{"report_id":"9b0d80eb-2c0e-4d44-ac7d-48e13c66be56","version":0,"status":"done","tags":[],"date":"2026-08-18T13:59:19Z","url":{"schema":"http","addr":"bits-vip.com/","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"bits-vip.com/#/home","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"title":"BitSVIP","dom":{"size":3466580,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61651)","md5":"df7a91545bd68936051c470df42c92df","sha1":"e654319fc946596997a10209ebf4b16aff537347","sha256":"035f9ce2b82e8bf49b29090b5b6c2cd6e01cad45c96f0a60057d4fd2fa638b75","sha512":"4064f446132c23c6d925db333a64c86241a340b6f7aaeebb41acb5f75ca3e4f50e3cd7c5b6d1fa3011bf2088f2b837fd8b12508951991ee66049a2cb5bb087cd","ssdeep":"49152:jvgf8A3UspB/qDVcMU/AiAJ0N2AbUE/VcMUGw:X","tlshash":"21f51271bb1c19af01ab43d9e3b27e4c2f5dd1abb5418854799c14b22ee3d11fd2b8a0","dom_hash":"domhash618d3b8ab1713919847c3d8c06ac3b53","first_seen":"2026-08-18T13:59:33.347032Z","last_seen":"2026-08-18T13:59:33.347032Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bits-vip.com/","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T13:59:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"w-20lbxnp12.bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"w-20lbxnp12.bits-vip.com","ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-08-04","domain_rank":0,"first_seen":"2026-08-18T13:49:06.448303Z","last_seen":"2026-08-18T13:49:06.448303Z","alert_count":8,"request_count":9,"received_data":6180,"sent_data":5403,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"recharge-override.pages.dev","ip":{"addr":"172.66.44.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-06-29T18:41:47.03049Z","last_seen":"2026-08-18T11:45:45.150724Z","alert_count":0,"request_count":1,"received_data":3551,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bits-vip.com","ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-08-04","domain_rank":0,"first_seen":"2026-08-18T13:49:06.446622Z","last_seen":"2026-08-18T13:49:06.446622Z","alert_count":21,"request_count":21,"received_data":42273891,"sent_data":11670,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-12-16T21:47:18.926773Z","last_seen":"2026-08-18T13:49:07.222063Z","alert_count":0,"request_count":34,"received_data":424955,"sent_data":19693,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bits-vip.com/assets/en.7a364be2.js","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"a0cbe4582c8a7d4a25392a41ff7d5ee3","sha1":"ed18099318fbc3da7172283d7697609fe4924a2f","sha256":"9b20c6f5d74de69c7684d8387e85375c596b8ed7366cde95b32b09563c5b2ad0","sha512":"7399195eab6f0784ce9b3e6adb7e549d4272d5dccc1fa1f2c335fb63011644bf070da98f850e09f20f071e06d0b531b16eb66f340b83410abf64968f5f7cd129","ssdeep":"768:U9tZcEw/od6rUOdAFsifnAMC2rAaAMFVoP6+6sPnhmDLqAIo7hspmwO6fpk7aOjD:hposUOdebE2rdFVjsPhOsujyWXjC8F","tlshash":"7343298e7e0a94aa09f3937679ce1f5020fa05c18265841f4bfcc5fc53e2b5a6367728","size":55257,"data":"","first_seen":"2026-04-06T13:18:05.333105Z","last_seen":"2026-08-18T13:59:33.473259Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f81f3c3c9ed9699db2cfea857754f1b","sha1":"191a36e7d66c4592ccb35f6408dcb149e68f3547","sha256":"60337cf4ced1d706c23ad15adcb1d2bd67edaaca1d8f0f803a81e46feddbb8bb","sha512":"add2532f26437fd5d4967043b070b134299772baa19fb23daf63219242e3a266062379e7900c316def6e6f622bcf5beeeb7cc8efae1e622aa9fcb6088f927d7a","ssdeep":"","tlshash":"1d116bfe191aa02d6303404e976b7911642650b9401a185173ccda9dbb9ab7dd0cbb8d","size":1034,"data":"","first_seen":"2026-08-18T13:49:14.195639Z","last_seen":"2026-08-18T13:59:33.532173Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recharge-override.pages.dev/vendor.Z6835.js","fqdn":"recharge-override.pages.dev","domain":"recharge-override.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a28b0a80e5d6aac8c7c343fd2025ffe","sha1":"47d99a9a5a0a86d10cffea91b6218d299f98571d","sha256":"e237183641e7ab0959923ad0b1405fad86bdd15705b31b654adebd8dcd96eedb","sha512":"06b29342733075eb366e0883c26a13720dfd932b39ea8056ed0e16fc42bda76352082f64c622e3445608e4fd91b7db69385ea0ac63c0fcb39c92ebd93a3060fd","ssdeep":"","tlshash":"da51a7a94a54c27749d20feea0b3c3cc7e623449b507e86a5b0c0c1d5547fa74ea6ddc","size":2761,"data":"","first_seen":"2026-07-17T15:25:32.014748Z","last_seen":"2026-08-18T13:59:33.405518Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/charting_library/charting_library.min.js","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-18T14:05:37.214182Z","times_seen":1368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/assets/index.29ebc297.js","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c30d839dbb59f10999471b2b2b9a2fe8","sha1":"61b528289f2963b8219c255d78231ffd3fad1edd","sha256":"7f5831edf7b884624a46b4b9267a93a693d44b27a174a9747caa20bbd4a33d76","sha512":"e01d3cc7ce48a5114bc4c37da61fd85228cbf0a56f8c28fd25153908a4ad067801c45fe834a13b6eedf7df8390245ff52b16f8753af2dc520586735f57e6ed60","ssdeep":"49152:bWZyDc8w9mzMF9yG/hLqfVgcJaIT3XBIkfSKnMZqbzBdVCMoV+1jf55Zd7Ib8vc6:COgoCMdL","tlshash":"5946bf1573d5313e8746f0a1bc9bcc4ab73d6a1863c184a8625c94b46969c38c7bfeec","size":5643758,"data":"","first_seen":"2026-08-18T13:49:14.198169Z","last_seen":"2026-08-18T13:59:33.538573Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/assets/CommonMethod.8eedd4a3.js","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"bed6f735ee3eeebb47b4d8938a275fa3","sha1":"77440fd7e87c279f79e1421cc2138f79a5e94973","sha256":"1f55b9f50d93897c73f7e850794e523e52d16f9034118c4b969229a65c4a19d1","sha512":"2949028a739149ccb599fe862771e0f48516fcacd7f754268f2d651956529a35c3febae718841b396ff465c8916fee3bc2dc752c8f56efd31c9ef034c63af125","ssdeep":"","tlshash":"4a11ccd0e48dfb290368dba5a2248033f25d58b51e288368c0f95eb57b2d449b79ea30","size":871,"data":"","first_seen":"2025-06-07T20:38:42.155028Z","last_seen":"2026-08-18T13:59:33.359245Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/assets/index.3224b3d7.js","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"386c9d3df478d699019456b980577983","sha1":"bb65dc6b44522afcc5105b836a7a8b046c85d766","sha256":"ec967b1b86761f0e814cd692f73e4a4cc71134a9f08aedb49d7e8cb326501b10","sha512":"06654c5e9649f7ad1b2d92d5bfaa3eb554ee2d736897f87d08d05764aa923397d25bd7e3a0d67c91c9e012fa4b3cf27ba89376265847a5274a517208aa004b78","ssdeep":"768:+h6gUT+OS1wdB+8ro6k7y1khsjNc5nnIBVzJD0DdcWerxE:C60Fb","tlshash":"63c261adf51e8a78f1f79851141c04463a4cbfd381508653b6fc3e15aba2ebc278d72a","size":27531,"data":"","first_seen":"2025-06-07T20:38:42.110256Z","last_seen":"2026-08-18T13:59:33.41555Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/assets/core.esm.6acae16e.js","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","size":40515,"data":"","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-08-18T14:09:30.97089Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"[intlify] Not found 'footer1' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer2' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer3' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer4' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer5' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer6' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer7' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer8' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer9' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer1' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer2' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer3' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer4' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer5' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer6' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer7' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer8' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104},{"level":"warn","text":"[intlify] Not found 'footer9' key in 'en' locale messages.","filename":"https://bits-vip.com/assets/index.29ebc297.js","line_number":151,"column_number":104}]},"http":[{"url":{"schema":"https","addr":"bits-vip.com/resource/images/common/home/downloadimg.png?1787061527105","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.319Z","timestamp":1787061527319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /resource/images/common/home/downloadimg.png?1787061527105 HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Apr 2024 12:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662b98dc-22e9a\"\r\nexpires: Thu, 17 Sep 2026 13:58:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143002,"size_decoded":142783,"mime_type":"image/png","magic":"PNG image data, 1368 x 972, 8-bit colormap, non-interlaced","md5":"4e59e1224e1c27738197d0b1c328c15c","sha1":"84f186b75c956ae9b5ff26b8d0e2b32ff0492e98","sha256":"1811704cad965db80f02ccca4a90b177600997e3c26128f4fd5a15e0dace500c","sha512":"7873a8c641cef1cc30fd926b9f99f558de23adca684a4c61c6d439b791a3e35a539d5c4da8970957d0fc1d1aea6a11939685779a41990f121c72a9426d085774","ssdeep":"3072:ruhlDWNa+r4srR2T+P9OkmGgv8uN2u7LM7xJNVewRLUhJJg8:hBrjAXEw5uJNVshJJT","tlshash":"6ed31283113a1650cdfefefb4a158f47861629b4c81ca35e5ebb29caa155f03f3a1603","first_seen":"2024-08-19T17:34:46.648366Z","last_seen":"2026-08-18T14:09:30.974481Z","times_seen":154,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/resource/images/common/home/investimg.png?1787061527109","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.320Z","timestamp":1787061527320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /resource/images/common/home/investimg.png?1787061527109 HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Apr 2024 12:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662b98dc-12ec5\"\r\nexpires: Thu, 17 Sep 2026 13:58:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77509,"size_decoded":77741,"mime_type":"image/png","magic":"PNG image data, 960 x 960, 8-bit colormap, non-interlaced","md5":"9267ad6af6eaacc24390a8f33870ef76","sha1":"6541d731da0afcd1af6587e1b4c13bc5f1fe4d52","sha256":"aa6a9c639280f31ff25cd23af4f8cb4f12b731b972a4468ae251daad06117b11","sha512":"de85a8516252d1fc79ef5fd40ddc19ebd4e3f7ca0e933bb0ae91715748bde79cca7b3e650851d421dfa44e69236722340f17deacae4b2e83150aebfea98b9eaa","ssdeep":"1536:i4LGU8vqIyjyXqRwksQsohMUqQHwqO3X6GU0NSKqYN/o/rTTkPjtbG7jqs:i4LGWIyjyaGksQvLqQHwx97SKqC/o/rh","tlshash":"df73013bb7bc0646900205a14fb212e92b660cbbe647fc86fe711ea19936d2b5115acc","first_seen":"2024-08-19T17:34:46.66014Z","last_seen":"2026-08-18T14:09:30.957217Z","times_seen":161,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/assets/CommonMethod.8eedd4a3.js","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.080Z","timestamp":1787061526080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /assets/CommonMethod.8eedd4a3.js HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 871\r\nlast-modified: Fri, 26 Apr 2024 12:06:50 GMT\r\netag: \"662b98da-367\"\r\nexpires: Wed, 19 Aug 2026 01:58:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":871,"size_decoded":1222,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (870)","md5":"bed6f735ee3eeebb47b4d8938a275fa3","sha1":"77440fd7e87c279f79e1421cc2138f79a5e94973","sha256":"1f55b9f50d93897c73f7e850794e523e52d16f9034118c4b969229a65c4a19d1","sha512":"2949028a739149ccb599fe862771e0f48516fcacd7f754268f2d651956529a35c3febae718841b396ff465c8916fee3bc2dc752c8f56efd31c9ef034c63af125","ssdeep":"","tlshash":"4a11ccd0e48dfb290368dba5a2248033f25d58b51e288368c0f95eb57b2d449b79ea30","first_seen":"2025-06-07T20:38:42.155028Z","last_seen":"2026-08-18T13:59:33.359245Z","times_seen":9,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/assets/core.esm.6acae16e.js","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.080Z","timestamp":1787061526080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /assets/core.esm.6acae16e.js HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Apr 2024 12:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662b98da-9e43\"\r\nexpires: Wed, 19 Aug 2026 01:58:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40515,"size_decoded":11861,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39692)","md5":"fcf762aec063d693c66f21eca26e3091","sha1":"d83510b38c0c7a4e4627ceda1107b68cfd28cef2","sha256":"11e6ff1f95930e8379e15090080d15075acbd04b1ec637ffde99a2a886bf7b09","sha512":"3943ad0be62413edb66655e619ce6a93b35ad9c48bea4ace929536f9d9eb9a35c8d97e46ae1a610c0d745d3bc390755cee2dc93e746552e2c708b667177e6141","ssdeep":"768:/7kqnFvzaZ10VDhaQt30RSDCE4bHDjPTOJWmmB:/7kGq0VdJetB","tlshash":"5203fa8ab620786403cfa2b9e35f27091137505d710544acb859fffe5dbe92c12a7bb8","first_seen":"2025-06-07T20:38:42.079529Z","last_seen":"2026-08-18T14:09:30.97089Z","times_seen":122,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/favicon.ico","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.564Z","timestamp":1787061526564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:46 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 269342\r\nlast-modified: Thu, 25 Jun 2026 18:07:48 GMT\r\netag: \"6a3d6e74-41c1e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":269342,"size_decoded":269618,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x-1, 32 bits/pixel","md5":"c3da5e9626f7532c33f182112143843e","sha1":"1cfe9f4425120d7da2298b78edf56d6cc15f698a","sha256":"652552959ddfc1b9b7089e6ed3b292b1ac02600f12f4b090e9a211d1a5cde611","sha512":"f838857f7f05eccb3540f13d18964e2fc244a1bfbd5199ea263d812215f5a3aa362aaedc8b30907b2c615d953be3c7bdfe432db36ec3bf83a9d2f8994efb062d","ssdeep":"1536:wvL2iOhcpNwpEm77IexraRFz/bqm9DrWbult3aPSQCh5fGi9DcCPOoVUEK2WC3r8:jcp27xxAh/b5RiQ/znV3wB5Lij6","tlshash":"af44d5c7fe50d80ccd3404be88d7d983876f2c69a89a6184b9d7b77a047474b2a37267","first_seen":"2026-08-18T13:49:14.135599Z","last_seen":"2026-08-18T13:59:33.362077Z","times_seen":2,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":223,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/914430ea7c904a21bbb18e7e235febf2.jpg","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.279Z","timestamp":1787061527279,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/914430ea7c904a21bbb18e7e235febf2.jpg HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5190\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846519B1E8233034CCA046\r\nAccept-Ranges: bytes\r\nETag: \"D8D500C828478562B2B3AA2869FC9701\"\r\nLast-Modified: Mon, 18 Nov 2024 11:48:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7091754642174740098\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2NUAyChHhWKys6ooafyXAQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5190,"size_decoded":5764,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Flag design. German flag on the white background, isolated flat layout for your designs. Vector illustration.,\u0001, xresolution=159, yresolution=167], progressive, precision 8, 612x367, components 3","md5":"d8d500c828478562b2b3aa2869fc9701","sha1":"2cd509d8b600ce419f8094a33e4a95b7066d2849","sha256":"e531a66b85a0b5a1f13b6ed8da4f303dc6ece97f4b965ee125446734f8aceef6","sha512":"5cb38247c2b0b79c2432b317d98110f05cf9372326466fd12ab47ef08e03d4740843e4cfd86a3d9f07ff85815d5233b799a57dfbe45e36e08ed2fe61828bd815","ssdeep":"96:6DWWqknsxF/2Dmn/4DGFbi8QvKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKn:6Ukni+JaRg","tlshash":"0cb19bef79920102c48679b3185d476b7a243a20a34b46e3a4d48d73bc608f7f7d7997","first_seen":"2026-04-06T13:18:05.335259Z","last_seen":"2026-08-18T13:59:33.367397Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2410,"timings":{"blocked":2141,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/matic.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.294Z","timestamp":1787061527294,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/matic.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: application/xml\r\nContent-Length: 384\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846519B1E8233034EA9B46\r\nx-oss-server-time: 1\r\nx-oss-ec: 0026-00000001\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T17:37:31.215577Z","times_seen":17958830,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/AUDUSD.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.308Z","timestamp":1787061527308,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/AUDUSD.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 3225\r\nConnection: keep-alive\r\nx-oss-request-id: 6A8465194C8B37313496FF00\r\nAccept-Ranges: bytes\r\nETag: \"854FA8B366E894776AFA4E37914A8FE4\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1324370303077704430\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hU+os2bolHdq+k43kUqP5A==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3225,"size_decoded":3773,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"854fa8b366e894776afa4e37914a8fe4","sha1":"6f1d264223564f8e636b91ed6617803bf9871411","sha256":"a392b041e5e960c44e5e56c907445985c0da0861831943724ffc126b6eff8649","sha512":"d5289137bde00ce284ee7ac1969352694ec709c02f3a684b71e6e37292f03838c4d638f168f11a4847b05f381da0462a62759f1f01339b63e706a9b33b2cc2c8","ssdeep":"","tlshash":"3b614d61c90b9afa079292f479194841789dc208add54fa41df273104ebff251a0083b","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-08-18T13:59:33.369347Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2728,"timings":{"blocked":2450,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/resource/fonts/PINGFANG-SC-HEAVY.ttf","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.248Z","timestamp":1787061527248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /resource/fonts/PINGFANG-SC-HEAVY.ttf HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bits-vip.com/assets/index.1f16077c.css\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:47 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11114788\r\nlast-modified: Fri, 26 Apr 2024 12:06:52 GMT\r\netag: \"662b98dc-a99924\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11114788,"size_decoded":11115079,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", name offset 0xa256ec","md5":"c11d4835ea9813d0e654d4c375257421","sha1":"44bdbe2b862dd5f236417788db8b286ebb2265af","sha256":"61a3b6d3ef3960a85ea310f8667b8615da678e9edea8b5036c8d9a09aea7169c","sha512":"1fe75b597c55aa2319b1d0efb5b02e4fd4b4e8a4772cf321100658f80957481254e68756b2e90f2cc7bdc0f585043659a10af097d18995037bd4e59917c18938","ssdeep":"24576:BkgBFPX1+oxFnjOPwVgsVDQezA7FEWXS5ltkCbudYqrj2wn0:BkkZC1q","tlshash":"07256dd3c7c87d299a21fd3c2510f66bf48e50088a25d2f9cf672f3618569744ea8eb1","first_seen":"2025-07-29T21:26:30.325138Z","last_seen":"2026-08-18T14:05:37.215846Z","times_seen":79,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":555,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.0ed68f6ddb2ae4f4bad26324135f723b5.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.264Z","timestamp":1787061527264,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ed68f6ddb2ae4f4bad26324135f723b5.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 1721\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846518E61358373064F6EB\r\nAccept-Ranges: bytes\r\nETag: \"89CF5AD8C480F4A55D6925FC628F5575\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18183737992525434775\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ic9a2MSA9KVdaSX8Yo9VdQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1721,"size_decoded":2270,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"89cf5ad8c480f4a55d6925fc628f5575","sha1":"5be55de41d3295d8c754b7c96cda4827e77ca3c8","sha256":"0a057beabf626a17bf1613e22c6b3e157a5f053399ebe6cdbd94b0f98248cfd8","sha512":"c52a953f14b72b98ddd56027ede8d65c6f45f67f5afb478e2f425704ccab319c8af48a60fd39274752635d605e9f7cb501a7722484f98172f8b433408061da22","ssdeep":"","tlshash":"f1312b22ceac0e0936d41d39099c9e9125237d3bb0cd41f46c03068d4460c4b5c7e3bb","first_seen":"2025-05-29T23:41:24.321913Z","last_seen":"2026-08-18T13:59:33.379841Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1382,"timings":{"blocked":-1,"dns":22,"connect":273,"send":0,"wait":274,"receive":0,"ssl":813},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/bluzelle.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.300Z","timestamp":1787061527300,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/bluzelle.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 25833\r\nConnection: keep-alive\r\nx-oss-request-id: 6A8465198B90443931F93D8B\r\nAccept-Ranges: bytes\r\nETag: \"D00EFBBDFD298720E829AE2434E8300F\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8445431794217583994\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0A77vf0phyDoKa4kNOgwDw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25833,"size_decoded":26382,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d00efbbdfd298720e829ae2434e8300f","sha1":"5ce11234597ef8050d23bc55f1bf48d4a1152451","sha256":"f42a835f279c3889d4384579c4c6a3688442b7f1c8df12fd3fa4b3741ce140a7","sha512":"6d2425cd1c13c3b83701c51c2afee6c08449c491422f3613f956025e1623993c78d242d4dbeaca645f298d7fee413c9268374dfcfe0766890027eb5c796ef3b7","ssdeep":"768:3EMrF5XvEfBimA9K2mX7VDsJHCf96WOdkKCbjGO0hb:3VR5XEBimAQvGicWqCbp0","tlshash":"72c2e0aed8d8c48878afaa3179d5c071d7b5e9bee9717c2271ce843319507071c0e9b8","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-08-18T13:59:33.380583Z","times_seen":122,"resource_available":false,"data":null}},"time_used":1930,"timings":{"blocked":1632,"dns":0,"connect":0,"send":0,"wait":288,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/lever.jpeg","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.301Z","timestamp":1787061527301,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/lever.jpeg HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5326\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846519B1E8233034649E46\r\nAccept-Ranges: bytes\r\nETag: \"C58F4C5B071E5912836E45C01AFA9E03\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15115948942539943788\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: xY9MWwceWRKDbkXAGvqeAw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5326,"size_decoded":5876,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3","md5":"c58f4c5b071e5912836e45c01afa9e03","sha1":"b6f7e2a28f9041fac42acd69b8713fd811ea9ea5","sha256":"ea10356f413860e7186404344d50b9516f8e0fe1317df7d53fc81ce81c8e7bb3","sha512":"d61e62b7171e37d01a1453feaf4685f922dad6afe642d687afd248eda211886d2b75d3afe06dbe9fc5bcd483a28cfe3f4541f0a1af9325c0a3c0163bb74a29dc","ssdeep":"96:emHUsasfObCPgp0gc3oj3OSj6rTvdv6OzmrzobXdslboM65PHMZ1:uJO1Yp0gtjhjIvdv6OKrzobN465MD","tlshash":"c3b16d72b762d9d8c519e1f1da024ba2600d6e7b01bf9cc95f6d1d9119f4081cb813cc","first_seen":"2024-06-11T12:53:28Z","last_seen":"2026-08-18T13:59:33.381334Z","times_seen":291,"resource_available":false,"data":null}},"time_used":2134,"timings":{"blocked":1865,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/EURUSD.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.303Z","timestamp":1787061527303,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/EURUSD.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 2835\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846519B1E823353782A146\r\nAccept-Ranges: bytes\r\nETag: \"78BF6E0671DFB4048C87694131DAF24D\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2966404084925446468\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: eL9uBnHftASMh2lBMdryTQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2835,"size_decoded":3383,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"78bf6e0671dfb4048c87694131daf24d","sha1":"fabf49a06b07abd06cacfe254817aac8f4a23ab4","sha256":"aff93dd4920d4124d5ac53008b3d6979a16f3548dc13b2efc32a51a7d95c56de","sha512":"75c574097fd4f559ef873172d448e9d312475cd03c243fb9a113117d1b15700c9e0fd20c97e908a408a09ac69c552aedc4d95e8614c6f6f8619eea6c80db7b19","ssdeep":"","tlshash":"97513e76340ab8e5e4cf3776f4d536d1a05cacf7d65e502800469c00539178df569f9b","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-08-18T13:59:33.382058Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2482,"timings":{"blocked":2204,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/assets/index.1f16077c.css","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:43.985Z","timestamp":1787061523985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /assets/index.1f16077c.css HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jan 2025 06:12:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6788a350-84be4\"\r\nexpires: Wed, 19 Aug 2026 01:58:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":543716,"size_decoded":103619,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2f860378232e8bcc86c4194aa1b3c876","sha1":"f04c837bb96e482e3fce7fcaa95a40149b72ae62","sha256":"6a756c4a183636ea34ff21c4897a8420eb693ce3ebb60c1bb443d82e5d781423","sha512":"4cacf711a41d216175086a8360af35c26ef04321ec60be9ab5313da974e200f640dd6be406760de077c9298bcc7a6e35d0682b92246a6678752feb51ca44efdd","ssdeep":"6144:UbtitXT+XK4PjDEDSHmWuwK04MuobXSNA/mylsaFiAFPQ:yDEVyhBFY","tlshash":"25c4c655e753513b2e17f63d7bc5e9c8bb28ea51dd12cba5f240a00885c3af502a3d2b","first_seen":"2026-04-06T13:18:05.308893Z","last_seen":"2026-08-18T13:59:33.383688Z","times_seen":3,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://w-20lbxnp12.bits-vip.com/ws/91e4fee0-ef2b-4b02-b9e3-64f667f625e0","fqdn":"w-20lbxnp12.bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.057Z","timestamp":1787061526057,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w-20lbxnp12.bits-vip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:32:52 GMT","end":"Mon, 02 Nov 2026 13:32:51 GMT"},"fingerprint":{"sha1":"B7:8A:BD:66:C9:87:C2:D6:18:50:EB:93:8B:57:A1:3E:65:5E:A0:FC","sha256":"BF:67:C7:CA:E3:EF:08:2E:5C:AD:E9:A1:7A:17:C3:FF:FE:D5:BD:F1:09:AC:53:28:56:B2:3F:A3:E6:E7:8D:60"}}},"request":{"raw":"GET /ws/91e4fee0-ef2b-4b02-b9e3-64f667f625e0 HTTP/1.1\r\nHost: w-20lbxnp12.bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bits-vip.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: nzD550/I5YLeqZXiP4ablg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Tue, 18 Aug 2026 13:58:46 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://bits-vip.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 6/TeNnbjb3cjzZ89FatOavkQw3w=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/\r\n\r\n","headers":null,"cookies":[{"name":"server_session_989c9e93","value":"426900115999e63bb07df4e83ab81e4a","quoted":false,"path":"/","max_age":864000,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/"}],"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":546,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T17:37:31.215577Z","times_seen":17958830,"resource_available":true,"data":null}},"time_used":1492,"timings":{"blocked":0,"dns":500,"connect":659,"send":0,"wait":166,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w-20lbxnp12.bits-vip.com/api/common/getMt5Amount?coin=xau","fqdn":"w-20lbxnp12.bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.847Z","timestamp":1787061526847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w-20lbxnp12.bits-vip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:32:52 GMT","end":"Mon, 02 Nov 2026 13:32:51 GMT"},"fingerprint":{"sha1":"B7:8A:BD:66:C9:87:C2:D6:18:50:EB:93:8B:57:A1:3E:65:5E:A0:FC","sha256":"BF:67:C7:CA:E3:EF:08:2E:5C:AD:E9:A1:7A:17:C3:FF:FE:D5:BD:F1:09:AC:53:28:56:B2:3F:A3:E6:E7:8D:60"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: w-20lbxnp12.bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://bits-vip.com/\r\nOrigin: https://bits-vip.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:46 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bits-vip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_989c9e93","value":"426900115999e63bb07df4e83ab81e4a","quoted":false,"path":"/","max_age":864000,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":615,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T17:37:31.215577Z","times_seen":17958830,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"w-20lbxnp12.bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/58d418ebebf1400abd5b75bf7875a054.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.281Z","timestamp":1787061527281,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/58d418ebebf1400abd5b75bf7875a054.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 332\r\nConnection: keep-alive\r\nx-oss-request-id: 6A8465194C8B37313412FD00\r\nAccept-Ranges: bytes\r\nETag: \"EE4EDA48567F400FBA2F4B27645E4D00\"\r\nLast-Modified: Mon, 18 Nov 2024 11:48:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1056983023880572089\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 7k7aSFZ/QA+6L0snZF5NAA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":332,"size_decoded":905,"mime_type":"image/png","magic":"PNG image data, 255 x 153, 2-bit colormap, non-interlaced","md5":"ee4eda48567f400fba2f4b27645e4d00","sha1":"260670e1ba9f5550f916155b79234fbfd96f54ed","sha256":"8ce465d45c2f6022cc12cdedf7d2601432fb758253428c4a425c56ec91bdfb9b","sha512":"e5c0f362e66b4b670571d79c2cb810bcd99701635e77d91db3830ae135a76b55246fb30243303ab7474f0386230056abebfa1716c32d1cac2667e39feec30041","ssdeep":"","tlshash":"d6e026c7e536f9f0d50301364b991340fdb1080b66670314e5b5fc894918f8c5568fd0","first_seen":"2026-04-06T13:18:05.344438Z","last_seen":"2026-08-18T13:59:33.386415Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2457,"timings":{"blocked":2179,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/bitcoin.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.287Z","timestamp":1787061527287,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/bitcoin.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846518B1E82330346E9946\r\nAccept-Ranges: bytes\r\nETag: \"2EDF1EF8B333C40979976D1A49BC234C\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Lt8e+LMzxAl5l20aSbwjTA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":3239,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-18T14:11:02.897282Z","times_seen":26023,"resource_available":false,"data":null}},"time_used":1603,"timings":{"blocked":1335,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/NZDUSD.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.304Z","timestamp":1787061527304,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/NZDUSD.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 3004\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846519E6135837303001EC\r\nAccept-Ranges: bytes\r\nETag: \"3324392DB124E1FF022F77669B9028E9\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17717082248578616007\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: MyQ5LbEk4f8CL3dmm5Ao6Q==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3004,"size_decoded":3553,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"3324392db124e1ff022f77669b9028e9","sha1":"8d833527f1c4c2032a2369c74268881dde5ec8b0","sha256":"674ae651d7c3a537abde8086b45d2f3456f01d0a51b74ec78381ad51ace21567","sha512":"4c385f00df33b0574c717232dff223077e2a921e624098236d50601d3f1391a30d549a448388aa6be3c9e47a951cd7b017eb901d9612173abb893c8c5cf14c7a","ssdeep":"","tlshash":"87513ad6cf9adbc0f71dd874c5572ea9a3112123261cea82f9f9e10824e2948166788c","first_seen":"2026-04-06T13:18:05.356234Z","last_seen":"2026-08-18T13:59:33.400079Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2482,"timings":{"blocked":2206,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/GBPUSD.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.305Z","timestamp":1787061527305,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/GBPUSD.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 3112\r\nConnection: keep-alive\r\nx-oss-request-id: 6A8465198B9044393145438B\r\nAccept-Ranges: bytes\r\nETag: \"843D07EAAB851BDEC4ED3D144F35F33A\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6453509990731668063\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hD0H6quFG97E7T0UTzXzOg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3112,"size_decoded":3660,"mime_type":"image/png","magic":"PNG image data, 38 x 45, 8-bit/color RGBA, non-interlaced","md5":"843d07eaab851bdec4ed3d144f35f33a","sha1":"35bf1e6a8bbe10a5e416884698b86384202bdb91","sha256":"305eb71263b402ff611596f6239bdf1599029ff35e9e9f8c6ec1411f9d3940ca","sha512":"aac68674fc307a73f0791b6d64672f564673fae3479f1998f472efc1affa29d40af4afe92a33832e4a21af4ebaf9f247dd920e5655acce91b86c1571ed2a3bf6","ssdeep":"","tlshash":"49515d724b3809590d32e0e12129e7274c1379aeef8fae60dd9bde7c58a463d6870f45","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-08-18T13:59:33.403377Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2492,"timings":{"blocked":2213,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recharge-override.pages.dev/vendor.Z6835.js","fqdn":"recharge-override.pages.dev","domain":"recharge-override.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:43.987Z","timestamp":1787061523987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recharge-override.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 06:46:15 GMT","end":"Sun, 15 Nov 2026 07:45:00 GMT"},"fingerprint":{"sha1":"31:FD:F0:1A:FC:08:A4:E4:F5:76:F4:5C:C7:1B:4C:C7:F3:24:EC:57","sha256":"B2:09:71:70:0D:F8:13:51:A0:E9:29:C4:6A:34:F8:F8:77:FB:0A:5C:00:C4:F6:85:EE:94:96:1E:AD:75:A1:C0"}}},"request":{"raw":"GET /vendor.Z6835.js HTTP/1.1\r\nHost: recharge-override.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 13:58:44 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=atWel0BlZeUl2q9GwvsY5sCsmvsGVjMcs9EXhactdVxOtISVaSRsa%2FtemS4A27cGTZsxSYpX%2FP%2B0Jc0GyRVUKjvF9CueKCVJ1IH6PLYiV5hww7f9hEkk%2B8X%2BX3xNhsVGCMObHjeM1qYaRsB61wQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c792a8d3d1a1a37b202f921a9d896c2d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2d16f5d1ad556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2761,"size_decoded":1978,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2760)","md5":"2a28b0a80e5d6aac8c7c343fd2025ffe","sha1":"47d99a9a5a0a86d10cffea91b6218d299f98571d","sha256":"e237183641e7ab0959923ad0b1405fad86bdd15705b31b654adebd8dcd96eedb","sha512":"06b29342733075eb366e0883c26a13720dfd932b39ea8056ed0e16fc42bda76352082f64c622e3445608e4fd91b7db69385ea0ac63c0fcb39c92ebd93a3060fd","ssdeep":"","tlshash":"da51a7a94a54c27749d20feea0b3c3cc7e623449b507e86a5b0c0c1d5547fa74ea6ddc","first_seen":"2026-07-17T15:25:32.014748Z","last_seen":"2026-08-18T13:59:33.405518Z","times_seen":9,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":9,"connect":18,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/platform/bits-vip.com/config.js?1787061526056","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.059Z","timestamp":1787061526059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /platform/bits-vip.com/config.js?1787061526056 HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:46 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":213,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"2ba4cadad6518479121512938b6acc68","sha1":"0cc6ba4353a02a81d77d33db7c54c209098e9070","sha256":"653fc35f85ab78b6cb25f86287efff186fc531062c4b2abfdccfc4b180f02ff8","sha512":"5ae7c972dfbcaf54f63caf9b8a02fe7291f568a652cf1de4aa30b29de7c0bd859c6c3b39e7eb722d30f48c55bf54e5c5a882ed614770819154619cdc3a16d444","ssdeep":"","tlshash":"dad0221e7d03a28849030950a3c33208d1c7836face6c0221b80c643b0cb3dfc8ca3aa","first_seen":"2026-08-18T13:49:14.143005Z","last_seen":"2026-08-18T13:59:33.406956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/binance-coin.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.292Z","timestamp":1787061527292,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/binance-coin.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 12869\r\nConnection: keep-alive\r\nx-oss-request-id: 6A8465188B90443931803B8B\r\nAccept-Ranges: bytes\r\nETag: \"A533EECDEE5A789E7D94F8F79F95D588\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18158548296662870332\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pTPuze5aeJ59lPj3n5XViA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":13419,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-08-18T14:06:53.307038Z","times_seen":957,"resource_available":false,"data":null}},"time_used":1637,"timings":{"blocked":1355,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/GBPJPY.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.310Z","timestamp":1787061527310,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/GBPJPY.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 2232\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846519E613583730D603EC\r\nAccept-Ranges: bytes\r\nETag: \"B9BF5A9C748132964C1B4BE38B7FE1AB\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9146111733117219810\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ub9anHSBMpZMG0vji3/hqw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2232,"size_decoded":2780,"mime_type":"image/png","magic":"PNG image data, 34 x 43, 8-bit/color RGBA, non-interlaced","md5":"b9bf5a9c748132964c1b4be38b7fe1ab","sha1":"c585541178fb12dbeb3a5cae05fe87bd75d4a2f3","sha256":"fbc28b34bd1e3a164840756a741e71c2b183561757447f1905265854b70e03b3","sha512":"73cdfca4192fd58846be84aa4dec7977b250263fc1b0a4522d8370c32a1227c3b92b1f1cf13c2c6bc6e7204a3c5b74fd22223374f0e385a01cc11dcc97d978c4","ssdeep":"","tlshash":"02415c64a042280844abcea36c0f7707ce6b26db13c385317f1a062d904de3b81c36f1","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-08-18T13:59:33.41082Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2755,"timings":{"blocked":2482,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w-20lbxnp12.bits-vip.com/api/notice/list?key=ROLL_NOTICE","fqdn":"w-20lbxnp12.bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.316Z","timestamp":1787061527316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w-20lbxnp12.bits-vip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:32:52 GMT","end":"Mon, 02 Nov 2026 13:32:51 GMT"},"fingerprint":{"sha1":"B7:8A:BD:66:C9:87:C2:D6:18:50:EB:93:8B:57:A1:3E:65:5E:A0:FC","sha256":"BF:67:C7:CA:E3:EF:08:2E:5C:AD:E9:A1:7A:17:C3:FF:FE:D5:BD:F1:09:AC:53:28:56:B2:3F:A3:E6:E7:8D:60"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: w-20lbxnp12.bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nContent-Length: 11\r\nOrigin: https://bits-vip.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11,"data":"ROLL_NOTICE"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:47 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bits-vip.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_989c9e93","value":"426900115999e63bb07df4e83ab81e4a","quoted":false,"path":"/","max_age":864000,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":826,"size_decoded":1042,"mime_type":"application/json","magic":"JSON text data","md5":"26dc712279772b1653cfd8015e871c63","sha1":"8b42e9f2bd4a85f5561843ced6c185f8f079b0a3","sha256":"cd894dd5da684a4e2068dbf7131c4be7dcbdf03b8f11ce47d9903e872d5b695e","sha512":"073d7ab95059ec14d295a6bb1779b6cd74ead7909f38360cf18881557c3c775662142a3879aa66b118a16dd40d94c9029a0c9c9ae616793ab8226931e3066bd2","ssdeep":"","tlshash":"6c01665b01399e61190255a32989bcc85e5e22978e608d285a6a8f2c41f4dff3b27504","first_seen":"2026-08-18T13:49:14.122759Z","last_seen":"2026-08-18T13:59:33.411533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"w-20lbxnp12.bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/resource/images/common/home/Selection-c.png","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.318Z","timestamp":1787061527318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /resource/images/common/home/Selection-c.png HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Apr 2024 12:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662b98dc-13e0\"\r\nexpires: Thu, 17 Sep 2026 13:58:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5088,"size_decoded":5463,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"c1e0cfa54461cfe2003359fe589984dd","sha1":"fd82904639342a643be65d67f8a24c5d16e445b8","sha256":"69e6f084038fd9c2196d3349b6be282bb366b9b47c5dfdb07b917a4956eb79fb","sha512":"dc0feff751431464fb48d538ac9dca32103da30c468e078100a2625ea616500cb026aa75a54c1450ce37539a93dad647a82a91e7bacf2f7dad9b9f4e639e73fa","ssdeep":"96:Y3l7a2ASmDfKAw8m2QCvNLPHQt2sotAi4EbsxVcgqiT56IaZ/IvEKdRh7zUt2:YFyPmO1Q2Leilb6F56Z3KRI2","tlshash":"15a18f7b6ce42c16cf86e6d90f86130c2b94c06f01586e13541eaad90f708f8329e709","first_seen":"2024-08-19T17:34:46.646268Z","last_seen":"2026-08-18T14:09:30.968764Z","times_seen":152,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/tplogo.png","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.563Z","timestamp":1787061526563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /tplogo.png HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 May 2026 04:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a13d234-9e304\"\r\nexpires: Thu, 17 Sep 2026 13:58:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":647940,"size_decoded":644236,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"b40df868f576d2b5b42a5da5ca777897","sha1":"6e76214a9fdb6e2d1cc4d46760e57d0692202485","sha256":"d62a53463f7714b5d325051da3b28b61bbd2b6ab287943ac40af94be55562304","sha512":"d153dd08208d32be6424b9e30cfb97ee09354c64fb7ca67ebe840dc78224c0eebe27db2fb88db82afff75e119d64051bf98b62193bb09ec2b60d3ac62db85919","ssdeep":"12288:ASQSn0Ytnkse2eyaVsUY5M1HbdSZFzwwPJusKk3vZU6Fjx:bneyaVgq1wnzwwPJusxvZU0jx","tlshash":"6cd423623c36e6b222ce30a12a7e7ddf583b70a1b4539414d5a3de9fdd0b22050ba857","first_seen":"2026-08-18T13:49:14.179952Z","last_seen":"2026-08-18T13:59:33.413506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.02877f2fcc3f44c6689306d8039a0d20c.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.265Z","timestamp":1787061527265,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.02877f2fcc3f44c6689306d8039a0d20c.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 1522\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846518B1E8233537CE9646\r\nAccept-Ranges: bytes\r\nETag: \"745AF06268B3B824AFB370ED21548403\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4938955846271090707\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dFrwYmizuCSvs3DtIVSEAw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1522,"size_decoded":2070,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"745af06268b3b824afb370ed21548403","sha1":"b34430638a6119980b082148e1f11290579e4e17","sha256":"1c374f14610f14efb98ea056ee0fcde364fca7e37892cfd493111580abb564c6","sha512":"1e42181e0aa4c0a975cb737a2f7114e9a7ef5f2a176eea48f5d9913efb865593b3bed35d22f733008173ecf7e3b2b0d6e82d7aee70ddf966d6c1736566855c48","ssdeep":"","tlshash":"9131d7fb9d4893ef84fb1f60179b0924d856529c1d212528459d5d33bf92c29cc1e902","first_seen":"2025-05-29T23:41:24.314069Z","last_seen":"2026-08-18T13:59:33.414277Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1390,"timings":{"blocked":-1,"dns":21,"connect":276,"send":0,"wait":278,"receive":0,"ssl":815},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/solana.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.295Z","timestamp":1787061527295,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/solana.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 25649\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846519E613583730B1FBEB\r\nAccept-Ranges: bytes\r\nETag: \"670C723ABC22056BC5368CA2A97DD6A2\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10769821075161595358\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZwxyOrwiBWvFNoyiqX3Wog==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25649,"size_decoded":26199,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-08-18T14:06:53.304371Z","times_seen":964,"resource_available":false,"data":null}},"time_used":1915,"timings":{"blocked":1619,"dns":0,"connect":0,"send":0,"wait":287,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/assets/index.3224b3d7.js","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.079Z","timestamp":1787061526079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /assets/index.3224b3d7.js HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Apr 2024 12:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662b98da-6b8b\"\r\nexpires: Wed, 19 Aug 2026 01:58:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27531,"size_decoded":6968,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27530)","md5":"386c9d3df478d699019456b980577983","sha1":"bb65dc6b44522afcc5105b836a7a8b046c85d766","sha256":"ec967b1b86761f0e814cd692f73e4a4cc71134a9f08aedb49d7e8cb326501b10","sha512":"06654c5e9649f7ad1b2d92d5bfaa3eb554ee2d736897f87d08d05764aa923397d25bd7e3a0d67c91c9e012fa4b3cf27ba89376265847a5274a517208aa004b78","ssdeep":"768:+h6gUT+OS1wdB+8ro6k7y1khsjNc5nnIBVzJD0DdcWerxE:C60Fb","tlshash":"63c261adf51e8a78f1f79851141c04463a4cbfd381508653b6fc3e15aba2ebc278d72a","first_seen":"2025-06-07T20:38:42.110256Z","last_seen":"2026-08-18T13:59:33.41555Z","times_seen":8,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/assets/index.7cfffdce.css","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.082Z","timestamp":1787061526082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /assets/index.7cfffdce.css HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 26 Apr 2024 12:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662b98da-36af\"\r\nexpires: Wed, 19 Aug 2026 01:58:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13999,"size_decoded":2694,"mime_type":"text/css","magic":"ASCII text, with very long lines (13998)","md5":"5cca1c1f4f5defc4049d05ffd25f1d72","sha1":"db3cd5816a4048633c122aa3a1db39ed2c3eef53","sha256":"7cfffdce4ee3ba4f16f06b248469aea9b054f445aed558ec47e64c2c267369c6","sha512":"140bfa81d1cf255b331b2c9cb9ebb7d56610c015c862c62489b8d676243544b76ab7ee2e96bc0135d13be4f870a2a5900d695939536af903e9b53d317d0c9f34","ssdeep":"192:91YQOXMuhTEwtEoF8rRMbNThu1vwbW62lGvWlXaYZdzgDIsCQo:9yMuhTEIxF+RMxCQCD","tlshash":"8e527554b29da5367837e4092da89b4e7041ff5384036399eccaa97ecdc79b32738750","first_seen":"2026-02-03T20:06:39.496657Z","last_seen":"2026-08-18T13:59:33.41631Z","times_seen":9,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/resource/fonts/PINGFANG-SC-BOLD.ttf","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.250Z","timestamp":1787061527250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /resource/fonts/PINGFANG-SC-BOLD.ttf HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bits-vip.com/assets/index.1f16077c.css\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:47 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11139412\r\nlast-modified: Fri, 26 Apr 2024 12:06:52 GMT\r\netag: \"662b98dc-a9f954\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11139412,"size_decoded":11139703,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", name offset 0xa2b728","md5":"a5f40309207afeb657ed9436536d0d0c","sha1":"e08b67e9d2d1836268cdc905d4a7bc8aaf46d583","sha256":"b03430452ce3669613d60acaf8d799052aa1fdc03012feb481b5a27fe8a89fb8","sha512":"2a5d9eaeec304955d870d9e68b8efeb3a9ed268b1922a8750cc2fbc79b1eafbfde68f74b6dbddaae97950f0f722790d6a24ccda0c5e28ec0f5a7d252f9fd68f3","ssdeep":"24576:Jk3368WWqmO8+RYKjcpbR8z0AuxRbTn1tET64wBQFFlUqIY7NMIbvW:Jk336M5BI1E","tlshash":"36256d93c7c47d2d9b22fe3c6410f26ff48e5409892ad2f9cf632f36185656449a8eb1","first_seen":"2025-07-29T21:26:30.322215Z","last_seen":"2026-08-18T14:05:37.206448Z","times_seen":82,"resource_available":false,"data":null}},"time_used":1601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":1250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/XAU.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.311Z","timestamp":1787061527311,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/XAU.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 957\r\nConnection: keep-alive\r\nx-oss-request-id: 6A8465198B90443931CF458B\r\nAccept-Ranges: bytes\r\nETag: \"4CF7FEBCDE802774E860280F72473B4C\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15843907226721346241\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: TPf+vN6AJ3ToYCgPckc7TA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":957,"size_decoded":1505,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"4cf7febcde802774e860280f72473b4c","sha1":"349c9060813d3c6cd535d6d8e7469adebf51f03a","sha256":"6ba1d900f5edeb32b50a7f5ca28347bc3fd7495a2032ff4d9c9b6a518a609f3c","sha512":"f10fe7221a8ff89eac50b17244fce40b9c07963db44ba1a8a5b6fe0c47dcb6fe1abd474fd8a2cd559e0b6da74d231bd161254e4ebf8227a8b74b3a0915cf7ac8","ssdeep":"","tlshash":"a41150ea1108aa13c4850e602aa261585cbf81f976e7942f3bf68495da3a16c210927f","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-08-18T13:59:33.418253Z","times_seen":169,"resource_available":false,"data":null}},"time_used":2768,"timings":{"blocked":2491,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/XAG.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.312Z","timestamp":1787061527312,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/XAG.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 899\r\nConnection: keep-alive\r\nx-oss-request-id: 6A84651AB1E8233034DFA546\r\nAccept-Ranges: bytes\r\nETag: \"7A30B4FAF693F3C98880AD62DBEB6F52\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11713017204127528114\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ejC0+vaT88mIgK1i2+tvUg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":899,"size_decoded":1447,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"7a30b4faf693f3c98880ad62dbeb6f52","sha1":"3e77cb5055bf4f614518892ece717298536611a7","sha256":"df7c0d817546a5d5db08dc16f5014ea629a64d3adb83c2d28ea0a3eae83a0702","sha512":"ca3d38c3b1627710babc109cf1f4037243417d174bd2101fbf4413ddc2b2ea9244b6e452abd1b7e76ecdd950760255fc9cb69c455619c9a7fd0b6d33ab9a7bd6","ssdeep":"","tlshash":"201167ec2374b87cc6fc1d1ad0bd8153173ba07578019e95557f593d6461a77c286242","first_seen":"2024-07-08T21:52:55Z","last_seen":"2026-08-18T13:59:33.418907Z","times_seen":13,"resource_available":false,"data":null}},"time_used":2940,"timings":{"blocked":2671,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w-20lbxnp12.bits-vip.com/api/common/getAllSetting","fqdn":"w-20lbxnp12.bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.076Z","timestamp":1787061526076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w-20lbxnp12.bits-vip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:32:52 GMT","end":"Mon, 02 Nov 2026 13:32:51 GMT"},"fingerprint":{"sha1":"B7:8A:BD:66:C9:87:C2:D6:18:50:EB:93:8B:57:A1:3E:65:5E:A0:FC","sha256":"BF:67:C7:CA:E3:EF:08:2E:5C:AD:E9:A1:7A:17:C3:FF:FE:D5:BD:F1:09:AC:53:28:56:B2:3F:A3:E6:E7:8D:60"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: w-20lbxnp12.bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://bits-vip.com/\r\nOrigin: https://bits-vip.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:46 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bits-vip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_989c9e93","value":"426900115999e63bb07df4e83ab81e4a","quoted":false,"path":"/","max_age":864000,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":615,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T17:37:31.215577Z","times_seen":17958830,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":164,"send":0,"wait":165,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"w-20lbxnp12.bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.09bc6c590afa84f0780893393bbfe6f8b.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.262Z","timestamp":1787061527262,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09bc6c590afa84f0780893393bbfe6f8b.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 1086\r\nConnection: keep-alive\r\nx-oss-request-id: 6A8465188B90443931C8388B\r\nAccept-Ranges: bytes\r\nETag: \"4315CA4480C0BC8BDA0ABE1E5B29D95D\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8880614855979518746\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QxXKRIDAvIvaCr4eWynZXQ==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1086,"size_decoded":1634,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"4315ca4480c0bc8bda0abe1e5b29d95d","sha1":"44cd40351b2389219a2f2c4d63660cd30d9d0739","sha256":"e27e3ed79f0acf02999cb82c41f11852b83eec445b8804f008514764382a11fd","sha512":"44d0a7c9275f059daf7c563752b5d14299c320989713855f853436f62077b32114491d8fe9f94b61927b16698ea8e7d345078a84ec31248ee0016f211ebf60b4","ssdeep":"","tlshash":"3011b62b17507e488ebe562a2511ba296179f99a122bdf130ea8c40a0119f8801965cb","first_seen":"2025-05-29T23:41:24.325311Z","last_seen":"2026-08-18T13:59:33.419461Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1393,"timings":{"blocked":-1,"dns":23,"connect":275,"send":0,"wait":278,"receive":0,"ssl":817},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/4dc03f0a7a6c467da7fb27f1ab7d7591.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.277Z","timestamp":1787061527277,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/4dc03f0a7a6c467da7fb27f1ab7d7591.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1282\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846519B1E8233537EB9E46\r\nAccept-Ranges: bytes\r\nETag: \"80B6B4083202A89635A2683DF9ED1391\"\r\nLast-Modified: Mon, 18 Nov 2024 11:48:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11393607898801402555\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: gLa0CDICqJY1omg9+e0TkQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1282,"size_decoded":1857,"mime_type":"image/png","magic":"PNG image data, 800 x 534, 4-bit colormap, non-interlaced","md5":"80b6b4083202a89635a2683df9ed1391","sha1":"513d02823ca272d9036ad96e83edbe912f97c0b1","sha256":"d67da3a266c8ec310cba5d68d82d0571df9074070f6f45eb6393c7c9f5c9d2bb","sha512":"fd0352898f3b73f8055351655380075857d86edb17306abefe7c01ce9325f4e37a5aaccd7a87d54210a39604957fd9bcdee1cb23e8aa106dba32c14d01d5013b","ssdeep":"","tlshash":"dc2155d18b7380209f07ee362020c301ef708a380835c54cbb5fd40b2b3938d43c2680","first_seen":"2026-04-06T13:18:05.302021Z","last_seen":"2026-08-18T13:59:33.420031Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2213,"timings":{"blocked":1934,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/ripple.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.290Z","timestamp":1787061527290,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/ripple.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 2274\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846518E61358373016F9EB\r\nAccept-Ranges: bytes\r\nETag: \"674B0999F6083084A2A4B1D8B20F3BC1\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2919851811578833622\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Z0sJmfYIMISipLHYsg87wQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":2822,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-08-18T14:06:53.28587Z","times_seen":914,"resource_available":false,"data":null}},"time_used":1618,"timings":{"blocked":1344,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/USDJPY.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.306Z","timestamp":1787061527306,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/USDJPY.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 1857\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846519B1E823303459A346\r\nAccept-Ranges: bytes\r\nETag: \"336AC15D6713B8F80580F04C610DEF94\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7209712669190782915\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: M2rBXWcTuPgFgPBMYQ3vlA==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1857,"size_decoded":2405,"mime_type":"image/png","magic":"PNG image data, 34 x 43, 8-bit/color RGBA, non-interlaced","md5":"336ac15d6713b8f80580f04c610def94","sha1":"88899fda7dee40d384a264a9836f64e5817b842f","sha256":"a281cac24047602e192fefc4016bdadacded09acb6807c0a5917a9269ee1eb79","sha512":"99e2fd6f5bf33b7fc39fbe95c425862468e92a1e52bc318d0a038c4e9ed74ed916e62cddfd1082876a20d5416dc204b407a7a465792123212aab1fb087112a79","ssdeep":"","tlshash":"28312b1f954109251cc6a17b7f240670abb3e63e6389d17c2827e88e4a6b3174746faa","first_seen":"2026-04-06T13:18:05.319031Z","last_seen":"2026-08-18T13:59:33.421705Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2671,"timings":{"blocked":2403,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/7204f009d14d4274ba4804bae275818c.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.258Z","timestamp":1787061527258,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/7204f009d14d4274ba4804bae275818c.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:48 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 148813\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846518ACF6C53936EFAF2E\r\nAccept-Ranges: bytes\r\nETag: \"7DF0CB94DA51B43FFD13D1DBE8D927FD\"\r\nLast-Modified: Thu, 25 Jun 2026 05:06:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 768290336102313684\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ffDLlNpRtD/9E9Hb6Nkn/Q==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":148813,"size_decoded":149388,"mime_type":"image/png","magic":"PNG image data, 512 x 509, 8-bit/color RGBA, non-interlaced","md5":"7df0cb94da51b43ffd13d1dbe8d927fd","sha1":"1add12231555344d28d042e9f85e4c083134924b","sha256":"f6f249e1d99950243b24b27a4c845f16cb8c8d3cef7b0faa8e6b7e8d3e235203","sha512":"7b36f5096fbfe61de057aab70c72094541f188279879f4b347fbd07bbcb37dac06c29c500e1f6f6a6691a8e190ab2f6ed6bfa8964e09f76cdf63c72b6bb5cf5d","ssdeep":"3072:pz0+FCVbniE3vMWIZkdv/IKkmc1TTuvSZZVksT3EwYX:pzqVbne/Zkd381fvZAsTU9X","tlshash":"06e312cff09fe669a10d0b452ec202862e3713c4235afca819d5562319e446bedabda5","first_seen":"2026-08-18T13:49:14.138582Z","last_seen":"2026-08-18T13:59:33.422859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1948,"timings":{"blocked":-1,"dns":28,"connect":274,"send":0,"wait":282,"receive":552,"ssl":811},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.09d81740435c046b887686bfce921ec53.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.261Z","timestamp":1787061527261,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09d81740435c046b887686bfce921ec53.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 2243\r\nConnection: keep-alive\r\nx-oss-request-id: 6A8465184C8B37313433F300\r\nAccept-Ranges: bytes\r\nETag: \"304ABF3181C09EF01CB52061F5DC50B9\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2871216098384110039\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: MEq/MYHAnvActSBh9dxQuQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2243,"size_decoded":2791,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"304abf3181c09ef01cb52061f5dc50b9","sha1":"2c96d3a437349f4695e4a6c671bf383f2784515c","sha256":"9c4afee726d377d43e508875c75fd30a28b4cb7ef49ac45dd85f1c0a5f4220e0","sha512":"81eb2efe3f34d15dc5c19932e807f009c8ca6641227807d764e524152cf540876f60d51092f8971609b8e0e36bca92a9561c29905ba84ad9eae70f01e1e7213c","ssdeep":"","tlshash":"ad412932e4d20f219a0bf40fa86f682928bde25c6156c73c249f9472128b42ede92488","first_seen":"2025-05-29T23:41:24.304594Z","last_seen":"2026-08-18T13:59:33.427144Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1396,"timings":{"blocked":-1,"dns":24,"connect":275,"send":0,"wait":278,"receive":0,"ssl":818},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/926facfc3ba641e8ab73bf0bbed85f0c.jpg","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.266Z","timestamp":1787061527266,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/926facfc3ba641e8ab73bf0bbed85f0c.jpg HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:48 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 35389\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846518B1E82330347D9646\r\nAccept-Ranges: bytes\r\nETag: \"A142C5EBD4D345619BE615DFF2C57FC0\"\r\nLast-Modified: Mon, 18 Nov 2024 11:47:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13820195555817095111\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: oULF69TTRWGb5hXf8sV/wA==\r\nx-oss-server-time: 19\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":35389,"size_decoded":35966,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Portugal flag round icon vector illustration. European country.,\u0001, xresolution=113, yresolution=121], progressive, precision 8, 612x612, components 3","md5":"a142c5ebd4d345619be615dff2c57fc0","sha1":"f8b2bf5bc598f248af195d820e69b8946df3c94b","sha256":"5766fe02fbf6e993b5dc1a02b399da04f4ffde630f5cb3182e5655c0af45822e","sha512":"cf6061b2fbb57aae7d8fa9f759d2a8b5aa2b97a381b0fd3519cf676bfd0fba7ae99f6d410322296b7b567a5a3ddb327b5dec5a5a3341df8820c9d6aed7c3f5bb","ssdeep":"768:/wl0ACWohKrY/TX2FLyLRMDHNtdEZt4rix2Wawd:/wl6bsL4oNtysixMO","tlshash":"def2d05d4fe39c02d0c8373596f75b0f88019e87c8c7194f934592a618a63f9bbd82d9","first_seen":"2026-04-06T13:18:05.336845Z","last_seen":"2026-08-18T13:59:33.430666Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1359,"timings":{"blocked":-1,"dns":20,"connect":265,"send":0,"wait":284,"receive":0,"ssl":790},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w-20lbxnp12.bits-vip.com/api/notice/list?key=ROLL_NOTICE","fqdn":"w-20lbxnp12.bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.330Z","timestamp":1787061527330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w-20lbxnp12.bits-vip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:32:52 GMT","end":"Mon, 02 Nov 2026 13:32:51 GMT"},"fingerprint":{"sha1":"B7:8A:BD:66:C9:87:C2:D6:18:50:EB:93:8B:57:A1:3E:65:5E:A0:FC","sha256":"BF:67:C7:CA:E3:EF:08:2E:5C:AD:E9:A1:7A:17:C3:FF:FE:D5:BD:F1:09:AC:53:28:56:B2:3F:A3:E6:E7:8D:60"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: w-20lbxnp12.bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://bits-vip.com/\r\nOrigin: https://bits-vip.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:47 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bits-vip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_989c9e93","value":"426900115999e63bb07df4e83ab81e4a","quoted":false,"path":"/","max_age":864000,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":625,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T17:37:31.215577Z","times_seen":17958830,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"w-20lbxnp12.bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w-20lbxnp12.bits-vip.com/api/common/getMt5Amount?coin=xau","fqdn":"w-20lbxnp12.bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.845Z","timestamp":1787061526845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w-20lbxnp12.bits-vip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:32:52 GMT","end":"Mon, 02 Nov 2026 13:32:51 GMT"},"fingerprint":{"sha1":"B7:8A:BD:66:C9:87:C2:D6:18:50:EB:93:8B:57:A1:3E:65:5E:A0:FC","sha256":"BF:67:C7:CA:E3:EF:08:2E:5C:AD:E9:A1:7A:17:C3:FF:FE:D5:BD:F1:09:AC:53:28:56:B2:3F:A3:E6:E7:8D:60"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: w-20lbxnp12.bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nContent-Length: 3\r\nOrigin: https://bits-vip.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3,"data":"xau"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:47 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bits-vip.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_989c9e93","value":"426900115999e63bb07df4e83ab81e4a","quoted":false,"path":"/","max_age":864000,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47,"size_decoded":611,"mime_type":"application/json","magic":"JSON text data","md5":"85b8c1b50068a7ca9479df577931bc77","sha1":"7c2b9334ad894b64bac643fdc944531cad12c153","sha256":"92113b2aaaf498ecb995c84adbdea883d31f0d095da0f85a44bd5791213ddd10","sha512":"b53e6490027a3973524872c5a97ee698cc2fd5ccbde4c98f3abcd00a3f018628b943c9342c21218f3e4befddc766bfb6dbe970f5b3575c34cf9390acb21b0449","ssdeep":"","tlshash":"119002569c1c8642a89304b6950a130401243160266892484c599125d0c85a62444858","first_seen":"2026-08-18T13:59:33.431677Z","last_seen":"2026-08-18T13:59:33.431677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"w-20lbxnp12.bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.0d2d169261acd4ec38301f0463f4d3610.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.273Z","timestamp":1787061527273,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0d2d169261acd4ec38301f0463f4d3610.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 945\r\nConnection: keep-alive\r\nx-oss-request-id: 6A8465194C8B37313495FA00\r\nAccept-Ranges: bytes\r\nETag: \"B2CC0B6A2B928A3D0785DDBAD58E7EB4\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7139311599118660718\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: sswLaiuSij0Hhd261Y5+tA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":945,"size_decoded":1492,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"b2cc0b6a2b928a3d0785ddbad58e7eb4","sha1":"81ab8459ae5281d4a091e60bfef3b9153535f37f","sha256":"b7209baf258b008d38d11f6d10d47bdee856a1e6456c879a49305ea97d1a5bce","sha512":"231e5ab8dbb2f6305c9fcd265f3d442575d639479baca27e91014677d3f0c0d7dcf3f238e607767a03cfcd5689bc0e81cb3d0f7821bc1367a20cade8306be7cd","ssdeep":"","tlshash":"a611c8ef80eb9471a962bd6ecc1a084edf7124de0210726009431d21276e52d5154605","first_seen":"2025-05-29T23:41:24.345145Z","last_seen":"2026-08-18T13:59:33.44025Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2182,"timings":{"blocked":1904,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.0c9d4ed570f5647f7b3d0421321c601e6.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.283Z","timestamp":1787061527283,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c9d4ed570f5647f7b3d0421321c601e6.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 2475\r\nConnection: keep-alive\r\nx-oss-request-id: 6A84651AACF6C5393692C02E\r\nAccept-Ranges: bytes\r\nETag: \"F20472B88DB8D665915F23843A5C345F\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6476007230303732984\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 8gRyuI241mWRXyOEOlw0Xw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2475,"size_decoded":3023,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"f20472b88db8d665915f23843a5c345f","sha1":"432cd3a9bcb3e91616b26347a24344cd62ef1d51","sha256":"a663b5e6fab2b49edd56fa5f2b4968bf0468a6ea6514527a52deab189875b35d","sha512":"ee37beb0ceaf0cecb43a449b17a778be7365f754fc3bea4da6ce9073fd4e21e08d3dcef1d3196e5730b88b8c2d5a50548b69c0b3a61a216323e66e3bb75789d8","ssdeep":"","tlshash":"65514d923ac07b34cb43bc15bb0365f45f9944aed16793000aa3fb3742750465e653d5","first_seen":"2025-05-29T23:41:24.356373Z","last_seen":"2026-08-18T13:59:33.443393Z","times_seen":12,"resource_available":false,"data":null}},"time_used":3132,"timings":{"blocked":2183,"dns":0,"connect":0,"send":0,"wait":949,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/litecoin.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.291Z","timestamp":1787061527291,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/litecoin.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 34858\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846518B1E8233537A39946\r\nAccept-Ranges: bytes\r\nETag: \"BB27C369A3AA54D9C1F8E59E1706DA48\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2593469271640333430\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uyfDaaOqVNnB+OWeFwbaSA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":34858,"size_decoded":35407,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-08-18T14:06:53.311195Z","times_seen":914,"resource_available":false,"data":null}},"time_used":1628,"timings":{"blocked":1351,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/doge.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.297Z","timestamp":1787061527297,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/doge.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: application/xml\r\nContent-Length: 383\r\nConnection: keep-alive\r\nx-oss-request-id: 6A8465194C8B37313429F800\r\nx-oss-server-time: 2\r\nx-oss-ec: 0026-00000001\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T17:37:31.215577Z","times_seen":17958830,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/AUDJPY.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.309Z","timestamp":1787061527309,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/AUDJPY.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 2335\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846519B1E823353711A446\r\nAccept-Ranges: bytes\r\nETag: \"B239F2284E902D8E4B77BAE180E6A1BE\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18297275059902119360\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: sjnyKE6QLY5Ld7rhgOahvg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2335,"size_decoded":2884,"mime_type":"image/png","magic":"PNG image data, 34 x 43, 8-bit/color RGBA, non-interlaced","md5":"b239f2284e902d8e4b77bae180e6a1be","sha1":"e4b199b65ef76accdff3927690d885f3d9caed7e","sha256":"0defe485366e2b9d88e195bd68d2c0a3ccc98f409d6198efe8b3c2790ed99afa","sha512":"bb6e8330ffb8dbb859fb642c33c082c3f592309d3dee8a6386a5520a1f948e6e63f5a1a06c5cd20d8671f7c8c0e197c6f2d479f370c325b1b9739e9f932d3392","ssdeep":"","tlshash":"1c414df15f4587192357d0dd6df280bde11fb20990d6316fa8b0f86f0a5a20c49579fa","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-08-18T13:59:33.450383Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2757,"timings":{"blocked":2481,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/assets/index.29ebc297.js","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:43.797Z","timestamp":1787061523797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /assets/index.29ebc297.js HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 03:25:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72ad3a-561dee\"\r\nexpires: Wed, 19 Aug 2026 01:58:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5643758,"size_decoded":3105815,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8e75ea2cf92753ae89f4cb50b71bfa96","sha1":"20ee8938060251a6d10efca9ab4e6ec5a00b1d8f","sha256":"0fffd8d593e17ec1c42e23355c80124bd57e622dc5f62382b725c7740cdf7b2e","sha512":"ddcbe11b20db68f985a6b28a4c3bdd1f6fa3342502dcd8d1611e3f588c4a6615cdcedfbfc69c36f0997fe26e40bced8f5e0f396c34018429e5ef23d9aeced8b6","ssdeep":"24576:bWZyDc8w9mzMF9yG/hLqfVgnt2JaIT3XBIkx:bWZyDc8w9mzMF9yG/hLqfVgcJaIT3XBf","tlshash":"8a25f80572d5313a879af0a1784bcc1eb73e5b0ca38194e8525c9569296dc38d3bfeec","first_seen":"2026-08-18T13:49:14.162203Z","last_seen":"2026-08-18T13:59:33.454597Z","times_seen":2,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w-20lbxnp12.bits-vip.com/api/common/getCoinList","fqdn":"w-20lbxnp12.bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.074Z","timestamp":1787061526074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w-20lbxnp12.bits-vip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:32:52 GMT","end":"Mon, 02 Nov 2026 13:32:51 GMT"},"fingerprint":{"sha1":"B7:8A:BD:66:C9:87:C2:D6:18:50:EB:93:8B:57:A1:3E:65:5E:A0:FC","sha256":"BF:67:C7:CA:E3:EF:08:2E:5C:AD:E9:A1:7A:17:C3:FF:FE:D5:BD:F1:09:AC:53:28:56:B2:3F:A3:E6:E7:8D:60"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: w-20lbxnp12.bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://bits-vip.com/\r\nOrigin: https://bits-vip.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:46 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bits-vip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_989c9e93","value":"426900115999e63bb07df4e83ab81e4a","quoted":false,"path":"/","max_age":864000,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":615,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T17:37:31.215577Z","times_seen":17958830,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":163,"send":0,"wait":165,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"w-20lbxnp12.bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w-20lbxnp12.bits-vip.com/api/common/getMt5Amount?coin=xag","fqdn":"w-20lbxnp12.bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.849Z","timestamp":1787061526849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w-20lbxnp12.bits-vip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:32:52 GMT","end":"Mon, 02 Nov 2026 13:32:51 GMT"},"fingerprint":{"sha1":"B7:8A:BD:66:C9:87:C2:D6:18:50:EB:93:8B:57:A1:3E:65:5E:A0:FC","sha256":"BF:67:C7:CA:E3:EF:08:2E:5C:AD:E9:A1:7A:17:C3:FF:FE:D5:BD:F1:09:AC:53:28:56:B2:3F:A3:E6:E7:8D:60"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: w-20lbxnp12.bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,satoken\r\nReferer: https://bits-vip.com/\r\nOrigin: https://bits-vip.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:46 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bits-vip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_989c9e93","value":"426900115999e63bb07df4e83ab81e4a","quoted":false,"path":"/","max_age":864000,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":615,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T17:37:31.215577Z","times_seen":17958830,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"w-20lbxnp12.bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/tron.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.299Z","timestamp":1787061527299,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/tron.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 28273\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846519B1E82335372F9C46\r\nAccept-Ranges: bytes\r\nETag: \"D5CA5F90C7A46CB88E5F57B2D3046BA8\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 651333452456791640\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1cpfkMekbLiOX1ey0wRrqA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28273,"size_decoded":28821,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-08-18T14:06:53.337155Z","times_seen":742,"resource_available":false,"data":null}},"time_used":1924,"timings":{"blocked":1624,"dns":0,"connect":0,"send":0,"wait":288,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T13:58:42.976Z","timestamp":1787061522976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:43 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nset-cookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde; Max-Age=864000; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_989c9e93","value":"a50c769c698fa8fcfe425d5b4dc3dbde","quoted":false,"path":"/","max_age":864000,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde; Max-Age=864000; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3666,"size_decoded":1672,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1069)","md5":"ca8de271a775d2be12ff522ba0d9fdf3","sha1":"77c7cf613d2992187acd1cdd8cb27e013fca5464","sha256":"511257aac4dfb339ab80d19bce193458160dcc8171c6e03c9b883e33ab07e0ae","sha512":"15ca0618b37467bd28a16d6ceab5c30ede7c4506d15db4786e1dc73e85566411e552c5343e25abfac7711d4c9c231074c0f03e4a592d47111bc65e6b8006d675","ssdeep":"","tlshash":"ce7152677d00a82e63228219f7ab7404c7168495d9150c90b2dc65ef8be5fdccceb3b6","first_seen":"2026-08-18T13:49:14.134098Z","last_seen":"2026-08-18T13:59:33.459483Z","times_seen":2,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":0,"dns":3,"connect":163,"send":0,"wait":165,"receive":0,"ssl":331},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/charting_library/charting_library.min.js","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:43.795Z","timestamp":1787061523795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bits-vip.com/\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Apr 2024 12:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662b98da-2a6a\"\r\nexpires: Wed, 19 Aug 2026 01:58:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10858,"size_decoded":3534,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-18T14:05:37.214182Z","times_seen":1368,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/resource/fonts/DINOT-Regular.ttf","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:44.759Z","timestamp":1787061524759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bits-vip.com/assets/index.1f16077c.css\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12381068\r\nlast-modified: Fri, 26 Apr 2024 12:06:50 GMT\r\netag: \"662b98da-bceb8c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12381068,"size_decoded":12381359,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"BASE\", name offset 0xa88e6c","md5":"8c1c07fe2997321d54b049da39e880fa","sha1":"e85c69e54574d47b1a3b665a5f7c98ffeafcd371","sha256":"c6b6dd24e24ea6c07767f20fc1b2dfe86f31b1ca166ae620079c67dcdd5add6d","sha512":"192427288363eb352a702f85cbf2d714a78374d4583da9be541fdbcbbaf4e643103ded1b942d601838476029b05eb5b84d8b08998b546046255fa29670bf1127","ssdeep":"24576:H/8MftuDPIz9ZeJ199QETruMGR7JrhCannDH3l8cVZYIVY0:EituDduVjn7Zf","tlshash":"94257bc297c92d1eea22bd3c2440f63e70ce65088a56d6fade431f3718429741de9eb5","first_seen":"2025-07-29T21:26:30.315596Z","last_seen":"2026-08-18T14:05:37.209584Z","times_seen":111,"resource_available":false,"data":null}},"time_used":1583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":1196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/assets/en.7a364be2.js","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.867Z","timestamp":1787061526867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /assets/en.7a364be2.js HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Apr 2024 12:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662b98da-d7d9\"\r\nexpires: Wed, 19 Aug 2026 01:58:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55257,"size_decoded":17515,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (55256)","md5":"a0cbe4582c8a7d4a25392a41ff7d5ee3","sha1":"ed18099318fbc3da7172283d7697609fe4924a2f","sha256":"9b20c6f5d74de69c7684d8387e85375c596b8ed7366cde95b32b09563c5b2ad0","sha512":"7399195eab6f0784ce9b3e6adb7e549d4272d5dccc1fa1f2c335fb63011644bf070da98f850e09f20f071e06d0b531b16eb66f340b83410abf64968f5f7cd129","ssdeep":"768:U9tZcEw/od6rUOdAFsifnAMC2rAaAMFVoP6+6sPnhmDLqAIo7hspmwO6fpk7aOjD:hposUOdebE2rdFVjsPhOsujyWXjC8F","tlshash":"7343298e7e0a94aa09f3937679ce1f5020fa05c18265841f4bfcc5fc53e2b5a6367728","first_seen":"2026-04-06T13:18:05.333105Z","last_seen":"2026-08-18T13:59:33.473259Z","times_seen":3,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/d22f70a8838b443d991d514bb02d230c.jpg","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.275Z","timestamp":1787061527275,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/d22f70a8838b443d991d514bb02d230c.jpg HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 27037\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846519E61358373071FEEB\r\nAccept-Ranges: bytes\r\nETag: \"D9172B7E12B1AD69E262F46179817E18\"\r\nLast-Modified: Mon, 18 Nov 2024 11:47:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6145185040872919626\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2RcrfhKxrWniYvRheYF+GA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":27037,"size_decoded":27612,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Spain - Round Flag Vector Flat Icon,\u0001, xresolution=85, yresolution=93], progressive, precision 8, 612x612, components 3","md5":"d9172b7e12b1ad69e262f46179817e18","sha1":"dd15ff61f81f39d2d24d481b95f3b85968aac771","sha256":"8dcb12f11034b96646d5d7969e27c6d677fa014d7da706d10a9ad2a6006a0efc","sha512":"be7e5d585c1d976aa7164be02bc28ab0bdd066b7ac55f9e3cb166266e2b4055aa34bfbe884744472a1ed56d59241386ff26a9a3fc805f8a352f27830ed087fa0","ssdeep":"384:vneId8kfQ5b0IT9D1ODq5fvho7gLiGTlLoONiIzXiyRIlbLY0PpmH1vQZaYGIwcu:vakfpK909j0TvR0P8QZaYG8Xe","tlshash":"e4c2c0f98c445124c0595f7708fb6b42e8ef4cb28e3fc27a2385865682aa5e5bbd4748","first_seen":"2026-04-06T13:18:05.334138Z","last_seen":"2026-08-18T13:59:33.478114Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2218,"timings":{"blocked":1921,"dns":0,"connect":0,"send":0,"wait":285,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/mahalebi/50da1a22f508418186a45973195fa1e3.jpeg","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.278Z","timestamp":1787061527278,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /mahalebi/50da1a22f508418186a45973195fa1e3.jpeg HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8965\r\nConnection: keep-alive\r\nx-oss-request-id: 6A8465198B904439319D408B\r\nAccept-Ranges: bytes\r\nETag: \"387C774FCB46F054AD9A48308412BE33\"\r\nLast-Modified: Mon, 18 Nov 2024 11:48:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1249056113273339398\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: OHx3T8tG8FStmkgwhBK+Mw==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8965,"size_decoded":9539,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 287x176, components 3","md5":"387c774fcb46f054ad9a48308412be33","sha1":"750357be03d4ad8e7c4e868112972d7e3d85b0a6","sha256":"25f2a3358fc6bd1b1afe5739f3f907f6dce2fbfb2fd2a9e051a5836b56671ccd","sha512":"02460c4b5f782b77aabaf6b4dc9c832119bda65ae04feb31a108ba4a655de008d5428bb819fc3aed872f87730e19df5c6bd5692b7c0e1d5b2a7f0ba2c45dba85","ssdeep":"192:ltHUkT1ZGliyIgA6iKrbLjXPeQU9eR/a7WCBh/RXZ:lNLpZvyIAiKvvXGb9X7fn5p","tlshash":"e1024b922ca1b29eff2bc17361bfe771f108463872b5d0917c0e11d24ea669a654cb5c","first_seen":"2026-04-06T13:18:05.304531Z","last_seen":"2026-08-18T13:59:33.484304Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2220,"timings":{"blocked":1937,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w-20lbxnp12.bits-vip.com/api/common/getMt5Amount?coin=xag","fqdn":"w-20lbxnp12.bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:46.848Z","timestamp":1787061526848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w-20lbxnp12.bits-vip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:32:52 GMT","end":"Mon, 02 Nov 2026 13:32:51 GMT"},"fingerprint":{"sha1":"B7:8A:BD:66:C9:87:C2:D6:18:50:EB:93:8B:57:A1:3E:65:5E:A0:FC","sha256":"BF:67:C7:CA:E3:EF:08:2E:5C:AD:E9:A1:7A:17:C3:FF:FE:D5:BD:F1:09:AC:53:28:56:B2:3F:A3:E6:E7:8D:60"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: w-20lbxnp12.bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nAuthorization: \r\nSatoken: \r\nlang: en\r\nContent-Length: 3\r\nOrigin: https://bits-vip.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3,"data":"xag"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:47 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bits-vip.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_989c9e93","value":"426900115999e63bb07df4e83ab81e4a","quoted":false,"path":"/","max_age":864000,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_session_989c9e93=426900115999e63bb07df4e83ab81e4a; Max-Age=864000; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47,"size_decoded":611,"mime_type":"application/json","magic":"JSON text data","md5":"4aca473117856c52454317aed216c7fe","sha1":"f8d3fede4effa9b96caf131fa8c8cc597139b44c","sha256":"174b4681db372e4ab0469eb17a400deb7b13f79b14b162095f8a4215bb0c43bb","sha512":"2fc26bcdefa79d47f57f6846d3ec300df7ddd04237d6310b00e49aa7daa7158863964159a682b9b4c7f6181b33c50b25ce3c546ef4ac445c62bb3404b71679e6","ssdeep":"","tlshash":"a3900255ac1c8642a88304a6950a120401243160262892484c5d9125d0c85a62444858","first_seen":"2026-08-18T13:59:33.48511Z","last_seen":"2026-08-18T13:59:33.48511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"w-20lbxnp12.bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/echo2.0a119950ef2af4521b3a3943cfc49de98.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.271Z","timestamp":1787061527271,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0a119950ef2af4521b3a3943cfc49de98.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 1687\r\nConnection: keep-alive\r\nx-oss-request-id: 6A846519ACF6C539368DB72E\r\nAccept-Ranges: bytes\r\nETag: \"D1BDAE92B669EDDF77DCB8DC87B9A402\"\r\nLast-Modified: Mon, 19 Aug 2024 10:42:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7745069834545942300\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0b2ukrZp7d933Ljch7mkAg==\r\nx-oss-server-time: 22\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1687,"size_decoded":2236,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"d1bdae92b669eddf77dcb8dc87b9a402","sha1":"a8fefdabe0b6945c63a284067d21f09a0bbe2f0b","sha256":"8bf7a2722b0ad91f18d12a4a22c027bb84a7d48b986beffcfcd72e90c5fffd3d","sha512":"99032af46aaaf87ec06020c80f4082d6469ca405b893440ce2f367e24ebd31d23ce8585d442e3f795e07202cdc6af5db4e769857c452c92575c5c8d34d31d736","ssdeep":"","tlshash":"04311a9f286288ecbf8f495be1bf42a51830b0b49034d4bdcc2d549bfac9c5b0649dc5","first_seen":"2025-05-29T23:41:24.322973Z","last_seen":"2026-08-18T13:59:33.490053Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2191,"timings":{"blocked":1895,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/resource/images/common/home/bannerimg.png","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.285Z","timestamp":1787061527285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /resource/images/common/home/bannerimg.png HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Apr 2024 12:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662b98dc-2196f\"\r\nexpires: Thu, 17 Sep 2026 13:58:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137583,"size_decoded":137795,"mime_type":"image/png","magic":"PNG image data, 1096 x 982, 8-bit colormap, non-interlaced","md5":"81bde0f76b8d8c587f93c31ca0118911","sha1":"d7696679f1f1278787cc6242af6a2e9a9af49ccd","sha256":"b3c59f9007ae88ab2eb802cf5b2f48e0c8fd71d96e02182af7975cf0ef29350d","sha512":"c7958c6ace2b3db1cea047c4373ff2722b43da16fc7993f748dc87d6f4ddfe0946f36c7cadd76ab9e25e7e4b316636d4a208dbb1f2623ead1441676336ca890f","ssdeep":"3072:o8xzSTATdbv2PiNXSQy48F60fv1h089EECVPYTUlki5rWx6M6vD:n8ATdD1SQy48gOv1hDCmUlFAx6MED","tlshash":"46d312d39adb5b94ce0788707341af093dae6a21fdea24514089da0f55ae3b48dc093f","first_seen":"2024-08-19T17:34:46.604947Z","last_seen":"2026-08-18T14:09:30.953535Z","times_seen":176,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com/waihui/ethereum.png","fqdn":"tg-mahalebi.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.195","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.289Z","timestamp":1787061527289,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/ethereum.png HTTP/1.1\r\nHost: tg-mahalebi.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 18 Aug 2026 13:58:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 9807\r\nConnection: keep-alive\r\nx-oss-request-id: 6A8465184C8B3731349DF500\r\nAccept-Ranges: bytes\r\nETag: \"12D9722461759CEFFF02D9076A3D2718\"\r\nLast-Modified: Mon, 19 Aug 2024 10:32:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9445008190181339835\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: EtlyJGF1nO//AtkHaj0nGA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9807,"size_decoded":10355,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-08-18T14:06:53.250124Z","times_seen":852,"resource_available":false,"data":null}},"time_used":1620,"timings":{"blocked":1337,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/resource/images/common/home/Selection-a.png","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.314Z","timestamp":1787061527314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /resource/images/common/home/Selection-a.png HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Apr 2024 12:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662b98dc-fbe\"\r\nexpires: Thu, 17 Sep 2026 13:58:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4030,"size_decoded":4318,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"d41eddbe11398decb778d09c35fe7c34","sha1":"5f81f58df40d09a3b8cfe3707ad3fd451c7e6859","sha256":"381aa09f34edb9c8ff2d3fb0ff09af42260fefc41c48a8e03ab14a9f2cd849a1","sha512":"e8da5839ebe24ef89aa2c7c15968a4a589303a2303329f20f44f360b62de3182cd0a431811297da1279d76cd2ec0c05da4ed13e1b587e35ba75a7f6cb3de30b2","ssdeep":"","tlshash":"b081807b352c750dcd2510742761408dc27229301ddb1079aeca6d42bd7297577603bf","first_seen":"2024-08-19T17:34:46.654099Z","last_seen":"2026-08-18T14:09:30.937207Z","times_seen":150,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bits-vip.com/resource/images/common/home/Selection-b.png","fqdn":"bits-vip.com","domain":"bits-vip.com","tld":"com"},"ip":{"addr":"119.42.146.37","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bits-vip.com/","date":"2026-08-18T13:58:47.315Z","timestamp":1787061527315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bits-vip.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:28:29 GMT","end":"Mon, 02 Nov 2026 13:28:28 GMT"},"fingerprint":{"sha1":"7A:B9:16:4D:1D:53:B2:F3:DD:50:28:DF:1B:22:1A:F6:27:DC:E9:6B","sha256":"1C:AB:90:05:D9:AC:CD:05:9C:DE:41:6B:F0:F6:7A:10:C9:D7:51:C8:95:74:0C:FA:0F:08:0C:7D:55:9D:D2:D7"}}},"request":{"raw":"GET /resource/images/common/home/Selection-b.png HTTP/1.1\r\nHost: bits-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bits-vip.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_session_989c9e93=a50c769c698fa8fcfe425d5b4dc3dbde\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 13:58:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Apr 2024 12:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662b98dc-1ad1\"\r\nexpires: Thu, 17 Sep 2026 13:58:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6865,"size_decoded":7217,"mime_type":"image/png","magic":"PNG image data, 336 x 217, 8-bit colormap, non-interlaced","md5":"780fc0bba0436d2e007810a0ab31b50e","sha1":"a8aeac9b0b51d65393aaea9dbeacd6c281cfcc64","sha256":"4bd0177dc9f6cfbfab5d3df02ec5bb397b1410cdaaaea2dab787e54e30a3ff3c","sha512":"98a4061779796f16b22fb27dbab9fbd2e1c13ea3aac362e9db0f1062f2f5292f568ff1eaab9ac49528922ec842c35fa16e0a80a8bd4edef1f41b5c613290f926","ssdeep":"192:IjMvFrdgXf5H6fSoOOgZPAsps7URrsphkuD5HFlJiCCF0Soa:IIvxdgXfwoBaU1sbbD5HFlJaFCa","tlshash":"1be18dc00a1d9e9aa83f7cb5089606a24790752b62d66aa65dda86ea30f9c34244c397","first_seen":"2024-08-19T17:34:46.61216Z","last_seen":"2026-08-18T14:09:30.960241Z","times_seen":152,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"bits-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}