{"report_id":"97985855-db77-4c4b-8d03-3bc852471962","version":0,"status":"done","tags":[],"date":"2026-09-19T07:50:22Z","url":{"schema":"http","addr":"bit.clubdealnews.com/","fqdn":"bit.clubdealnews.com","domain":"clubdealnews.com","tld":"com"},"ip":{"addr":"43.166.166.40","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bit.clubdealnews.com/","fqdn":"bit.clubdealnews.com","domain":"clubdealnews.com","tld":"com"},"title":"Get Up to 100 USDT | Bybit New User Reward","dom":{"size":10633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2092)","md5":"58979c96805743f51df2b77431d58a98","sha1":"a6e9a70ee70acc49d5293808f38a336faca51c53","sha256":"82943317d1f09bd89a77610f7f2f80f2559537e122b0779c4188194b91ceefd7","sha512":"f72644dc29f4982d4a0c5498352458d091b2f45a223ad2ea63af059ddc065113f995c55c2d9f7a9e936599afee4fccd81ee140a12eddb9e387d19741f0cabb5f","ssdeep":"192:BvCWw6BuOrPK5HyUfB3Ye407KAEjzmsRuCi9/pFAg/Md3n9Hz9MBwZwJp:BvCccOCyU8UtkvqHEhn9Tmp","tlshash":"9a2292b2c2a750730423edc234b67b5a21e6d65bfa024480f3fd47bc4bcee56b5164a9","dom_hash":"domhashdef9eb12f0e3fdfd5e356f9e42f450ac","first_seen":"2026-09-19T07:50:23.751811Z","last_seen":"2026-09-19T07:50:23.751811Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bit.clubdealnews.com/","fqdn":"bit.clubdealnews.com","domain":"clubdealnews.com","tld":"com"},"ip":{"addr":"43.166.166.40","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T07:50:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"bit.clubdealnews.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bit.clubdealnews.com","ip":{"addr":"43.166.166.40","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2026-08-11","domain_rank":0,"first_seen":"2026-09-19T07:20:17.170965Z","last_seen":"2026-09-19T07:20:17.170965Z","alert_count":24,"request_count":8,"received_data":59152,"sent_data":4005,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":7,"received_data":352215,"sent_data":3954,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":13319,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bit.clubdealnews.com/probe-sdk.js","fqdn":"bit.clubdealnews.com","domain":"clubdealnews.com","tld":"com"},"ip":{"addr":"43.166.166.40","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cd27d564ae48dc6edb55683d1305f6a","sha1":"6283051b658769b67d0db9001534e640b7179725","sha256":"a866e3b245c069f367ecdc18ea50f01a067f0cd44eef7b751fc382e37e626cf2","sha512":"6024e1564cd24ab7b8df1af4df0682b201a0d18c9f172d0e17393bd9714c8e9070973527fdd6e66e316517a7adf151a02a63dd7d649b6ab31e5469eee9ecbd5a","ssdeep":"384:DFjtTqnwc9t+n7SQ4PaVv6A4ZO+DhArnA:DxMtD+7uPA6v","tlshash":"11725009980524ba9972233adfaf4129fbb646670547d21178bd91583fb082943feffc","size":16767,"data":"","first_seen":"2026-09-19T07:20:22.50612Z","last_seen":"2026-09-19T08:04:40.272858Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bit.clubdealnews.com/script.js","fqdn":"bit.clubdealnews.com","domain":"clubdealnews.com","tld":"com"},"ip":{"addr":"43.166.166.40","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"af3963a9bf8ab55e7d26ef1b8961202a","sha1":"3adfa8ec902b4749fc0079379a973de61a56b2e4","sha256":"0d8def1d624c788ef20880a7c48d9fe935d787b467b8f3ef6302482778704191","sha512":"b8ae381c4a0024d84224dff557c0bbd0e4dfe0b13b51739abbc808779e00c0307a074be1cda3b6936561f27e84784cb1bd63da89abc5ff73be259dbf69b965a3","ssdeep":"","tlshash":"8671857a51a9907101fc53e7b7686398f63904aab202e2d57cbc4d4c60aee1711f3cf9","size":3761,"data":"","first_seen":"2026-09-19T07:20:22.5086Z","last_seen":"2026-09-19T08:04:40.276371Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[ProbeSDK] init0d66fa3c-5ff5-4312-b9dd-19fbac179d4bmap[actor:server1.conn0.watcher16.process8//obj23 class:Object extensible:true frozen:false isError:false ownPropertyLength:12 preview:map[kind:Object ownProperties:map[adx:map[configurable:true enumerable:true value: writable:true] bundle:map[configurable:true enumerable:true value:bit.clubdealnews.com writable:true] country:map[configurable:true enumerable:true value: writable:true] device_id:map[configurable:true enumerable:true value: writable:true] device_os:map[configurable:true enumerable:true value:Windows writable:true] imptype:map[configurable:true enumerable:true value: writable:true] page_host:map[configurable:true enumerable:true value:bit.clubdealnews.com writable:true] placement:map[configurable:true enumerable:true value:landing writable:true] tagid:map[configurable:true enumerable:true value: writable:true] tid:map[configurable:true enumerable:true value: writable:true]] ownPropertiesLength:12] sealed:false type:object]","filename":"https://bit.clubdealnews.com/probe-sdk.js","line_number":505,"column_number":31},{"level":"log","text":"[ProbeSDK] probemap[actor:server1.conn0.watcher16.process8//obj24 class:Object extensible:true frozen:false isError:false ownPropertyLength:38 preview:map[kind:Object ownProperties:map[adx:map[configurable:true enumerable:true value: writable:true] bundle:map[configurable:true enumerable:true value:bit.clubdealnews.com writable:true] country:map[configurable:true enumerable:true value: writable:true] device_id:map[configurable:true enumerable:true value: writable:true] device_os:map[configurable:true enumerable:true value:Windows writable:true] imptype:map[configurable:true enumerable:true value: writable:true] page_host:map[configurable:true enumerable:true value:bit.clubdealnews.com writable:true] placement:map[configurable:true enumerable:true value:landing writable:true] tagid:map[configurable:true enumerable:true value: writable:true] tid:map[configurable:true enumerable:true value: writable:true]] ownPropertiesLength:38] sealed:false type:object]","filename":"https://bit.clubdealnews.com/probe-sdk.js","line_number":341,"column_number":39},{"level":"log","text":"[ProbeSDK] pulsemap[actor:server1.conn0.watcher16.process8//obj27 class:Object extensible:true frozen:false isError:false ownPropertyLength:22 preview:map[kind:Object ownProperties:map[adx:map[configurable:true enumerable:true value: writable:true] bundle:map[configurable:true enumerable:true value:bit.clubdealnews.com writable:true] country:map[configurable:true enumerable:true value: writable:true] device_id:map[configurable:true enumerable:true value: writable:true] device_os:map[configurable:true enumerable:true value:Windows writable:true] imptype:map[configurable:true enumerable:true value: writable:true] page_host:map[configurable:true enumerable:true value:bit.clubdealnews.com writable:true] placement:map[configurable:true enumerable:true value:landing writable:true] tagid:map[configurable:true enumerable:true value: writable:true] tid:map[configurable:true enumerable:true value: writable:true]] ownPropertiesLength:22] sealed:false type:object]","filename":"https://bit.clubdealnews.com/probe-sdk.js","line_number":376,"column_number":37}]},"http":[{"url":{"schema":"https","addr":"bit.clubdealnews.com/probe-sdk.js","fqdn":"bit.clubdealnews.com","domain":"clubdealnews.com","tld":"com"},"ip":{"addr":"43.166.166.40","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:44.960Z","timestamp":1789804184960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit.clubdealnews.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 01 Sep 2026 09:00:00 GMT","end":"Mon, 30 Nov 2026 08:59:59 GMT"},"fingerprint":{"sha1":"75:F1:39:3D:43:08:38:45:27:D5:8A:26:BB:07:BC:E9:77:26:F4:28","sha256":"F8:69:29:AF:C6:B3:E0:32:8A:CD:75:2A:27:A3:7A:23:51:E5:02:2C:EF:AF:EC:65:5B:C6:9E:E6:66:2F:92:46"}}},"request":{"raw":"GET /probe-sdk.js HTTP/1.1\r\nHost: bit.clubdealnews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bit.clubdealnews.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.0\r\ndate: Sat, 19 Sep 2026 07:49:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 16785\r\nlast-modified: Thu, 17 Sep 2026 12:34:12 GMT\r\netag: \"6aabde44-4191\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16785,"size_decoded":17031,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"7cd27d564ae48dc6edb55683d1305f6a","sha1":"6283051b658769b67d0db9001534e640b7179725","sha256":"a866e3b245c069f367ecdc18ea50f01a067f0cd44eef7b751fc382e37e626cf2","sha512":"6024e1564cd24ab7b8df1af4df0682b201a0d18c9f172d0e17393bd9714c8e9070973527fdd6e66e316517a7adf151a02a63dd7d649b6ab31e5469eee9ecbd5a","ssdeep":"384:DFjtTqnwc9t+n7SQ4PaVv6A4ZO+DhArnA:DxMtD+7uPA6v","tlshash":"11725009980524ba9972233adfaf4129fbb646670547d21178bd91583fb082943feffc","first_seen":"2026-09-19T07:20:22.50612Z","last_seen":"2026-09-19T08:04:40.272858Z","times_seen":3,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"bit.clubdealnews.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bit.clubdealnews.com/script.js","fqdn":"bit.clubdealnews.com","domain":"clubdealnews.com","tld":"com"},"ip":{"addr":"43.166.166.40","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:44.962Z","timestamp":1789804184962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit.clubdealnews.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 01 Sep 2026 09:00:00 GMT","end":"Mon, 30 Nov 2026 08:59:59 GMT"},"fingerprint":{"sha1":"75:F1:39:3D:43:08:38:45:27:D5:8A:26:BB:07:BC:E9:77:26:F4:28","sha256":"F8:69:29:AF:C6:B3:E0:32:8A:CD:75:2A:27:A3:7A:23:51:E5:02:2C:EF:AF:EC:65:5B:C6:9E:E6:66:2F:92:46"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: bit.clubdealnews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bit.clubdealnews.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.0\r\ndate: Sat, 19 Sep 2026 07:49:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3761\r\nlast-modified: Fri, 18 Sep 2026 06:14:17 GMT\r\netag: \"6aacd6b9-eb1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3761,"size_decoded":4005,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (540), with CRLF line terminators","md5":"af3963a9bf8ab55e7d26ef1b8961202a","sha1":"3adfa8ec902b4749fc0079379a973de61a56b2e4","sha256":"0d8def1d624c788ef20880a7c48d9fe935d787b467b8f3ef6302482778704191","sha512":"b8ae381c4a0024d84224dff557c0bbd0e4dfe0b13b51739abbc808779e00c0307a074be1cda3b6936561f27e84784cb1bd63da89abc5ff73be259dbf69b965a3","ssdeep":"","tlshash":"8671857a51a9907101fc53e7b7686398f63904aab202e2d57cbc4d4c60aee1711f3cf9","first_seen":"2026-09-19T07:20:22.5086Z","last_seen":"2026-09-19T08:04:40.276371Z","times_seen":3,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"bit.clubdealnews.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bit.clubdealnews.com/bybit-logo.png","fqdn":"bit.clubdealnews.com","domain":"clubdealnews.com","tld":"com"},"ip":{"addr":"43.166.166.40","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:45.220Z","timestamp":1789804185220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit.clubdealnews.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 01 Sep 2026 09:00:00 GMT","end":"Mon, 30 Nov 2026 08:59:59 GMT"},"fingerprint":{"sha1":"75:F1:39:3D:43:08:38:45:27:D5:8A:26:BB:07:BC:E9:77:26:F4:28","sha256":"F8:69:29:AF:C6:B3:E0:32:8A:CD:75:2A:27:A3:7A:23:51:E5:02:2C:EF:AF:EC:65:5B:C6:9E:E6:66:2F:92:46"}}},"request":{"raw":"GET /bybit-logo.png HTTP/1.1\r\nHost: bit.clubdealnews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bit.clubdealnews.com/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.0\r\ndate: Sat, 19 Sep 2026 07:49:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1143\r\nlast-modified: Wed, 16 Sep 2026 16:16:04 GMT\r\netag: \"6aaac0c4-477\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1143,"size_decoded":1374,"mime_type":"image/png","magic":"PNG image data, 87 x 34, 8-bit/color RGBA, non-interlaced","md5":"deeb62eef39f6335845e446c149e9491","sha1":"39ae2b6a5b5b90209f253c05d7df0cc499a24f23","sha256":"c9c137c9a7669c7b8983f0eb8eaa4cc5b7e54ddf532d1813907dfe62a07647fa","sha512":"cfded74c9fb8e38eea685bf35eb5950c5dc9a1bd4ca4f607d0522bd4b838aa8f5945422f77213745fb8771909666f88bfdffee94a63cbe22689bfb64f55e0e15","ssdeep":"","tlshash":"0f21f6103a89c77ac90e70033220813359a31f803ea2e570b0dbc296af2fe641db03d3","first_seen":"2026-09-19T07:20:22.512815Z","last_seen":"2026-09-19T08:04:40.252633Z","times_seen":3,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"bit.clubdealnews.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:45.258Z","timestamp":1789804185258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bit.clubdealnews.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249493\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-21T04:48:09.009713Z","times_seen":294084,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":26,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bit.clubdealnews.com/v2/probe","fqdn":"bit.clubdealnews.com","domain":"clubdealnews.com","tld":"com"},"ip":{"addr":"43.166.166.40","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:45.419Z","timestamp":1789804185419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit.clubdealnews.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 01 Sep 2026 09:00:00 GMT","end":"Mon, 30 Nov 2026 08:59:59 GMT"},"fingerprint":{"sha1":"75:F1:39:3D:43:08:38:45:27:D5:8A:26:BB:07:BC:E9:77:26:F4:28","sha256":"F8:69:29:AF:C6:B3:E0:32:8A:CD:75:2A:27:A3:7A:23:51:E5:02:2C:EF:AF:EC:65:5B:C6:9E:E6:66:2F:92:46"}}},"request":{"raw":"POST /v2/probe HTTP/1.1\r\nHost: bit.clubdealnews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bit.clubdealnews.com/\r\nContent-Type: application/json\r\nX-App-Key: 7a57a5a743894a0e\r\nContent-Length: 790\r\nOrigin: https://bit.clubdealnews.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":790,"data":"{\"placement\":\"landing\",\"adx\":\"\",\"tid\":\"\",\"imptype\":\"\",\"country\":\"\",\"bundle\":\"bit.clubdealnews.com\",\"tagid\":\"\",\"device_id\":\"\",\"page_host\":\"bit.clubdealnews.com\",\"device_os\":\"Windows\",\"device_model\":\"\",\"platform\":\"Windows\",\"fingerprint_id\":\"48702ba4\",\"sw\":1280,\"sh\":1024,\"dpr\":1,\"wf\":\"Mesa|llvmpipe, or similar\",\"vf\":\"Mesa\",\"af\":\"44100:0\",\"cf\":\"s9mJl6TPjVEAAAAQZGVCRzM5NTdGRUIwRjEzNDlBQzbdznSqAAAAAElFTkSuQmCC\",\"vendor\":\"Mesa\",\"renderer\":\"llvmpipe, or similar\",\"is_t\":false,\"is_tw\":false,\"is_ci\":true,\"hw_mem\":0,\"hw_cpu\":8,\"ts_points\":0,\"ts_support\":false,\"sensor_support\":true,\"sensor_permission\":\"unknown\",\"ad_rect_x\":0,\"ad_rect_y\":0,\"ad_render_width\":1280,\"ad_render_height\":2389.367,\"time\":1789804185362,\"probe_id\":\"0d66fa3c-5ff5-4312-b9dd-19fbac179d4b\",\"exposure_start_ts\":1789804185322}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.0\r\ndate: Sat, 19 Sep 2026 07:49:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 61\r\naccess-control-allow-headers: Content-Type, X-App-Key\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61,"size_decoded":359,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7f9bd141fa9f5ccb67bb2816ab36b74b","sha1":"5d4d242e23e9a619b87db1ec7148bbd464605319","sha256":"843afc4450f9dea3a9ec21de9d5701c85816dc8b7ad8824341a7dd38755babb1","sha512":"b3526021785258a482f97ca5e8698c49e294e53efe2b313ea410b879dccbd7ba067bd4e6a559c718f36828e2d250d2159ef357fc4b6b6cf545bbf3ab89a0fcc5","ssdeep":"","tlshash":"10a0026b428d51ddf045178175b8ee71ca1a00524015004d6d89119da76a91e9685d4a","first_seen":"2026-09-19T07:50:23.756564Z","last_seen":"2026-09-19T07:50:23.756564Z","times_seen":1,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"bit.clubdealnews.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bit.clubdealnews.com/favicon.ico","fqdn":"bit.clubdealnews.com","domain":"clubdealnews.com","tld":"com"},"ip":{"addr":"43.166.166.40","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:45.561Z","timestamp":1789804185561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit.clubdealnews.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 01 Sep 2026 09:00:00 GMT","end":"Mon, 30 Nov 2026 08:59:59 GMT"},"fingerprint":{"sha1":"75:F1:39:3D:43:08:38:45:27:D5:8A:26:BB:07:BC:E9:77:26:F4:28","sha256":"F8:69:29:AF:C6:B3:E0:32:8A:CD:75:2A:27:A3:7A:23:51:E5:02:2C:EF:AF:EC:65:5B:C6:9E:E6:66:2F:92:46"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bit.clubdealnews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bit.clubdealnews.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.0\r\ndate: Sat, 19 Sep 2026 07:49:45 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 18 Sep 2026 06:20:13 GMT\r\netag: W/\"6aacd81d-23d7\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9175,"size_decoded":4094,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2094), with CRLF line terminators","md5":"37dad3f618a12d2006238e841d0bd1da","sha1":"69fb5c47eb29e10511a5a4c3dbcc69e9a1a3ffcb","sha256":"e1b3f6c214f4b7a4dd59fe39546279f4cc0def8aea35ec5985ee7bdad259d269","sha512":"a50ca9359a86568c0274250b715b3f8d40be8183349d761b0229a005226191fecdeed3c6e62c3dc1fcb1861e389481b5faf4422273031237d175005100253985","ssdeep":"192:QwVOrPK5HyUfB3Ye4Y7aFmI0rsbRWAg/M8lnYjBWTS+X+M0:NOCyU8Ia3NGE+nYdW0","tlshash":"d01251b1929310330573a9d239b63b1ef1e6d58bea020980f3fd47b91beed54b967409","first_seen":"2026-09-19T07:20:22.504853Z","last_seen":"2026-09-19T08:04:40.270527Z","times_seen":3,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"bit.clubdealnews.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bit.clubdealnews.com/styles.css","fqdn":"bit.clubdealnews.com","domain":"clubdealnews.com","tld":"com"},"ip":{"addr":"43.166.166.40","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:44.957Z","timestamp":1789804184957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit.clubdealnews.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 01 Sep 2026 09:00:00 GMT","end":"Mon, 30 Nov 2026 08:59:59 GMT"},"fingerprint":{"sha1":"75:F1:39:3D:43:08:38:45:27:D5:8A:26:BB:07:BC:E9:77:26:F4:28","sha256":"F8:69:29:AF:C6:B3:E0:32:8A:CD:75:2A:27:A3:7A:23:51:E5:02:2C:EF:AF:EC:65:5B:C6:9E:E6:66:2F:92:46"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: bit.clubdealnews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bit.clubdealnews.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.0\r\ndate: Sat, 19 Sep 2026 07:49:45 GMT\r\ncontent-type: text/css\r\ncontent-length: 17064\r\nlast-modified: Wed, 16 Sep 2026 16:16:04 GMT\r\netag: \"6aaac0c4-42a8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17064,"size_decoded":17296,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"20c18c2f47b574599f8b5ea865707acd","sha1":"2a783ceae35dbed7d5ee5285413177166a07ed6f","sha256":"30f32548625b3c680562b564cfcdb483c2f14ee333407d9bc50cc324678d5f13","sha512":"18208eb4ad0d19b23e227c986b486c2b1ce3121a37d98ce55c8352e5348625d42a8a9cb05439b0f4aeef9f58b9f9d4126266f6e358a6de7c2d4cb57ad885c30d","ssdeep":"192:7DPseCXTijGzFrS/z1gO8dV+ziB8hK/g/0/U/Xq/1ftckvMi+NN6iLa0ST/s/bBk:5jLKpPYcsChk4io0D6","tlshash":"6a726289e7266165ba37efa8fb865b5ef78154135b0107b97ee0800c62c51be9231f8c","first_seen":"2026-09-19T07:20:22.511338Z","last_seen":"2026-09-19T08:04:40.25182Z","times_seen":3,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"bit.clubdealnews.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:45.260Z","timestamp":1789804185260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bit.clubdealnews.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249493\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-21T04:48:09.009713Z","times_seen":294084,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":30,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:45.267Z","timestamp":1789804185267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bit.clubdealnews.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18940\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 12:13:26 GMT\r\nexpires: Thu, 16 Sep 2027 12:13:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243379\r\nlast-modified: Tue, 09 Sep 2025 18:33:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18940,"size_decoded":19753,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18940, version 1.0","md5":"5c8b2708e9cd88a6c9e2172fd1a09d80","sha1":"f8da9a4c7fe5fbb441e8e1e2587f8e7e8e25bf8b","sha256":"20fc1e117a255531a9f1bfc780fa9827a22820f8e07560b155323dff5fd908f2","sha512":"d56292486b6274e3d0d5a00cfa19573469ac4d4173fbdc786cdede8d9e18b8eecba8aa647a115b32770feea0ac2d59c54092642863d4cc2ea725560435c6b780","ssdeep":"384:B5OeSmylzizCljGvu0333XLJyBo9/fsItLbLvAsik1LJ57o:BTylizClUpH9mo1UIt/Lykpno","tlshash":"3c82e0a7f1a24589d84b87c02098e7546967b70821d6acea411be4d90bdbf5e20ad32e","first_seen":"2025-09-12T00:27:30.877732Z","last_seen":"2026-09-20T17:03:02.928769Z","times_seen":3449,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":53,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bit.clubdealnews.com/v2/behavior","fqdn":"bit.clubdealnews.com","domain":"clubdealnews.com","tld":"com"},"ip":{"addr":"43.166.166.40","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:48.326Z","timestamp":1789804188326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit.clubdealnews.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 01 Sep 2026 09:00:00 GMT","end":"Mon, 30 Nov 2026 08:59:59 GMT"},"fingerprint":{"sha1":"75:F1:39:3D:43:08:38:45:27:D5:8A:26:BB:07:BC:E9:77:26:F4:28","sha256":"F8:69:29:AF:C6:B3:E0:32:8A:CD:75:2A:27:A3:7A:23:51:E5:02:2C:EF:AF:EC:65:5B:C6:9E:E6:66:2F:92:46"}}},"request":{"raw":"POST /v2/behavior HTTP/1.1\r\nHost: bit.clubdealnews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bit.clubdealnews.com/\r\nContent-Type: application/json\r\nX-App-Key: 7a57a5a743894a0e\r\nContent-Length: 459\r\nOrigin: https://bit.clubdealnews.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":459,"data":"{\"placement\":\"landing\",\"adx\":\"\",\"tid\":\"\",\"imptype\":\"\",\"country\":\"\",\"bundle\":\"bit.clubdealnews.com\",\"tagid\":\"\",\"device_id\":\"\",\"page_host\":\"bit.clubdealnews.com\",\"device_os\":\"Windows\",\"device_model\":\"\",\"platform\":\"Windows\",\"document_hidden\":false,\"visible_duration_ms\":3001,\"page_hidden_count\":0,\"has_focus\":false,\"time\":1789804188323,\"event_type\":\"pulse\",\"probe_id\":\"0d66fa3c-5ff5-4312-b9dd-19fbac179d4b\",\"exposure_start_ts\":1789804185322,\"seq\":1,\"referer\":\"\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.0\r\ndate: Sat, 19 Sep 2026 07:49:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 11\r\naccess-control-allow-headers: Content-Type, X-App-Key\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":309,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-09-21T04:09:39.790565Z","times_seen":21265,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"bit.clubdealnews.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:45.261Z","timestamp":1789804185261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bit.clubdealnews.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249493\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-21T04:48:09.009713Z","times_seen":294084,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":38,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:45.263Z","timestamp":1789804185263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bit.clubdealnews.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249493\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-21T04:48:09.009713Z","times_seen":294084,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":45,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:45.265Z","timestamp":1789804185265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bit.clubdealnews.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 13 Sep 2026 12:42:33 GMT\r\nexpires: Mon, 13 Sep 2027 12:42:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 500832\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-09-21T03:44:47.776697Z","times_seen":21492,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":51,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bit.clubdealnews.com/","fqdn":"bit.clubdealnews.com","domain":"clubdealnews.com","tld":"com"},"ip":{"addr":"43.166.166.40","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T07:49:44.162Z","timestamp":1789804184162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bit.clubdealnews.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 01 Sep 2026 09:00:00 GMT","end":"Mon, 30 Nov 2026 08:59:59 GMT"},"fingerprint":{"sha1":"75:F1:39:3D:43:08:38:45:27:D5:8A:26:BB:07:BC:E9:77:26:F4:28","sha256":"F8:69:29:AF:C6:B3:E0:32:8A:CD:75:2A:27:A3:7A:23:51:E5:02:2C:EF:AF:EC:65:5B:C6:9E:E6:66:2F:92:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bit.clubdealnews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.0\r\ndate: Sat, 19 Sep 2026 07:49:44 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 18 Sep 2026 06:20:13 GMT\r\netag: W/\"6aacd81d-23d7\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9175,"size_decoded":4094,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2094), with CRLF line terminators","md5":"37dad3f618a12d2006238e841d0bd1da","sha1":"69fb5c47eb29e10511a5a4c3dbcc69e9a1a3ffcb","sha256":"e1b3f6c214f4b7a4dd59fe39546279f4cc0def8aea35ec5985ee7bdad259d269","sha512":"a50ca9359a86568c0274250b715b3f8d40be8183349d761b0229a005226191fecdeed3c6e62c3dc1fcb1861e389481b5faf4422273031237d175005100253985","ssdeep":"192:QwVOrPK5HyUfB3Ye4Y7aFmI0rsbRWAg/M8lnYjBWTS+X+M0:NOCyU8Ia3NGE+nYdW0","tlshash":"d01251b1929310330573a9d239b63b1ef1e6d58bea020980f3fd47b91beed54b967409","first_seen":"2026-09-19T07:20:22.504853Z","last_seen":"2026-09-19T08:04:40.270527Z","times_seen":3,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":133,"connect":110,"send":0,"wait":113,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"bit.clubdealnews.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"bit.clubdealnews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:44.956Z","timestamp":1789804184956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bit.clubdealnews.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 19 Sep 2026 07:49:45 GMT\r\ndate: Sat, 19 Sep 2026 07:49:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":1486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-09-21T01:00:29.785681Z","times_seen":19251,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":33,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bit.clubdealnews.com/","date":"2026-09-19T07:49:45.257Z","timestamp":1789804185257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bit.clubdealnews.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 249493\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-21T04:48:09.009713Z","times_seen":294084,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":21,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}