba60426b65c3a5878f6f7879339fab3e","sha256":"8d1cc622fa1ebf8437bcb82d8523f3f5dfa4bf084b165a55e22212906fcd2e22","sha512":"95c28eaa676e9bc7209f33065b11f3e620baae319f72a9641f9ab246a3e8d1083da285ff36571741eafec3766f8528118759469dc977f2e44fe4ce3381f7eac6","ssdeep":"","tlshash":"eb51817c31d8727d62730acc64a5470c198b73ad4931abf6a2af68303080d68666bb60","first_seen":"2026-05-08T08:34:26.125371Z","last_seen":"2026-05-08T08:36:46.778119Z","times_seen":2,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/with-install.d4a5ec5c.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/with-install.d4a5ec5c.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-1f86\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IbuJDD1monKUI7yoXRI7k8XjPs4RAlkcXdnuBbFN%2BtP7IDn6%2BNAVUyOqH4KUAiX8fE1yZU28PVklrqgcq78fMYP4NSrkZl1MJvsDV6DGwWOXEsGN%2FVJeWPsx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f3e6d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8070,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8069)","md5":"37960ca6bb9500aac9e3cad6fa155303","sha1":"fd7ae0178ad78dc27da04d342efccd49fb13d9e3","sha256":"37b5f0e7e540b465c4bcfc23b919ecea05a9e61f787a2e845c638ca8959fee81","sha512":"1fc87864e9c5982c3b80bc214a04b680360c11e8900b4bcc74cab909a8ae4f07673acd455b03c74ccc184afe6c977ec4cdc81db47e85e9ad626edb44f1f23726","ssdeep":"192:PG0ODo7R2UDDGgIm/2YyVUofuvpdxxw6/9zunE5eXCAMw:BCo7R2UfGgn2YuqvpdrweF75eFMw","tlshash":"d9f1c4dc3191743547b784d104bfa64af1b42e64318ed480e11eeca83e3246e9ae7ead","first_seen":"2026-05-08T08:34:26.078737Z","last_seen":"2026-05-08T08:36:46.767164Z","times_seen":2,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/v1/api/config/platformConfig","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en\r\nauthorize: null\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4I7Db6GXXByje7IBb4FrbWhr9m7r%2FRKxaGi5p9dnqlWpxqaXey%2BRG4m56baKVuKJIFL2f5dqJLwbV9vqcxQfsPLWyQyF8G8V2GUzOTktOlzVeHqXFJu4jzC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f4e77723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3788,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"eac84e8bcf7c01bffac92dc1cd5ece9c","sha1":"63d27ca858eed6116213b161e2118c537e0543ef","sha256":"8a4f033e3a77ac2cae0f5d51ebe6234292478977ea9bb948178ff0d8b1a365d0","sha512":"5731fefd86d95cc9f023d91cbab60c47ce15b7f349b217e38f4bc33d429740fccb14e05de540f2bc2cbf069ea7d3a6bd08b2e41af826380bc7bc1ec4579023be","ssdeep":"","tlshash":"2171549e2322a5f4c7e012c7d4d728281f3ca9d76984f54fd39aec653ef74916128247","first_seen":"2026-05-08T08:34:26.119245Z","last_seen":"2026-05-08T08:34:26.119245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/usdp.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.137","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/usdp.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: EoPUgcXI1S29vcHldniMxYF8gWGBCHnbDtDfHJ0bMxFNnjJKqaGO8hpsaVdq7mySJRMsIov2e/kCa+bwB+UMgTKe0SbOSgPW\r\nx-amz-request-id: ZDJAN5ZA8VN02E55\r\nDate: Fri, 08 May 2026 08:34:00 GMT\r\nLast-Modified: Wed, 08 Jun 2022 11:01:13 GMT\r\nETag: \"f457cec81f9944c9910482d5abf11b8e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1003\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1003,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f457cec81f9944c9910482d5abf11b8e","sha1":"3273147c768adad8265901f5766add9d7e231ef5","sha256":"073e6ca4f2192e807dababdc45f20e2a59269becbf97c09ffb1c375c7bfce420","sha512":"18260a6fdc3a9827ee49a904834e5967c85911e16ba927daae02bca4ab870d593f12c0667b86801c210a370db2c228c0e37c1a27a745cc0db570f006d57db6f1","ssdeep":"","tlshash":"9411af55bafb5738e008c31417e9f42f7aa303c97707c55950860a94d511d4eadba8c3","first_seen":"2024-07-27T19:46:48Z","last_seen":"2026-05-08T08:36:46.717016Z","times_seen":97,"resource_available":false,"data":null}},"time_used":1484,"timings":{"blocked":589,"dns":11,"connect":279,"send":0,"wait":302,"receive":1,"ssl":299},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-divider.f08bf803.css","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-divider.f08bf803.css HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de29df-126\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lv4xvoHp0zPaUM7rl2XKtFOX78Llm7PlNLrUTaTCpO8c151zpRziLsvlAZmpQ92Dt%2BatJOyDX5SiFvO8q9USzs0EAlcY4QrW%2B5%2Fx3seXLiODsrcZJ%2FWPs98p\"}]}\r\ncf-ray: 9f871f5f1e64723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"195cbad757b6b5c4bd03d562e5c3601a","sha1":"292961252a6fce627305c3e2241c5bb09150d202","sha256":"a6334d1a4271860c851f30f14726bb8db4075ec5d53f4529516eede0d428f981","sha512":"0e2cd8921821bd843466d80c41f691831bd47eef0cea60974633296a927da22a66f2dc2824614cf509f04fa31a5c96600c79c7a24b804793ddc0c00e553b6c4f","ssdeep":"","tlshash":"38e01289156550520f97de22d7cc0e780c688bf39e320f6a33e2758582e2dbd62bde57","first_seen":"2026-05-08T08:34:26.129335Z","last_seen":"2026-05-08T08:36:46.775462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/index.9fe959f4.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/index.9fe959f4.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-10fe\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D3i3nRlwdWLouYONhE%2F5UfLJC6ofdlTHBUghh6xz%2Fx0JqfpL2nLxlyLeOYGCk3YemLJa4rU2xQVVCuW62wLLORPAYx3%2B0BjUqCzZnQS%2FoBkOxIaIBYOnj3js\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f3e6c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4350,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4349)","md5":"6ad166edf943148ae80ca1398f5eaf1d","sha1":"d8d5221e1a02e48569d3606679ff1c6c1d9f03c0","sha256":"358d05e77a2c33ba93a6a8673d6485129f253eafa688bb26837cad8af3c46471","sha512":"1070a0652314360c23196873681047dd8fb61c44da8e9f3b098152279c61abf59057d98ba03f8a2f783215767ebcf9565d5cc7c3c65fd7e3f01fefac6f36ab5b","ssdeep":"96:+PCVWWHhfNiJGCzlNbJ7UHAEU+LgP6RBC1YoAZQOGkDUBeAlLOrBR2/vB:Tnhf0JGCBN95+LgCRI1YW8oBRIR2HB","tlshash":"0a91d586f80a7a3101b784a1c43c0c50d7391795b52f8ae1f4bfad2a32d86c6225ff69","first_seen":"2026-05-08T08:34:26.130862Z","last_seen":"2026-05-08T08:36:46.754419Z","times_seen":2,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/index.27fd57ed.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/index.27fd57ed.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-4b4\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AReHh30ZXnPh7gZk5NZXOnNzZTbIscAG%2BQEWq%2BcXTXKyXq00dQ0O0xfmv06m1kRsMJVIMiUaNAbiQlS4nGbpxb%2FjimLvbbbd9NnnHU74yNR4i1FnYGp3fJEN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f3e6e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1204,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1203)","md5":"be5df5b141dfe3d07a182527ca170e06","sha1":"bfd8a4275734986336eaf357678f8a54294b7030","sha256":"2a403d7546f2ad466de9a368027329a605b64b45e69573f092121de1aa5f2776","sha512":"2dd7278e2e5d96afb9bd5dc191cbaf24de2e8e295e3e7c4a121874215811609a267fdaa89b3836a116cfb975bd24f6f024eeea9f70045ee13b65039a30501f7e","ssdeep":"","tlshash":"3821a7c5b0c7a174d31bc14c00d61540b238ee6cb56efa84b479605177e021e909afbe","first_seen":"2026-05-08T08:34:26.1326Z","last_seen":"2026-05-08T08:36:46.733218Z","times_seen":2,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-tag.3076d27f.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-tag.3076d27f.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-fa8\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oAGDzVv0rzU2JrNfC2tBYo1x%2FdIo2ryH2YP8O9Y0J5bMwS1TsqbAapR0kD6LBbpRqoAImpzQWMn4y7HgvCHmSc9ai8n2hiyI2SgUyg5u4XNyDmY9R%2FgHsCu7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f61aebf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4008,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4007)","md5":"97b1d5d224a7016e3ea9678b9eaa39cd","sha1":"530b450d86e5c7111b6a83c7eb537b1ca4cff0d9","sha256":"a599d682fd6c53991f6e53de83c86a00f85c7bee3db873c8953807719cb6d9ed","sha512":"9728304473a232b82972673aa016a12652866714fa87e4becbb65466a6a4c89b733f3905ac525b1e428628a2a0783eb76e86d24af4188f24170c58a2e69bf8c0","ssdeep":"","tlshash":"a88165b43d1848f686ff4acca172ae0d4929256eec357ff2f4a121245cf1925a04e73c","first_seen":"2026-05-08T08:34:26.073258Z","last_seen":"2026-05-08T08:36:46.756001Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/fa-solid-900.886c8611.woff2","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/fa-solid-900.886c8611.woff2 HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/index.24d3041f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 150020\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\netag: \"69de29df-24a04\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DquJnOnq98Vq%2FS4wSMIjDuaVPUS5C28UZ7DRq0m6IQsK1nPhBoXiUZAl6QMkxI16dYjVWC6gr2VhUhE3AX%2BBCA4gfGcBMCI8ghUHuUMCRmiY%2BYyg3nGdfypR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f871f671ff6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-06-13T08:53:44.460238Z","times_seen":37217,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/index.27fd57ed.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/index.27fd57ed.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-4b4\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lOVjHvvTlM02KAe16h1CYpdOR4mQjmj%2FpnpCLdTPgLbWYbk0B3dALYlBpqnWk2L7lWN%2BjwYNc2rvCaZyd7j%2F%2FAvqVb8gFEtPbOBWXs2ultxR3P5KmN62FuBS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f61aec4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1204,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1203)","md5":"be5df5b141dfe3d07a182527ca170e06","sha1":"bfd8a4275734986336eaf357678f8a54294b7030","sha256":"2a403d7546f2ad466de9a368027329a605b64b45e69573f092121de1aa5f2776","sha512":"2dd7278e2e5d96afb9bd5dc191cbaf24de2e8e295e3e7c4a121874215811609a267fdaa89b3836a116cfb975bd24f6f024eeea9f70045ee13b65039a30501f7e","ssdeep":"","tlshash":"3821a7c5b0c7a174d31bc14c00d61540b238ee6cb56efa84b479605177e021e909afbe","first_seen":"2026-05-08T08:34:26.1326Z","last_seen":"2026-05-08T08:36:46.733218Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/on-popup-reopen.cfb4df12.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/on-popup-reopen.cfb4df12.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69de29df-152\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qgpjE2QSZf9v278TgSAWN74debAaLT6%2FtY7LTJjfARPt%2Bw55ewbyvh1L9n3D1%2BE%2FB5N5dmF6bHaPdL3bdhBbziZZj5HNZeH9zTP%2B6yZ4gkw0y1ggnJuBEocT\"}]}\r\ncf-ray: 9f871f61bec8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":338,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (337)","md5":"749ea06b66941cf71c6112232609964a","sha1":"e042df2cfed54f1ed9b87ee81730a3aa36bf72fa","sha256":"7c25abb027836d6eefb0ad6183c0d25c99bd788f7ea108daa1cda0f241223521","sha512":"904267f21965ac2f765353490a5c7ae1aede6b7f2e535594899bda0f1e42c9e684d7d0d0ea74981798e4a3a0dc1174afaa460920d03f7b984c15aa01b3868dd1","ssdeep":"","tlshash":"34e0264f440b18701ea7108bd00b2d16839392fb77c283e0812eab701a714ee429ae02","first_seen":"2026-05-08T08:34:26.101863Z","last_seen":"2026-05-08T08:36:46.773433Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/index.2661abdc.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/index.2661abdc.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-1098\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sEOx1CWzYuiMU6hGEYeb9CUTNwURA8excmMy7awo5w%2Bma3CEf7nfb2NU0E8OIMsQYU2HSxyOTyp7rztuXUPEJm5zrxQRzIOFMOQ7QJ%2FXTWOMXkVGvNmKQymH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f3e68723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4248,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3029)","md5":"e2a14dd6a80f4148dd93b35b2f9247d6","sha1":"5260018a5f3293833bba0728c6a0b032c5490521","sha256":"5a89e272ecd649eeced4ce99581511cf900efdf644c8b24503d54a7b833ae9b4","sha512":"fa293aba4d40cdfeaa25d59c2c117201ffc77c89d9a871907e7bb90273f3a8c90afac26ab31203a17680e0e24794035604b88203d5c1e572925cbff8577e2181","ssdeep":"96:LxeYIPDK0t/m4Ch+DbtGaCLplGxbJKahiEzqoqIwyc:LxeNPu0t/m4CsDbgaCLplG2ah8yc","tlshash":"d291858c75384a3cba1f55489394700032c55cffa6115698f2ff0c79bb76fd499967a0","first_seen":"2026-05-08T08:34:26.076092Z","last_seen":"2026-05-08T08:36:46.729116Z","times_seen":2,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/ConfigProvider.085c748f.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/ConfigProvider.085c748f.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69de29df-3f5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fiaw9TBcYRRMGSnOJkNl%2FZtmIzwOxeTzAVNKhj8VcbRUD3G4jE4Mu4M8bQbiYdBBFscJQ9tC24c6EIIwHzVPuKiTlHq%2BG323TKX3ZgbqKeVTcVj9qeTXQmWq\"}]}\r\ncf-ray: 9f871f5f3e73723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1012)","md5":"d80e82cc4be2c5884d7cde646e4d2517","sha1":"b14486541205bae315e836527e54209a3bedaffc","sha256":"179f7cc40c4e86060d0861e6b97e7579be152a7cdeaa2f867902ab2d4b50d7f3","sha512":"ecb43d6c155549f8b59d29d20c1f825ed0eba695310e6d56e8aa7cfec6a4340881f875954615b807402cc3ee8dc7765351da20023024c725bd7930bd439d6631","ssdeep":"","tlshash":"571154bae2127830413615ee7452ade1bb097660a939b4f4e04eac8d17336eb8157f4e","first_seen":"2026-05-08T08:34:26.103985Z","last_seen":"2026-05-08T08:36:46.742384Z","times_seen":2,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/index.9fe959f4.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/index.9fe959f4.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-10fe\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNOdlFBhvl2iKnZ4H2MlAQba4bTcRJCREqAe8R2Dwa%2FRMeUJArlbeKXQd8BxEJhL5mJp2%2FavVVWXL4ItGE0QjXw35N%2BdEoTNTgTh%2FE%2BgiDouZVKOZTBaOaOP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f619ebe723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4350,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4349)","md5":"6ad166edf943148ae80ca1398f5eaf1d","sha1":"d8d5221e1a02e48569d3606679ff1c6c1d9f03c0","sha256":"358d05e77a2c33ba93a6a8673d6485129f253eafa688bb26837cad8af3c46471","sha512":"1070a0652314360c23196873681047dd8fb61c44da8e9f3b098152279c61abf59057d98ba03f8a2f783215767ebcf9565d5cc7c3c65fd7e3f01fefac6f36ab5b","ssdeep":"96:+PCVWWHhfNiJGCzlNbJ7UHAEU+LgP6RBC1YoAZQOGkDUBeAlLOrBR2/vB:Tnhf0JGCBN95+LgCRI1YW8oBRIR2HB","tlshash":"0a91d586f80a7a3101b784a1c43c0c50d7391795b52f8ae1f4bfad2a32d86c6225ff69","first_seen":"2026-05-08T08:34:26.130862Z","last_seen":"2026-05-08T08:36:46.754419Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/index.24d3041f.css","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:56.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/index.24d3041f.css HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-aec3c\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqx9UpGvLfgGLEoWNTPrDMEuXpYLBkhMfol3ces2NJi48X0cvEgmdKbtx95m%2Bh7eQ1Kt%2FUxAR1cfN1uVH109gWwT%2B5RKPGPnMbK2%2BgeAATmIt7zRWWXllOdn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5a8d64723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":715836,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3d806a40ad6101acdcef4ab346cd6ae7","sha1":"377de4748d6cfa00f27fa36166099754918679c8","sha256":"b2490df0149374d08596efe10bbc1bad8556d4c4b1d74757d63c91508c97adc3","sha512":"54c600123c28b350167172eb379da82d045a058e2d2eeef8c00670966bcd8367269a7a84b5dc98ae4b07abc4d3a422b75219bd2942048143bda6462011489d42","ssdeep":"6144:bn3lGD/+WxZ9JN0yTq2eeRHYtI98fM983pz600I4Be:b32lBJGyTdRZ98Ge","tlshash":"00e473eaf94420f8ab77c11b9791bbfca179f664da014d99f007261c4ec37e20552bac","first_seen":"2026-05-08T08:34:26.135074Z","last_seen":"2026-05-08T08:36:46.784252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-drawer.6fb5decd.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-drawer.6fb5decd.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://biva.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-162c\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNYzv6zlOaQK0rspZvP29G%2FUHPa2r2kig1Qw2sCFIPnJUh5t0UP8ZKCnwmmWuQ34p9nZ8k6DMhid0y1caAN2ezhoXMgEjxv33yuS%2FWzbB4cipaOEs47sIhfe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f5f3e6a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5675)","md5":"341a0aee8cc861287087422d93154790","sha1":"a7bd28583cc4284c973c01de8c61ec3f6d5af74e","sha256":"59bb7a530b6eac29a4661e84ff7cdb5ece80091f6d5eaf858493cdcb592cd945","sha512":"2df390baf7d071ecc87bc2c799b3f81a3cffcc2bedbbf602ac7c0214597b3d7338397562da7ca44a4b3533c65308f336dde5127e779cf7b4c5c4b29184771045","ssdeep":"96:HF+n9w3F5RUtxr6SDZmwfGSewAD5gzWH6fQsIDuLPzmVQf1y1XgSofL+Z:M9em7Hew/P5f1y9uT+Z","tlshash":"e1c1c6a8746e2373a6b718a5c072880d123d1f5d9568b6c0f2d2183e36f6d089dd8bbc","first_seen":"2026-05-08T08:34:26.137032Z","last_seen":"2026-05-08T08:36:46.751225Z","times_seen":2,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-app.1bffbf5f.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:57.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-app.1bffbf5f.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-9ea\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KtD7dKkpjPlr5IMVbuVDeiOmwlukpmtcFKGW6RuUJY%2BcHnsfeWuLb3l1pfp0Ln5K3iJfMxI1ZAHsAq%2BDrfato3ypYPBdFkTXE7jvhcAHqubv%2BgPkpJJvI9qK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f617eb5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2538,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1954)","md5":"48f69a6538859df08bbaa775cc1559f0","sha1":"c16c1011ba60426b65c3a5878f6f7879339fab3e","sha256":"8d1cc622fa1ebf8437bcb82d8523f3f5dfa4bf084b165a55e22212906fcd2e22","sha512":"95c28eaa676e9bc7209f33065b11f3e620baae319f72a9641f9ab246a3e8d1083da285ff36571741eafec3766f8528118759469dc977f2e44fe4ce3381f7eac6","ssdeep":"","tlshash":"eb51817c31d8727d62730acc64a5470c198b73ad4931abf6a2af68303080d68666bb60","first_seen":"2026-05-08T08:34:26.125371Z","last_seen":"2026-05-08T08:36:46.778119Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biva.cc/assets/tm-drawer.6fb5decd.js","fqdn":"biva.cc","domain":"biva.cc","tld":"cc"},"ip":{"addr":"172.67.169.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biva.cc/","date":"2026-05-08T08:33:58.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biva.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 19:02:17 GMT","end":"Sun, 26 Jul 2026 19:02:16 GMT"},"fingerprint":{"sha1":"8C:3B:A0:B6:BE:B5:8B:D2:A9:CF:84:5D:47:F0:D2:58:C8:E7:1E:06","sha256":"1A:8F:0F:75:A1:11:F3:DA:64:69:88:27:D2:9A:8C:69:23:14:CE:47:96:B0:E4:FD:88:38:31:AF:CF:3C:B4:EE"}}},"request":{"raw":"GET /assets/tm-drawer.6fb5decd.js HTTP/1.1\r\nHost: biva.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://biva.cc/assets/pages-index-index.2956a913.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 08:33:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 11:49:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69de29df-162c\"\r\nexpires: Fri, 08 May 2026 20:33:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5PnwyJ%2FX8zwjh4cF35WCvW7ZyMV%2B1BbWY5h4A2aCn2VVxDeV8Ky1V5SLZYUkCDqvSHs5cdPErBjDsBrZVem5hDj4UL8hL8OAU%2F1U%2BoPyMt%2B2zW1C9JwT1Hz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f871f617eb9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5675)","md5":"341a0aee8cc861287087422d93154790","sha1":"a7bd28583cc4284c973c01de8c61ec3f6d5af74e","sha256":"59bb7a530b6eac29a4661e84ff7cdb5ece80091f6d5eaf858493cdcb592cd945","sha512":"2df390baf7d071ecc87bc2c799b3f81a3cffcc2bedbbf602ac7c0214597b3d7338397562da7ca44a4b3533c65308f336dde5127e779cf7b4c5c4b29184771045","ssdeep":"96:HF+n9w3F5RUtxr6SDZmwfGSewAD5gzWH6fQsIDuLPzmVQf1y1XgSofL+Z:M9em7Hew/P5f1y9uT+Z","tlshash":"e1c1c6a8746e2373a6b718a5c072880d123d1f5d9568b6c0f2d2183e36f6d089dd8bbc","first_seen":"2026-05-08T08:34:26.137032Z","last_seen":"2026-05-08T08:36:46.751225Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"biva.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}