{"report_id":"b2d58869-c989-41d9-917f-33cc5a076be4","version":6,"status":"done","tags":[],"date":"2025-12-21T07:52:51Z","url":{"schema":"http","addr":"bitomax.com/","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bitomax.com/","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"title":"Bitomax","dom":{"size":40786,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40220)","md5":"31640a2032ca010890b379ca150ed991","sha1":"cd1d870220676611cc336a41b65b0fa35ee36ffc","sha256":"1aea1fbe513c36cf0da7009d24b23673283ebdfaeae8f90aa86f53d14034498e","sha512":"9f22fdffe1656967b8b84487d4e235d618404652e7d1bc1938b457d27e60ea1a146dbffa27e96e04e2d510a4c2a5107aa1b116da1bd55b18ece7d5bbf0a7bc71","ssdeep":"768:xgsPiukQg0fsPtL3B03GNMxwZrKzGxhXP0fsPtL3BryMgc:bfsVO3GNMxwZrKzGPMfsVd3gc","tlshash":"5403e9f0694092bb43534ac97527b7997483b3aede360a54e3b8cbd17beacd54c108e1","dom_hash":"domhash26ac3d199ccdec867fd67b43e41b4976","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bitomax.com/","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-25T07:52:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"tq2tmylv9quqkoe"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"produserapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"produserapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"bitomax.com","ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-10","domain_rank":0,"first_seen":"2025-08-09T15:31:56.84052Z","last_seen":"2025-08-09T15:31:56.84052Z","alert_count":96,"request_count":48,"received_data":16799823,"sent_data":21627,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"prodspotapi.bitomax.com","ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-10","domain_rank":0,"first_seen":"2025-12-21T07:52:55.926344Z","last_seen":"2025-12-21T07:52:55.926344Z","alert_count":36,"request_count":18,"received_data":13196,"sent_data":8696,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-14T22:20:12.666465Z","alert_count":0,"request_count":3,"received_data":365050,"sent_data":1560,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"216.58.207.200","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-14T22:17:32.87103Z","alert_count":0,"request_count":1,"received_data":434152,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"produserapi.bitomax.com","ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-10","domain_rank":0,"first_seen":"2025-12-21T07:52:55.922378Z","last_seen":"2025-12-21T07:52:55.922378Z","alert_count":2,"request_count":1,"received_data":609,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-14T22:17:06.291076Z","alert_count":0,"request_count":2,"received_data":39260,"sent_data":1022,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-12-14T22:26:15.497371Z","alert_count":0,"request_count":1,"received_data":233638,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"prodp2papi.bitomax.com","ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-10","domain_rank":0,"first_seen":"2025-12-21T07:52:55.920715Z","last_seen":"2025-12-21T07:52:55.920715Z","alert_count":38,"request_count":19,"received_data":14145,"sent_data":9093,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"prodwalletapi.bitomax.com","ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-10","domain_rank":0,"first_seen":"2025-12-21T07:52:55.923735Z","last_seen":"2025-12-21T07:52:55.923735Z","alert_count":40,"request_count":20,"received_data":14838,"sent_data":9700,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-12-14T22:26:41.611695Z","alert_count":0,"request_count":1,"received_data":96573,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-14T22:13:59.416786Z","alert_count":0,"request_count":4,"received_data":185048,"sent_data":2272,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.11.2.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5790ead7ad3ba27397aedfa3d263b867","sha1":"8130544c215fe5d1ec081d83461bf4a711e74882","sha256":"2ecd295d295bec062cedebe177e54b9d6b19fc0a841dc5c178c654c9ccff09c0","sha512":"781acedc99de4ce8d53d9b43a158c645eab1b23dfdfd6b57b3c442b11acc4a344e0d5b0067d4b78bb173abbded75fb91c410f2b5a58f71d438aa6266d048d98a","ssdeep":"1536:5P1vk7i6GUHdXXeyQazBu+4HhiO2AEeLNFoqqhJ7SerN5sVI6xcBgPv7E+nzms9d:A4Ud4qhJvNPqcB47MfWWca98HrB","tlshash":"7793d8d9b7d67062977730b850bf510bb13a98eab80c4c60f1a4d8e47e74a89507bf2d","size":95931,"data":"","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-07-23T00:11:48.833008Z","times_seen":21484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/pages/_app-e2d221eb698ceb94.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efa1aee90db21c715955eb05f3964c6d","sha1":"3481e9d08d6fbdb158d3e81cbd5a7f6ec31232bd","sha256":"dd688a383db4acb31373063cda35fefc4e771e904122ac4632ff1305879dd414","sha512":"d3bb9b409068f510ac5f1d088c7a96d9e4dec1aeaa5135482d152c98936709b2cb9466e61f0b9a1e3cb281071d410e3ffa9b8a7875461da4a9164245190d4d31","ssdeep":"6144:dmwB4vB16K7jInDS0eeyIh3lGQM4uBgeiA7d3NH:uOajJx3rzZNH","tlshash":"41541a89b2d1f07506ea50a6803f510bf339a995740e8058f728ecde7db898a7177f78","size":301663,"data":"","first_seen":"2025-08-09T15:32:00.920465Z","last_seen":"2025-12-21T07:53:06.310604Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/mzh-mg5U9dKsLQGXQBj2Z/_ssgManifest.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-07-23T00:32:09.419516Z","times_seen":247952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/6922-1eba7695ef3e2770.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"480bfc03f41f965c3dcf91b54da03c08","sha1":"923cce24d0d169df21d9fa53ecf52d7a6a7c3fc0","sha256":"b2b61abe6e2a9a18c23f8a6f83cdd744e27e11f477af7b93a9f3d488ecf4490c","sha512":"4f6b7f3165b7ea063819675599b0ba6ef3b1c5b5cc8821adf4745b6f990640d89de62196719c937a3d85c03fb677b43379657d146cc13b68ac8e62050516c200","ssdeep":"1536:XSsnnGIkCWEDRB8LpIVY80leP9vpkpgtWB1JVF/K:iWGItB5H6pgtR","tlshash":"d883f9c8b6a1f0a643d750a6903f510ff3ba5c29640de050b361d8e5bdb809e536bf7a","size":81093,"data":"","first_seen":"2025-08-09T15:32:00.910469Z","last_seen":"2025-12-21T07:53:06.28084Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/2741-2239f1ccc2cc140d.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1cef2b53546b43f8ad21ef2687f5892","sha1":"1701b7b06f21d2b39f9c70839fd5f6d2e50964b4","sha256":"a19508d3e199f8855965f298482d335559f04c328258f17c3c5e3c28cd36319c","sha512":"77211eb18b4c7cda3062bf28f6e4789e857767a4d1e859faca5311f3c02f8373ade2ad482bbd1b1ee8d379774acfcc9dd5436658a370ccddcaab8fb2938cca53","ssdeep":"384:+53jmqXGIsm0Y0cEZEZENEMeEnOmEaM+CMawivVdxQgl3B9KY/LEwBqLZM6zgOiq:mi0GhY0cEZEZENEMeEPEaMP9wivVdxQl","tlshash":"7082b7b46262afecbc675dc8543b602d316b139ccb4e05e4d1b6ac74218cad47a92fc6","size":18438,"data":"","first_seen":"2025-08-09T15:32:00.895696Z","last_seen":"2025-12-21T07:53:06.311928Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/5513-b434434161932ff9.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7ec0290f266f043038e4118e8499721","sha1":"b19e69afbc925686546401ac744d802817fe7640","sha256":"31ac125ec4dfdd5a85bc4218fb26669afa155775d51f9e5352db89969e2cd0fb","sha512":"7d4c1c7df0daab64e001b0ad9d1f000d25d4ed22b4329d076d89a7b03ac3eb060bc856020dff0bd889888a8840eae64357f0192b70e43e60bbe79d445ea7a25f","ssdeep":"1536:Wvk56EcaQqNmxSLsOvXulBFh59Z7BX/L9JHu1iep3zI+PcoVj3j7KWpQwm2UqG6w:Zc7z6MzRo1iepAoVPc2UqbkOvdjnayIj","tlshash":"6ac3fa8970c1b0e656f704f980bf000eb33b6a59350dd414f2b9d8dd65a699e6233f9e","size":124936,"data":"","first_seen":"2025-08-09T15:32:00.921567Z","last_seen":"2025-12-21T07:53:06.285092Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-4BSSGKJMZL","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"216.58.207.200","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"83071fe0ccc3cb98bcba428ba83f1fe3","sha1":"b14fe767a1bb639fadb7408611f7ae79ebc7dcb7","sha256":"5710bef4dbdd018bbcfcc414c11f7c9eba00b83b0ab7d0fe8989ab0b0518ff71","sha512":"73b59b01c29dc0a62f0651286553d536b2a3e699c240b89c9f6ffe562010afbd4193bfc18add57b3d5d4c47bf6d6462c2d586a8a7f552e369893a67ced916802","ssdeep":"6144:9sIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:7C8bu7/1mbrnsy39WbMpb","tlshash":"d0941ace73d674269396e078503f118ba57b29e2b45cc896f189cce02d74a9a4237f7c","size":433548,"data":"","first_seen":"2025-12-21T07:53:06.262162Z","last_seen":"2025-12-21T07:53:06.262162Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/main-dc0bc7733e4071df.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b38ed1cf60a9ac22e5176443fe4a00a","sha1":"601e9a7bbf56456632c5c0a8eaba3bc786fb864e","sha256":"a4f6b42acf5dfb1c9f6c839990c62ba4e1ba06c99d7cfc755a0f626f728e584c","sha512":"bc4d039861119e595c34f192e8ebfccb981c7b8214853315ddb344d3305217950801afb5ea5497759a4dae44fac4d6c618e679ce8b960e4fe750644e283140d2","ssdeep":"1536:n6FWdIlD4bY29cHq0kEMTISLYNTQqDwoVdJV0Thwj:pdIlucHq0rrSMNTQcLdJVqmj","tlshash":"06b3f9b671d1f8a207d645e4443b1006f3761dbe342ba081f3addcd6b96198fa0b2f69","size":111442,"data":"","first_seen":"2025-08-09T15:32:00.893099Z","last_seen":"2025-12-21T07:53:06.265452Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/pages/index-3e39adecfeefc7d8.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fae67fdfa8f7fc5604cf26d89f3d5ed4","sha1":"135c2b6fd8934cb4c96363ef11e85e10684f7b50","sha256":"7c3c32fe6a77b172e770d5ec580f4ccd72f888f264da8857bcd548e0614b0636","sha512":"af25433803de3571c3ee0281444a36e1e9d7e30352a208b9fd4d71131290e54dc41d3241a60c8338b56554ddb4a7c95617f9663685fc78d90fb713695d554723","ssdeep":"192:jZs4aMHKAKUMPUpoM+tMgesN7XBBAjgRgfgbgyBEtWSpYPwBaV4t85A7t85Lt854:Fs4tHKAKrPUpoM+25u7XBBIgRgfgbgyl","tlshash":"8012bf24a054ebecbd6b09c8252fd81c722f3a48c71908f4befab4655b544f87617bc9","size":9874,"data":"","first_seen":"2025-08-09T15:32:00.922682Z","last_seen":"2025-12-21T07:53:06.297043Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/static/datafeeds/udf/dist/bundle.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e380d06b20c5aaa948392c098ed9be1","sha1":"89e66bccfa0d819188af5f9b263c24cd45ff8c33","sha256":"387cfe36195fb4d0d59b6ef3900cc82ea36515a27694cccf5b460767f7646c48","sha512":"031586fd084a06c4318afaa0e44144df0dcb4f87b1e1b3651b66b83483a6327f35589bd56269d13d07a338eb5ca0b234cf01de29a00fb08a8a167c02ddc16e4a","ssdeep":"384:GvT0dY8d5T/54mISyZp0VOXpocgqmBrbp0y8pK2:Gr0dZd5T/54mISABXpLgqmBrbiy0K2","tlshash":"7bf284450ee72811c1537177afaf6445b038a0070959d6247fcca7c8af8da387b9abed","size":34513,"data":"","first_seen":"2025-08-09T15:32:00.926719Z","last_seen":"2025-12-21T07:53:06.290971Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/framework-4ed89e9640adfb9e.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"559e777379007506d17e0a4e7f608a51","sha1":"631dd16c25dc9420a721518022761eadcb6a3171","sha256":"8b219e2882c6c3918baca761cc2f4b4212b90d1664a43608155b1200013939ca","sha512":"e67fc6daf90f2097229c834a1bf1d8ec734d9211970e9055943297129c060840145687ca6776b8b31973eed84e14ee5edc238c40b9e5380a5d99660acc916855","ssdeep":"1536:MIvlesNeZ3jR4o2RQ/hmXz4fwKYhOIAMiUqI8ix+vQm1dqEYQZ7:MIaJmvKgiUB8ixiZ7","tlshash":"0ed317e83992f5516ab312a700ef1807733d5a1b280c4990a215fd9eb5f846fb17becd","size":140953,"data":"","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-07-22T09:20:47.314671Z","times_seen":5843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/b637e9a5-577c4b22a83d6c67.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f025015805e93b0996e7413c4211fbf5","sha1":"150ba48bdccfb24897950f4f13ba389a3c1cb818","sha256":"46c8b1f0f162f08409686c73b9465fdae4fa188b49329e31dca5c5c219c045ed","sha512":"dff77696391afa3f583457a606e911ca7948d72fdde663a088b6faf17673e1b64eff8fab6f2536d5303486b1a0a5553a519e25b398678cb840c0a1d29b976629","ssdeep":"1536:vR/Oo1GDM+xvlVx7ZCAJ5QGvVakgG1UrPzEOMtmBMVrbPFtcupZK03Fi0Zgnwz:vRWPQ8ai5nXPFtd/Zgwz","tlshash":"f68319ddb2cab06347a770ba407f510ff2361999680d8400f115e8e9bc78a4a927bf7d","size":87664,"data":"","first_seen":"2024-02-21T13:19:25Z","last_seen":"2026-07-08T11:30:22.487048Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/6941.7005227fcde0c3b3.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5d88826610f0705ecf55b2a57fddc55","sha1":"29829b88bb99aede33a197362bb2c09f6934eea8","sha256":"d1c0535da23588286664e7af4a3728342462a453eed769702d9af0016b2c2c9b","sha512":"0b9f73c92c3230398830e6ec598bd735a061a2e01540bcf2b8fee390e56906cbe161a6efc82163f972a4b7ff1c8319667a0cb17618820ff70242ee30da117c8a","ssdeep":"","tlshash":"56712565a541a684b83a4ccd55bf881d322f375cd21a48b07eaaf8854a056d87503fee","size":3734,"data":"","first_seen":"2025-08-09T15:32:00.929818Z","last_seen":"2025-12-21T07:53:06.278912Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/mzh-mg5U9dKsLQGXQBj2Z/_buildManifest.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39c7fc62946946e3f556eed4749877d5","sha1":"c32965ef0f0b4fbc845fff522344390a408c7860","sha256":"50dee860c0a7c5eb615d7d97d68a400f214ccae1eae14783189bae5e2985d455","sha512":"0b8b8a51c951362578e63028fc25b68c1d9ce4b570d5b5f6dd9a71cb16db17f7fdba8ddb341d0b9366ab1dc59f8631d128577326b295f30fe1a07fb15b87ec43","ssdeep":"96:32yB5vkK6+mmzVnFduBtWT+Npw/U7aa96Dnx2DDowURz:lXmmzRrSPe8oADDO","tlshash":"95b1f583914ee6150ee4fd56b07b632299c0e976023446b1eaec0f3c12f05f6abcf496","size":5317,"data":"","first_seen":"2025-08-09T15:32:00.928683Z","last_seen":"2025-12-21T07:53:06.283087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/3502-a6c3717deced5376.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7334661362d8e63e116d5639f0579cc","sha1":"a21cfeb84e497c49c6f39a106db88a6e9e0f51c3","sha256":"5d6ab6caeb92fb9fb663b34dc249a531965239609eb027fa56dcdc53cd8b663c","sha512":"cb608be6a54d98e15bd420d5d4f698de8975a0e16b2e754ab8eecfe4685d3ce57e74b725188625a9fa4c7f8038a050d38ef29300becbc947c212d1b243bb960a","ssdeep":"384:S3BSjVlbPkMt/r8rg6C+4v13tHB9KR/el0Y0cEZEZENEMeEnOmEaM+CMawivVdx/:S3BSH5t/QV0jHrK1Y0cEZEZENEMeEPE5","tlshash":"cea2e77836e0f6ecb54b18d4502f902d7a2f768c960908f0f17aac3596189e87d53fda","size":22487,"data":"","first_seen":"2025-08-09T15:32:00.93895Z","last_seen":"2025-12-21T07:53:06.309393Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/webpack-1fba64477f8ebb1f.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa9990958d617855271f53d4deebb914","sha1":"c2c9f70ba57300302ce55866b4312e588a836ed3","sha256":"ef5f0956627903e50bbc85d89263254feef79b85b30be68398199e5bc35acfc0","sha512":"e1013a0cc7b6f86fad1b84ffa6001a5c43a05fe66dd16534608d36ed17ac4b691b999cb1b306a01834d909f4b5b8e4ef9ece35415e397c60ef2c165c07dcc7a2","ssdeep":"192:80MobXSkXYlALkfFiN30lyRHSb2EJGXp1krwp:gWXvYuo0ElyU3JGXCg","tlshash":"e4f1b7fe33cdf0696a6024e5386b76a6f52b14b23d1d4850a61ee8f49c34ac8513ff58","size":7884,"data":"","first_seen":"2025-08-09T15:32:00.913677Z","last_seen":"2025-12-21T07:53:06.256032Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d1f0e0b47082a07cf60b2c8bbfaac2c","sha1":"a878b1366a01e324914b8b330c849ba35eaf4ce4","sha256":"a594a500a604f58d36bc0b73440d4fa417b99a72c13fcd3cb7f6610b907975ea","sha512":"e1e8196e73d674a59821f8b6b92fbd94bb759e0e4f83380b2c01a1a0e4426af36cbb79f4acad7f09af02c847e02279f6af51ce9a3cc42b043904edb700531c45","ssdeep":"","tlshash":"46d08cc8210b1cb045e73a410b2fb204b0063222a4d0d920390e63444f31e07db44818","size":222,"data":"","first_seen":"2025-08-09T15:32:00.969061Z","last_seen":"2025-12-21T07:53:06.32151Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/webpack-1fba64477f8ebb1f.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/chunks/webpack-1fba64477f8ebb1f.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0T06Imhepr9kyCukASvmQRyoxCYkiEklZSbgFyiDc1tCI0BvD9ehxdGUbKDQnru8ZJGTFcE06qTw%2FgRlpHiIByLnwgEFPepw0Q%3D%3D\"}]}\r\netag: W/\"a2827a37008952705741f8e4e4e46c6a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51f96a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7884,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7884), with no line terminators","md5":"aa9990958d617855271f53d4deebb914","sha1":"c2c9f70ba57300302ce55866b4312e588a836ed3","sha256":"ef5f0956627903e50bbc85d89263254feef79b85b30be68398199e5bc35acfc0","sha512":"e1013a0cc7b6f86fad1b84ffa6001a5c43a05fe66dd16534608d36ed17ac4b691b999cb1b306a01834d909f4b5b8e4ef9ece35415e397c60ef2c165c07dcc7a2","ssdeep":"192:80MobXSkXYlALkfFiN30lyRHSb2EJGXp1krwp:gWXvYuo0ElyU3JGXCg","tlshash":"e4f1b7fe33cdf0696a6024e5386b76a6f52b14b23d1d4850a61ee8f49c34ac8513ff58","first_seen":"2025-08-09T15:32:00.913677Z","last_seen":"2025-12-21T07:53:06.256032Z","times_seen":2,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj8gthkc","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:38.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj8gthkc HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:38 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=916mmB72DXKXd%2BUMtxfeoDNWbiF4SKuY%2BFMKIhwp0ks88lTzMvCJhvPRrRwjWVB7iLf7KRTYF%2F2HqEHRnJpEqqQxJhYrZph3HJRdDbceoA%2BhG7DJ%2FnFO\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd1a9b8132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 109808\r\ncf-ray: 9b15ccfdea7056c3-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"64cac444-1acf0\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 192613\r\nexpires: Fri, 11 Dec 2026 07:52:34 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=E8rRX6h3RgwCtidlNoXHnDG28V3QRqU1eiFS44e3EOlDocPHYWQomhj7F4ITYpRBUu5gH%2FwHlt5qtdJy44JzBv%2FLrynTxEUCbGAskSmTghg7Qv1uur0%2BpnKfA4YB5h%2Fn0MAvwjYO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109808,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 109808, version 772.1280","md5":"005c9aa92b564b73b7582cc4f1fa49cb","sha1":"373361ed756b1fe68ce2f5968d467826b6973bb5","sha256":"faae6fc0aa94cc5bde5076647c817a23206096a1cbeda10d1c6f3d89d6163ed1","sha512":"cf057683226d25fab8518295d9a2bbc7261b85a0e911d323f949719b6484beb99843887ac634e58f21988c5af3b8d825b8289cbfe29b2d4e1817016be1499bba","ssdeep":"1536:598+segXMbYt4ZF+jfdgY0q+JtV63kYFF8ChI+2F2aqQPj+QU0yXbO/YvSdE:AeeemxT+kkgeChI+20aqqDhcSK","tlshash":"56b312cbe021d582bdee1c5b69ba14bf61180424427dbe9dc306746bbf16e023d0bd27","first_seen":"2023-08-04T22:28:11Z","last_seen":"2026-07-23T00:47:24.742802Z","times_seen":30216,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":1,"send":0,"wait":11,"receive":2,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-4BSSGKJMZL","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"216.58.207.200","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-4BSSGKJMZL HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\nexpires: Sun, 21 Dec 2025 07:52:34 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143247\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433548,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"83071fe0ccc3cb98bcba428ba83f1fe3","sha1":"b14fe767a1bb639fadb7408611f7ae79ebc7dcb7","sha256":"5710bef4dbdd018bbcfcc414c11f7c9eba00b83b0ab7d0fe8989ab0b0518ff71","sha512":"73b59b01c29dc0a62f0651286553d536b2a3e699c240b89c9f6ffe562010afbd4193bfc18add57b3d5d4c47bf6d6462c2d586a8a7f552e369893a67ced916802","ssdeep":"6144:9sIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:7C8bu7/1mbrnsy39WbMpb","tlshash":"d0941ace73d674269396e078503f118ba57b29e2b45cc896f189cce02d74a9a4237f7c","first_seen":"2025-12-21T07:53:06.262162Z","last_seen":"2025-12-21T07:53:06.262162Z","times_seen":1,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":68,"dns":0,"connect":8,"send":0,"wait":36,"receive":32,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjdsswqk","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:45.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjdsswqk HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:45 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kKv3dq68r8%2FMQ8wEeluwCaCtLCSWduDYndg058Jh0qoU%2FWd%2BsWhEkI%2BRyxK0Zq88rdcJ%2Bo%2BmqjqEqnQ7RDQdW7mGRKZj4dEL8XSvMbpOglC8tgHV%2FYw%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd45cf8632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/api/onramp/getCurrency","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"OPTIONS /api/onramp/getCurrency HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: timezone\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWDy6YeSqUFYdNjGrk%2ByKgPGJj8xDodUCvztgpMbpTgcx22NOWNs%2BiPtyK6c4FhU4Hq7rjnKO4Ent75WeW0qYIb%2BIBcjHETzBhyZLP%2BtwmWzqB3NRRsfrgw%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15ccfe2d6432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj8h8s0n","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:38.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj8h8s0n HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:38 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OBHAUnb1JPFbSFkYIohrLCNQSsPGkMoT35c2s2Z0BaudbLw%2F2o%2BPNKri61dEcF4xpqQ9ovyUsyqyiC4LS38ZgMFKa%2BqMdKwo%2FWfaJ7eB32vrJzBJFuhNjI0%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd1abbb432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjd67sba","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:44.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjd67sba HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:45 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14sY8iC4JXHsuwu4awpUtsef6STxxhuRbeeOsvFyW7pCBoUMtbPMiMQrtTNil4QgWhNDriRgTixfCYiKIY3enEGUP1%2FxndDS%2FHUWOQs1dZffAtmKOz5y\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd40bd4b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"produserapi.bitomax.com/api/user/siteSetting","fqdn":"produserapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"OPTIONS /api/user/siteSetting HTTP/1.1\r\nHost: produserapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: timezone\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:35 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gXDDDmleD80dtFIoBVPgVeH%2BrdkHtbV%2FwPtXA4IC%2BrgRvElxBWHcMMXjhtzKuY2rCtZml01o9%2F4RKW0rt7kISKdlo%2B8pfEspVJDBXRtoX3SS8NIiRv8%2B\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd026d0532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":1377,"timings":{"blocked":757,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"produserapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"produserapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj9223jj","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:39.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj9223jj HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:39 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6%2FzJdg5q8QLCo3ZxaYUiEDf%2BvfytG4xcABmR%2FRCUHYlnaXfw7Movnxw6KohvkPtucafzQVVsy2CKb1s%2Bgn5rKe%2BXBiyuZFFLsycb6j9if3LCUPncPPX\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd1f6c2132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjbzejhj","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:43.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjbzejhj HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:43 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVSO1UUgj57clzWy76onngcgq7z31Ix0uDEe5YouMO0L0TY%2Bi%2FrZYoyEtS54IJf0bA0ROrR9bqrtx1L1cTYovfCOjgv3ZZtLWr6EEkNvYoHr6zb3UJZvZm8%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd37182532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/main-dc0bc7733e4071df.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/chunks/main-dc0bc7733e4071df.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jloopDcvkKmlwgtFGguU6hktHzrW7pq9SgYPI9XjwOqQhVzSABRyk3VDCXTT5WCU9TReoCfC7VFKoNn%2FHGaxq4hGz85pvdiIX1tC\"}]}\r\netag: W/\"4fad77cb9084f2318aa48f7c444fcb40\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51f98a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111442,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7b38ed1cf60a9ac22e5176443fe4a00a","sha1":"601e9a7bbf56456632c5c0a8eaba3bc786fb864e","sha256":"a4f6b42acf5dfb1c9f6c839990c62ba4e1ba06c99d7cfc755a0f626f728e584c","sha512":"bc4d039861119e595c34f192e8ebfccb981c7b8214853315ddb344d3305217950801afb5ea5497759a4dae44fac4d6c618e679ce8b960e4fe750644e283140d2","ssdeep":"1536:n6FWdIlD4bY29cHq0kEMTISLYNTQqDwoVdJV0Thwj:pdIlucHq0rrSMNTQcLdJVqmj","tlshash":"06b3f9b671d1f8a207d645e4443b1006f3761dbe342ba081f3addcd6b96198fa0b2f69","first_seen":"2025-08-09T15:32:00.893099Z","last_seen":"2025-12-21T07:53:06.265452Z","times_seen":2,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/apple_store_btn.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/apple_store_btn.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/image?url=%2Fassets%2Fimages%2Fimg_01.png\u0026w=384\u0026q=75","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2Fimages%2Fimg_01.png\u0026w=384\u0026q=75 HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 73399\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img_01.png\"\r\netag: \"94710bca673efd11b9b6d31b61a30325\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84zc%2Ff5sC2tM7wOjpXfIQ5o2MoPL6Y1UjcQ3AE3AcpQ8U0kl5uzqs%2B3I4UbPAqshbJ78MyfAB53I1ZUXMHqLJEItNgiAozR10EBW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b15ccfe1869a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 319 x 315, 8-bit/color RGBA, non-interlaced","md5":"40cc54cf5bbbaf8d2314c4213e01e93e","sha1":"90f1db06de506bf48804e829813d3651a86f2104","sha256":"4de33274ecfc5c06138a4254ace9a09a681c34d845e3f5e593af3a3ecf5f1754","sha512":"ea7e7643ed5854c3f939e26d8322b8804e19b1e8ae1a135fa7aea9287680d51f590fd1be3411728963fe8154dbb4acb3ded9408a4940013d40bb0c5bbb3104cb","ssdeep":"1536:M5PTPQ7K/lTqNKSllVePZ7iNxVogwJPmU/3dSZ/zpGn0NJL:APFt4xJWZ7iWpR/3YvG0NJL","tlshash":"7d73025dee51cd92c88cbff690a34460d1272b4cd1c58088edcd9a39eb6bf484b997d8","first_seen":"2025-08-09T15:32:00.945649Z","last_seen":"2025-12-21T07:53:06.267618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/css/aa81d61ba553d6fd.css","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/css/aa81d61ba553d6fd.css HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jKEzdOJM8TZWvEz0jGAP8AVkjQCACT3BwvO863BkuTo1kkjjjCcu8srx7zvCu5j8usbsBqB%2F1DeG7XIMjKa0wsw1JmkGtSZKMAJW\"}]}\r\netag: W/\"6bdc7ce6a84387a03487a33e592efef7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nage: 6\r\ncf-ray: 9b15ccfdaf9ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37291,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (37291), with no line terminators","md5":"05b592e0aff9c4d749c4faf92efc8d5b","sha1":"102f43fbf4c1d8eefcef6f951e4842ede1c24a0f","sha256":"d7c74e0970978b04a8ddad82acfff2f06d8ff2cf81f6a05c9585b37ac79be650","sha512":"4d28701b6fdaf51df2b090d470b75318ae4e5def1993b7fedea41d4aa366b45dfea7afc6ead7c740de76898053265060cf543afb26f7f7b735230b5a547f7f97","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4p:CMJihoCcZCOud8G8tKS65wqsZCG+dM2j","tlshash":"0ef24559ba4c9510be831b4322df6e0c95357588d530198abe3f31ca1cc1ed6ba73fa9","first_seen":"2025-08-09T15:32:00.90239Z","last_seen":"2025-12-21T07:53:06.270385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18778\r\ncf-ray: 9b15ccfd2c3b56b5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64cac444-495a\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 116060\r\nexpires: Fri, 11 Dec 2026 07:52:34 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=k3PYVyC7deAw4L6NRhYsGqg8O4RVc2%2BQDjcknpdIN7O0AUiO%2F6y3W8teDY0MR5e%2B5SVSkbFFZgXDLuHvfB4iN%2BWng0bfDhTIpjTUFtnuaLtSNvOBVu4RS1ePm3iNdeA68KPU461O\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102217,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"5222e06b77a1692fa2520a219840e6be","sha1":"8b4236206a8b86af3761a244277663046d7ff7ee","sha256":"0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5","sha512":"cf780ba5def29277f562835b0b3a9129ce2aca8afc81a294d6a9a7f824a1c5bb81bac00d23d42946884606b7821642b12e17a2e92f424171446db2aea8b8340c","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCq:M709gMGFiyPGuuprlCq","tlshash":"09a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-07-22T23:51:51.772327Z","times_seen":45942,"resource_available":false,"data":null}},"time_used":12837,"timings":{"blocked":6410,"dns":3,"connect":1,"send":0,"wait":11,"receive":0,"ssl":6411},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/css/e320f3d2a0cd7de1.css","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/css/e320f3d2a0cd7de1.css HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iONp4XYU9oXB6sb2gs3cmB5SXvECjExdItyw5sSItyqpQwtMSt2sZ64Jr46zUhpTbYZWx2hleg4fpmg61OYDaHCY0ZT3AJ98prGN\"}]}\r\netag: W/\"59160e1a4625b990fa09cbf2b52c89c0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nage: 6\r\ncf-ray: 9b15ccfdaf9da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12434,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (12434), with no line terminators","md5":"802b4dcc68a11d11393b742feb0c1c11","sha1":"eed00a209e97c0a91acda9b22729398f8cb9234b","sha256":"729044069c7995050dd043e4b567e15369d48b0853ee97b19f88119e4f67b6d0","sha512":"5966b7cbff74204c910f2576a28caa87372c96555fc20edb2ed9ee073f1c5914ead1b8cb5d9eb3c41577d046bfdc9a085eea9c0f2f3b525ae78200b9b51adabf","ssdeep":"384:8ERf5If0nIKeRqm1rNIBD6XbjOEkYAu2dPdfL:zqJKGrE+zeL","tlshash":"1642a3336e44682cf5b7d82ab052da48fd26e152e1962afafc156c35cdcb2c61213f4d","first_seen":"2025-08-09T15:32:00.917905Z","last_seen":"2025-12-21T07:53:06.274021Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/service_02.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/service_02.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /assets/images/service_02.svg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dVndk5DEP9dS1hIPMDWcw1JOF%2BWUhq8OUOLg7l05lnP1xsRyUhoAeO%2FGo4OR4ZN07L4iiVUoEA%2BPtwxSZNo9k2RjP6HZ%2ByR9g%3D%3D\"}]}\r\netag: W/\"7c11ee043d7e1782e5110e57045c3635\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9b15ccfde817a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72125,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"68aca495458d3c504f96511b9ddea194","sha1":"455ef73c904328f800037473ddf7cc121198cec8","sha256":"e46588d90f4ad0ce6b795be8def175f3da3b34bfc0611378b0c89d8466981585","sha512":"a40d3d2f894349277d060c731a02e6d30eefa8ef9f2c459aabd851e8ab4d9d6eaf1890b2bc464f28155da0714743a2777b163b661e9ca0401c5e96027d038ec4","ssdeep":"1536:TgGj6j/4hS+XTPq2dFe68DIWMiuXNpjV76k+Wmip:rWj/kS+7EIOYNpjV","tlshash":"3e6302997aa4db220b1026b9e393b217f45dd55d40f2c2f8f375215de11cd7292c33aa","first_seen":"2025-08-09T15:32:00.924711Z","last_seen":"2025-12-21T07:53:06.27556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/service_03.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/service_03.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /assets/images/service_03.svg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HxQyn71pQuJyFLpWwyjLwgcSMf7OnwrSQncgKvyp9L5gG2f0ZB59YFI6rg2pAcc%2BgjKlcrCP4qOoDM%2F5NLs1xbnA18Uc12TUCVR%2F\"}]}\r\netag: W/\"ab42cd7ed751ffe57d1a75b0a3251034\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9b15ccfde818a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64385,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd5082b29b39e867a4e84c594910e5b4","sha1":"1f9b64f8319a4ed697c4ca6f7bf7afd890c90582","sha256":"2641d19f3a6bf548e537414fc2cd472fbeb809022351d4cf91340cf9edd930c1","sha512":"6d82f5c929e18b1cc1322f94535c7779046a87c1e9113e041664e1ddb614f03eb4aa060a4aac26e3980ab58c33588b96c91315130dba522add755e21a5dc7c5f","ssdeep":"1536:vqeeUcZX+7EYgHAyECU8pLmRY6O5xxflAJ/cyWyjxyjJBzy:XeJ1+QYcAV8pLMY6OXxfiJ/cvSxqbzy","tlshash":"f5530193a0f23e7b8073e14e5b7fa50fe917cc89738cd755a368639a00b6ee517850a0","first_seen":"2025-08-09T15:32:00.930883Z","last_seen":"2025-12-21T07:53:06.277232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/6941.7005227fcde0c3b3.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/chunks/6941.7005227fcde0c3b3.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dCH55Laz9J%2BclmFeDoX2GLsKFEM%2FHHqsrnbq4Hw2%2FSO4m9buAl9ckhgq01K4dDH90yQr005D0pjm9vq5X6jA5xYnY8QvH6XjpQ%3D%3D\"}]}\r\netag: W/\"0aa31519000e80a43532f5e4e4bc6c68\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccfdbfc2a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3734,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3734), with no line terminators","md5":"f5d88826610f0705ecf55b2a57fddc55","sha1":"29829b88bb99aede33a197362bb2c09f6934eea8","sha256":"d1c0535da23588286664e7af4a3728342462a453eed769702d9af0016b2c2c9b","sha512":"0b9f73c92c3230398830e6ec598bd735a061a2e01540bcf2b8fee390e56906cbe161a6efc82163f972a4b7ff1c8319667a0cb17618820ff70242ee30da117c8a","ssdeep":"","tlshash":"56712565a541a684b83a4ccd55bf881d322f375cd21a48b07eaaf8854a056d87503fee","first_seen":"2025-08-09T15:32:00.929818Z","last_seen":"2025-12-21T07:53:06.278912Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/playstore_btn.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/playstore_btn.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjecnirf","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:46.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjecnirf HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:46 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wxQX9VhzUvZmrVCbVo3xBr%2BgfHvkhON4gwtnp0FDjygNRK8ekiVzyQdBk2dO%2F9O4Bg57BqHBZseZ27n%2FFxwe5eTsiYdWzp9DS5OvQeSlLNL%2BXYOSrvk1\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd4a48f632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/6922-1eba7695ef3e2770.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/chunks/6922-1eba7695ef3e2770.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rHOntctt%2FNRW7I1RN4UbZZPJQlxiqf06Ke99kNCnzcPUiKG%2BXUTlZ1vNN%2FFOdnGtGZWIUClcea4OtfUynvww8MMdN5%2Bnwxi1mQ%3D%3D\"}]}\r\netag: W/\"f98d16e42fb611e33e4c3b6abcecbd37\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51fa5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81093,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"480bfc03f41f965c3dcf91b54da03c08","sha1":"923cce24d0d169df21d9fa53ecf52d7a6a7c3fc0","sha256":"b2b61abe6e2a9a18c23f8a6f83cdd744e27e11f477af7b93a9f3d488ecf4490c","sha512":"4f6b7f3165b7ea063819675599b0ba6ef3b1c5b5cc8821adf4745b6f990640d89de62196719c937a3d85c03fb677b43379657d146cc13b68ac8e62050516c200","ssdeep":"1536:XSsnnGIkCWEDRB8LpIVY80leP9vpkpgtWB1JVF/K:iWGItB5H6pgtR","tlshash":"d883f9c8b6a1f0a643d750a6903f510ff3ba5c29640de050b361d8e5bdb809e536bf7a","first_seen":"2025-08-09T15:32:00.910469Z","last_seen":"2025-12-21T07:53:06.28084Z","times_seen":2,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Manrope:wght@400;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Manrope:wght@400;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 21 Dec 2025 07:52:34 GMT\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2251,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8b46b28e39aa0d57a4587e17cd167c5e","sha1":"b3af98d084879a200cf3011ebe75faa3dd9ff6bc","sha256":"b6043d28b5753bac0dc435b2d148841de1fd338a13b13416f820fd724a739531","sha512":"aadd4cc572be8ab90d1f74c5cb384e8573c6afd974ab8f79abfb41e73c1ed225566219a214f8e72a68cc7dc11e3e248807e2bab984f79ff21b4a02ea7263154f","ssdeep":"","tlshash":"8341caa1011be600eb470cc277ce3e25bd0e61412441d5ba5bfe188c9cdbc227365f6e","first_seen":"2025-09-11T03:35:03.651051Z","last_seen":"2026-07-21T14:46:28.35032Z","times_seen":492,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjauqd4m","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:41.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjauqd4m HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:42 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mQpPESWyDcki5Qnsz3AMIb9cLrUbMxLjddnYOuDSLEEb3b%2F6J%2FXQHHpDfnqMBHUD99CCPmOWeQCXqrB17Ot8%2BmjA83kQ23VHoDRLPShwlrvqEPi3Gf4%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd2dedf932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/mzh-mg5U9dKsLQGXQBj2Z/_buildManifest.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/mzh-mg5U9dKsLQGXQBj2Z/_buildManifest.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ec4bsC6iMlN7MbI0v%2FTOl4yImbn3v5FPmJDtXHumTz8ZQ8tf0wTw76tXPu2wqEVACPuKHb8FH%2FXPPhBRh8LQrDLvbp9x6AnIgg%3D%3D\"}]}\r\netag: W/\"9f1def893992982d66937f7ebc015027\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51fada0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5317,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5317), with no line terminators","md5":"39c7fc62946946e3f556eed4749877d5","sha1":"c32965ef0f0b4fbc845fff522344390a408c7860","sha256":"50dee860c0a7c5eb615d7d97d68a400f214ccae1eae14783189bae5e2985d455","sha512":"0b8b8a51c951362578e63028fc25b68c1d9ce4b570d5b5f6dd9a71cb16db17f7fdba8ddb341d0b9366ab1dc59f8631d128577326b295f30fe1a07fb15b87ec43","ssdeep":"96:32yB5vkK6+mmzVnFduBtWT+Npw/U7aa96Dnx2DDowURz:lXmmzRrSPe8oADDO","tlshash":"95b1f583914ee6150ee4fd56b07b632299c0e976023446b1eaec0f3c12f05f6abcf496","first_seen":"2025-08-09T15:32:00.928683Z","last_seen":"2025-12-21T07:53:06.283087Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj4vhn1j","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj4vhn1j HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPEyy8LL4abQjMvRqXaQobjfQhqO5ZDi95h%2B7uwC8LWc71jMnJvuTCfpmijjPRuyrDGp3l2pNPAcsvVVbhHhNquefeYZ9EXMHfJHkxJefMVNFG5mKbO%2FcEY%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15ccfdac7f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":667,"timings":{"blocked":20,"dns":9,"connect":1,"send":0,"wait":627,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fja9f83v","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:41.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fja9f83v HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:41 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5HS5veSKbTe8yPwg%2FXlB01BgYFPcXuskVIEqF5OdgeyH4kvZbYDQId%2B7zDEUHKdjpr2MwznxV%2BQMxmxtO1UBXO%2FKlRnPhNbQ7O%2BZbBO6I3qpzk2zoYk%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd292d8d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjd7neff","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:44.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjd7neff HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:45 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lM7b7HZv3Cp2H5BaGiF5BYZx90dweQR199SzztrqP5luD4B2wOsg0nrm2SH2%2F6BYIzBnRzq4npvD2lgbi8cHGVteD4dNxJkBddz7c0KY%2BDkSjerUS2U%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd410df932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjebqxkr","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:46.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjebqxkr HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:46 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Egdkt8EAHlLFQqx2WwxkcbRO1NGfxPDwz%2FkS7iSgbzHjAluC2Jk4wZ02qJ96ski3Uq5GfL%2F5BC0obW9niwrIo%2BDNCOzEwv2P9aB4Snpbwr11l3oh4EfwQo%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd4a088332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/service_01.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/service_01.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/mzh-mg5U9dKsLQGXQBj2Z/_ssgManifest.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/mzh-mg5U9dKsLQGXQBj2Z/_ssgManifest.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwC2QxNfjr8EHvKxOpOVUmJXQA0%2FguX1gKxqQO%2FTBN7dWWn0o8kCj9nySggZABa5i3zSI5tEynMyF4cF3ADAokyasir1jXEPWw%3D%3D\"}]}\r\netag: W/\"99dfad1d4dc538d0f87b1326c3f89efb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51fafa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-07-23T00:32:09.419516Z","times_seen":247952,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/5513-b434434161932ff9.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/chunks/5513-b434434161932ff9.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uU1bOHst%2Fzk7BuSg24XDL%2FXVIVy7e%2BFhv%2Bnf0QQysYbOTcT4sC960F7DZX7d8YgzLWtlAovFGMNvk53rETeDTjpNqR4jd9OCsg%3D%3D\"}]}\r\netag: W/\"764ba5279bb2b96e335a9425d1c778de\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51fa3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124936,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d7ec0290f266f043038e4118e8499721","sha1":"b19e69afbc925686546401ac744d802817fe7640","sha256":"31ac125ec4dfdd5a85bc4218fb26669afa155775d51f9e5352db89969e2cd0fb","sha512":"7d4c1c7df0daab64e001b0ad9d1f000d25d4ed22b4329d076d89a7b03ac3eb060bc856020dff0bd889888a8840eae64357f0192b70e43e60bbe79d445ea7a25f","ssdeep":"1536:Wvk56EcaQqNmxSLsOvXulBFh59Z7BX/L9JHu1iep3zI+PcoVj3j7KWpQwm2UqG6w:Zc7z6MzRo1iepAoVPc2UqbkOvdjnayIj","tlshash":"6ac3fa8970c1b0e656f704f980bf000eb33b6a59350dd414f2b9d8dd65a699e6233f9e","first_seen":"2025-08-09T15:32:00.921567Z","last_seen":"2025-12-21T07:53:06.285092Z","times_seen":2,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/css/e320f3d2a0cd7de1.css","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/css/e320f3d2a0cd7de1.css HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iONp4XYU9oXB6sb2gs3cmB5SXvECjExdItyw5sSItyqpQwtMSt2sZ64Jr46zUhpTbYZWx2hleg4fpmg61OYDaHCY0ZT3AJ98prGN\"}]}\r\netag: W/\"59160e1a4625b990fa09cbf2b52c89c0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51f94a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12434,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (12434), with no line terminators","md5":"802b4dcc68a11d11393b742feb0c1c11","sha1":"eed00a209e97c0a91acda9b22729398f8cb9234b","sha256":"729044069c7995050dd043e4b567e15369d48b0853ee97b19f88119e4f67b6d0","sha512":"5966b7cbff74204c910f2576a28caa87372c96555fc20edb2ed9ee073f1c5914ead1b8cb5d9eb3c41577d046bfdc9a085eea9c0f2f3b525ae78200b9b51adabf","ssdeep":"384:8ERf5If0nIKeRqm1rNIBD6XbjOEkYAu2dPdfL:zqJKGrE+zeL","tlshash":"1642a3336e44682cf5b7d82ab052da48fd26e152e1962afafc156c35cdcb2c61213f4d","first_seen":"2025-08-09T15:32:00.917905Z","last_seen":"2025-12-21T07:53:06.274021Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/api/spot/tradePair","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"OPTIONS /api/spot/tradePair HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: timezone\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:36 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZnA9qybZDVMgp6U2Cu7PQUQqODK8qEq1XPKpclr06%2Bq%2Fuphg3V6kbwppujDTfwkUggEDUifYk27T4h%2Bwbajxk%2F7htTj%2BxWz9C0dCeGrN6i%2FpWsgTsJ9\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd0959f232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":2483,"timings":{"blocked":1869,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj6q5vb0","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:36.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj6q5vb0 HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:36 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=74P6m8%2BrotLfPnClT38Gk1aOSQbGCD%2FJRVw44Pb2pGzvhBuf596FI%2FbPx3l%2BipziUB%2FZgrU3ofavhSz8IjSAspugvShJP8mmK%2FeuiGhVtJxEaDr1sA%2FtiBg%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd0c789132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/service_02.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/service_02.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/apple_store_btn.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/apple_store_btn.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /assets/images/apple_store_btn.svg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mf0op44aZSjVAH4pvjfY%2Fus%2BYKQ%2FJpJYkNpId4DFrX0STNJERKtKHbYoaNDhudHoK%2Fx5zgPlv2Py065GYriLL2RLLHLjLBCk8y4Q\"}]}\r\netag: W/\"79aec8841659a3db8fbf8cd0b176585a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9b15ccfde81ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11345,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6016443ba9b67c592bd8760c50e3412f","sha1":"4ddb25a38835e4ac1ed9f59fc6efd0d5a9d15ffc","sha256":"aa7d557a0a7b630b9c04b160d0c9faf3e12d05838c43ca472c23594dfdef1793","sha512":"8c55cc235982b61615d5163015614e6fdbb9a2e2c8138a7e3a85618a6370fe300655fd85fd58db408194e1d92d1b0f85191d5f2c744a2f77152db0cbe51ccbb1","ssdeep":"192:Tny9c+FvVwwIS2Tw8gLDQxL869hw8gq4/xL86K1ZR26kNmfbPGI:ILwwIS2k8g3wm8gbs1ZM6kNmfbPGI","tlshash":"2332b5dda751b17cb442e7b5da269061325f28f27602821c8e4e2e27f05689dca7fcc7","first_seen":"2025-08-09T15:32:00.925678Z","last_seen":"2025-12-21T07:53:06.286587Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj4vg7tg","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj4vg7tg HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dzl9Ny%2BOjXKQVUaCJF4iEh8k7SwjtBYqhNA%2B%2Fg46LjUfn%2F2%2F2zbN54%2F%2FA7R4xu0Z5%2B806HQ%2FXEZBH9ElTlejGIMe74Tp80tLmqZ%2BeB9WffuRACc%2FBQA%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15ccfd9c7132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":679,"timings":{"blocked":15,"dns":5,"connect":1,"send":0,"wait":649,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/service_03.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/service_03.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/mobile_img1.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/mobile_img1.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /assets/images/mobile_img1.svg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ecE3%2Fzg%2B1Pjw%2BQO9ywMe5KDhJ0MOXb4NN0%2FMgJBlGFWcplcSc8XXPahG5k3GrBKhyPb5Ld3yMW3JzOuNGuOwXTUqwqHuBIMlYlK7\"}]}\r\netag: W/\"99539f88b4ad85e4950804f8615e1bc3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9b15ccfde81aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1265953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2e2ed648f0c2e8e24068b58ff0a9a75","sha1":"c56bc02df9d033510773f02660c0dad357eb7bff","sha256":"c6446bd9d14cd758d19a53cbe286d850ea7ab7a92842a09b01ea2a5d247de81f","sha512":"46f9d98ddb287107bb08e1a5a0689d157e895b2c675855a6252be4c656a734bf4a0c35b5b202d9cc2ed5e043d7d7884de2e39a3725ad2c971932da2bcab80248","ssdeep":"24576:G5anqtokED6fgZv+C/R6PFuEHoFydqA4/IpsE6+c8G8Y9lk:GVREvWHrlp","tlshash":"892523d59fb28f144b5c92ba332c6dec753184d5c189828fee44b9033adae62ac5c4d7","first_seen":"2025-08-09T15:32:00.94092Z","last_seen":"2025-12-21T07:53:06.28832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj7wm40k","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:38.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj7wm40k HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:38 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VKCR%2FMfagiy5UjfjnmhU%2FJLuuqVxS5Zp9wYlYMuE3ISJKfRqvq7J1QhUEjNd2TM6n14KmABlTqhuiKI%2FSU%2B4p94053si5Moa2aQCdch%2BV0maCmOmeXk%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd160a3e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjd5hb0m","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:44.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjd5hb0m HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:45 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=veIfMlm1ciVRCJMmsh7nkOysESaIP%2BkNJmD2%2FXdolrM%2FcEAlTCV2szb%2FNA1Y9Dw%2FUX8dtZahR9uxfQEDrdyHeC7zwP51EzYqMeunZsEfPO2BkapO3PKUk9c%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd408cf632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj9n8wo8","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:40.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj9n8wo8 HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:40 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sjmTyjWsOrrtnwt30QP5z8v3nSkGzIW3vWDZHr3ssmZ%2BOmPz%2BnEGp6P4CmpvWu%2FFo36McqO%2BGIDyk0PtBQv%2F35le3kqXCD6L9K7fBy%2BXv4e%2BrRr%2FfW89sZE%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd242cef32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjdqlh68","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:45.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjdqlh68 HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:45 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENUboG1WbIptQRuZQleKKrhS0UWop0BZVLCZqBG6KAvz3JlIXVLdv6Xnb9CMC7%2F6kpR3g6GAj%2FqYN80%2BMT0E%2FxQR%2BgMS4Bnq4D1vqy3RVy22M8JxOAQ7Nv0%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd454ea732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-21T07:52:27.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1kWeWikPMkx3p46LWY7i2Mfoj0SmqAxYu6qGIw2IlNW9b54dYlIG9q0i47EJ92gRUACO8vkQMWQROjVelqMis%2Ff1kOvVBNASSkUF\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9b15ccd31c35a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":3615,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3615), with no line terminators","md5":"b89f3016a5b7c7bfda362bc2f91bb631","sha1":"3d9ca515bb3f32aa3bd970e2c7dae23a97721e77","sha256":"b5a1141a097bf6aacd1dc48fa5860223146018244b69211bc70b815d5474f623","sha512":"bd4be40aa6350a8b060bf1fc320e0da2a166217177b83596b67d34f436076c60611a36641bd5be178b5de35b5a7e4c1c5b0843cb7a28caaafcb85d7e42552bc7","ssdeep":"","tlshash":"94712406be09d65447224b9cb1bde60db44adb27c429d4dc67ef92ac07f07cb8e58815","first_seen":"2025-08-09T15:32:00.937768Z","last_seen":"2025-12-21T07:53:06.289701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":10,"dns":0,"connect":1,"send":0,"wait":234,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/static/datafeeds/udf/dist/bundle.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /static/datafeeds/udf/dist/bundle.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /static/datafeeds/udf/dist/bundle.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VTckLhgth8Bit7pG6mBcVHfNGEvgfsCGasxzNe1IgDedP9JTGawujzIglGAfZr8eQT8Ibt2nh9PXfNnDdT5xH7j7Uqs03O6jw%3D%3D\"}]}\r\netag: W/\"f42c05d3123e732468009efa92785bca\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51f8ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34513,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"8e380d06b20c5aaa948392c098ed9be1","sha1":"89e66bccfa0d819188af5f9b263c24cd45ff8c33","sha256":"387cfe36195fb4d0d59b6ef3900cc82ea36515a27694cccf5b460767f7646c48","sha512":"031586fd084a06c4318afaa0e44144df0dcb4f87b1e1b3651b66b83483a6327f35589bd56269d13d07a338eb5ca0b234cf01de29a00fb08a8a167c02ddc16e4a","ssdeep":"384:GvT0dY8d5T/54mISyZp0VOXpocgqmBrbp0y8pK2:Gr0dZd5T/54mISABXpLgqmBrbiy0K2","tlshash":"7bf284450ee72811c1537177afaf6445b038a0070959d6247fcca7c8af8da387b9abed","first_seen":"2025-08-09T15:32:00.926719Z","last_seen":"2025-12-21T07:53:06.290971Z","times_seen":2,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.11.2.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-1.11.2.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-176bb\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\nage: 3424864\r\nx-served-by: cache-lga21955-LGA, cache-bma-essb1270070-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 7530, 14309\r\nx-timer: S1766303548.719895,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 33262\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95931,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32047)","md5":"5790ead7ad3ba27397aedfa3d263b867","sha1":"8130544c215fe5d1ec081d83461bf4a711e74882","sha256":"2ecd295d295bec062cedebe177e54b9d6b19fc0a841dc5c178c654c9ccff09c0","sha512":"781acedc99de4ce8d53d9b43a158c645eab1b23dfdfd6b57b3c442b11acc4a344e0d5b0067d4b78bb173abbded75fb91c410f2b5a58f71d438aa6266d048d98a","ssdeep":"1536:5P1vk7i6GUHdXXeyQazBu+4HhiO2AEeLNFoqqhJ7SerN5sVI6xcBgPv7E+nzms9d:A4Ud4qhJvNPqcB47MfWWca98HrB","tlshash":"7793d8d9b7d67062977730b850bf510bb13a98eab80c4c60f1a4d8e47e74a89507bf2d","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-07-23T00:11:48.833008Z","times_seen":21484,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":16,"dns":0,"connect":9,"send":0,"wait":9,"receive":3,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/why_choose_01.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/why_choose_01.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/why_choose_01.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/why_choose_01.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /assets/images/why_choose_01.svg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H56PzQmGyD9wup2kqjXFZdEskJwmy1X0SIc76vuWC%2Bg3sJt8jf%2BqiDGJU%2F58bF71CJ%2BNnIp3sbg%2Bo7JdWI1L9RXOTWMVsYNj8S1l\"}]}\r\netag: W/\"e083d3332a005e8dcbaaafd3ae62e604\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9b15ccfde81da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8813921,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7fb8e98478aeb55ac720921e729eecfa","sha1":"c67aec4b0adcfaccc2b7b4ad5b7fb9519b860c0e","sha256":"1dbd9f077497c094ad428947084cdda59f95430ffd0e12af2f8fdf769ab3e50a","sha512":"e5382c0253b597d31860fdb2f6f2aa0acf3d626cfd9084b88dd3dfcb2db36a8dd54b80d606439b1d54ab8fe88a65ed190b91ea3d648f199521aa7da80d14e0d3","ssdeep":"24576:eM5Aj58MmaL/EFe88P4IfKhewxJ4BSVRSOhvF4:pBMUF8i4","tlshash":"f32522f974ae3e5f3a24d36430164db82fe0452bc51f32c992c5a0c6be6a5f4532ed85","first_seen":"2025-08-09T15:32:00.912215Z","last_seen":"2025-12-21T07:53:06.292926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj7bbmzh","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:37.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj7bbmzh HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:37 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RUsXtgqjardWAXYmO7XqhIbdwD6r5xMeEfj1o3352oJwRUyo5lVP%2FmOuhu0bUGQQgVmEHjb9%2FzEOWUyXD1UoyN6sCNM%2FncZ7Raj8bSyZTbKjtoLiAXE4Tx4%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd1148e432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjckkguu","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:44.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjckkguu HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:44 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkBB1%2FKavUAyBiTLrcjgfT7c5m6uOMxu3903IJzpVs5hKLmaw4MPrafsiqBiY9siwdAdFlfCa8GGVfWsY0OWhzn6h8LxFLtGmKC3G8aSL0m9tasi1xTrqBc%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd3bda7032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/css/8d9b6ee3541a7223.css","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/css/8d9b6ee3541a7223.css HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ztWLzQosqw6qIrXbzFpgXXAGFeFUfxFRvGyyADqu8lZul3dD%2BEkLwCGmEZGtk5fpzMUnMrcMnP1zXXm6fn57vc4fqTaxxhTp8G9t\"}]}\r\netag: W/\"56594a2fff4034f427be296c56913ee2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51f90a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193507,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (37940)","md5":"d5fa308c091f0d3213751e1160e01ec9","sha1":"244e9fa99ab49b8bc7693262371773de6e7495f4","sha256":"cbf66f0b40fb02302a3aa639773c4b609720710ec6ecb5d8cba8e8c8870f562f","sha512":"e65fbe3e8c308b3f537ba10d3a9930f70ffe3d4ae08a4e53a5a484ca4fed82c3257848f7eb7dbc6929f526642dc4453aaae822e6e5cc0ff8af4bf984ccc6c31c","ssdeep":"1536:5weZj3v/1pIstU8+U2k3H1sBYaeZmbrkQuuchRo3J3K7f++NoV8nJq92MoaF:CS/2jkla9YhRyxV8n49t","tlshash":"2d14fbf9e18850e87732c452bf55b75d3099f63ad4929e99f40e212c4ec62e21783fac","first_seen":"2025-08-09T15:32:00.927697Z","last_seen":"2025-12-21T07:53:06.293983Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/media/banner_img.79febe9c.png","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/media/banner_img.79febe9c.png HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/_next/static/css/e320f3d2a0cd7de1.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 2053953\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"ff550c7ff9b33c317874beb749f0b4ae\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wzf0uDh4oxZShjEbMy%2BgKSn6CnPfKlxYLmd5Mtmq2g7sjBIPnAqPXWa7Unfay%2Bhuc5CwGNeedAYOZVTYcARFQE8wLY3UGxQv3Xqq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncf-ray: 9b15ccfdcfdca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2053953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 756, 8-bit/color RGBA, non-interlaced","md5":"f18a50af6aec62f4e7c7c1280168d92e","sha1":"adae6f40dcf5f832e9bab068de17f59216eed37c","sha256":"696abeea866e6881056aaaef44cbef0fa8e2589c2adbec1a7206b7bfcf0347cd","sha512":"06e692bcd84c1ee763fd1eb9fdcd9b2c5b08c130c517fcbe0bcd90b129895733d00861abc89ba8e26acd3b18c9e35dcb70496b198fa5b94ec511798827519062","ssdeep":"24576:pnVoEPZTXm5lV33e0qDDpGd74DUAjTP331DOPR6S62Sne2Y9tC2XFF:pVoERTW1u0qpK74w6Uv65e2Sc21F","tlshash":"a12533bd24fce1b68fee4478978e574f33a6f5b16c66c8352813688d25abc028754378","first_seen":"2025-08-09T15:32:00.923732Z","last_seen":"2025-12-21T07:53:06.295179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150020\r\ncf-ray: 9b15ccfdda6556c3-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"64cac444-24a04\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 267652\r\nexpires: Fri, 11 Dec 2026 07:52:34 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xy9tCNC62TePvuPq1OGEpPatomXgEfSk3CwvRaYtnS5ZBb08EzuaKH62y2Ga%2Bm9esTyO4pI%2FnNQpZEWyPxxpmIJ4qZehssNNYVtxowN4WBGCjQDcIJkHb5aMeEjVgsvryd%2FeSqBN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-07-22T23:59:48.235016Z","times_seen":39906,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":10,"receive":4,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj6504an","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:35.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj6504an HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:35 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RvWvIZsQCAuasudfalu8AnVz3M4urDDE26Y%2FW%2B79Eyvsv4I8D5sUSu%2FLJLmowgUg4bLUztcNIqil%2FZkV80YOipBMumIip1RizegF5eQTd%2Bz%2FsBNf8yJCMLw%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd07bef532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjbeaqq7","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:42.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjbeaqq7 HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:42 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CKwsjup4TItNTiyHE8bQqIx29d0UgYfuY7m84EuZiEJHG15RHiUcicJrMeIjrHJM%2BzPtdEhrlm75eztMeemEFlMBSa5bctWqEEw6JkGmPVH1tr%2BhIB48cE8%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd325e7132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjewlg6a","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:47.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjewlg6a HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:47 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FWAu0DcACi5lDR3y1k149kKDWD%2FADDnNsKkEKmlCJ47y4Ww2nrUr87uZJpQaDgUlJxJa6P%2BSzI%2FEAlLwBx6%2FmT0Fc%2BVoElvdygFvFklv7Ar%2BJlGhxo9eP0g%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd4ebac132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/pages/index-3e39adecfeefc7d8.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-3e39adecfeefc7d8.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1qOf2DZK%2BeiIVwuorAyc6QHIcy%2B75aYPJbNtnLzwzc6Sv2pNDNlHyXvUQINSIMOgYeAFRT1DnKC7pTg0rjqZJgA1XlI4NVXQ8w%3D%3D\"}]}\r\netag: W/\"34c25e3cede2fca572a7c69b83dd8156\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51faaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9874,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9874), with no line terminators","md5":"fae67fdfa8f7fc5604cf26d89f3d5ed4","sha1":"135c2b6fd8934cb4c96363ef11e85e10684f7b50","sha256":"7c3c32fe6a77b172e770d5ec580f4ccd72f888f264da8857bcd548e0614b0636","sha512":"af25433803de3571c3ee0281444a36e1e9d7e30352a208b9fd4d71131290e54dc41d3241a60c8338b56554ddb4a7c95617f9663685fc78d90fb713695d554723","ssdeep":"192:jZs4aMHKAKUMPUpoM+tMgesN7XBBAjgRgfgbgyBEtWSpYPwBaV4t85A7t85Lt854:Fs4tHKAKrPUpoM+25u7XBBIgRgfgbgyl","tlshash":"8012bf24a054ebecbd6b09c8252fd81c722f3a48c71908f4befab4655b544f87617bc9","first_seen":"2025-08-09T15:32:00.922682Z","last_seen":"2025-12-21T07:53:06.297043Z","times_seen":2,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/datafeeds/udf/dist/bundle.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /datafeeds/udf/dist/bundle.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /404\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o0QYo%2BMoMzkEhTpgcJ1GHTCLuEFKytKOaxog3QVvsu4Su2I95Hw5KMl6kLoLePTDqS%2FE4OVt0%2F%2BCy21LJL5K5Qqs32LlPPdFurDJ\"}]}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9b15ccfd9f8ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/api/p2p/pair","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"OPTIONS /api/p2p/pair HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: timezone\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KD0bFhglp9IJHip66EiM92YCUqcEc1wpxPgAanZMZIeNQYE1WGJKRw2wgFqUgS7w%2BiBXuG%2Bs7JsO4X4A0fMl6QbDpx3%2BeyWEZ7wAsqltEdLIviCJOIc%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15ccfdac8832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/slider_nxt_icon.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/slider_nxt_icon.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/_next/static/css/8d9b6ee3541a7223.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /assets/images/slider_nxt_icon.svg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FQrZZSZ2NZTX2h3jJ%2B%2FYJg65bqZhMvWg7JIJbX7V2v1C8YviyIkAVUXAWnivhl4m4aU9Np0ctVku5V6IMp%2Bmw49rw01VTHrkzkZE\"}]}\r\netag: W/\"3a6151a9e363cddc1c07270327a4beac\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccfdcfdfa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c61c792767ee8de98cdf4718b9180f75","sha1":"8f8fd790abd77277698df84c83c540b193cb47ea","sha256":"bdab050e77c4fbe8db61821ca92c1ef27497a2eb4372735cbb922490bd13329c","sha512":"57df85e17d9dddcf6190db695df5d5e4a74062ea6705c1ddcf3aaecdf8eb78c93e647a411d4ea71f952824f2def4dec6710095009339751def4f430f12008109","ssdeep":"","tlshash":"60f0c953ab9cf4506a475f6da5262a6da58770b96a84400c71a89d08fb1a4c33d28fd4","first_seen":"2025-08-09T15:32:00.906355Z","last_seen":"2025-12-21T07:53:06.298295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:45:09 GMT\r\nexpires: Sun, 20 Dec 2026 10:45:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 76045\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-07-23T00:32:29.416216Z","times_seen":9403,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":11,"receive":5,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj7bhodi","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:37.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj7bhodi HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:37 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p5KovWjW5dLbi50gPBa0IJ%2Ft4DNiIXqOWOw994ougLicga91cj1WhN8oY8DxUkMZhaGb5QyA4jfmi7KFPHk0s67oPKdECCsATlOjMycJ193mDYNQnjE%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd1148f832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj7w6k10","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:38.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj7w6k10 HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:38 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ixVa5ektFzvEefoSH%2BPYudJmIcIdIOD%2Be93B3FnLd1ibVMbtYONafrjg6umDtkvKGlPbIHb65E8y7yDv2BR358QyLFs7SDlNsse53ifYIqV07zLSLJb2LKs%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd15fa1332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/framework-4ed89e9640adfb9e.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/chunks/framework-4ed89e9640adfb9e.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJTXYddQDTO6y3PhZ%2BaxFEfvcPSsbePrW8dei4GS3AkeC%2F3pfA8QBB7EVI66eMZ0sHLmxV7bbcCGDNLACUU8WQ1gAM7g%2Fjo0648u\"}]}\r\netag: W/\"26f46bbeb725fcc71006504fbf449894\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51f97a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140953,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"559e777379007506d17e0a4e7f608a51","sha1":"631dd16c25dc9420a721518022761eadcb6a3171","sha256":"8b219e2882c6c3918baca761cc2f4b4212b90d1664a43608155b1200013939ca","sha512":"e67fc6daf90f2097229c834a1bf1d8ec734d9211970e9055943297129c060840145687ca6776b8b31973eed84e14ee5edc238c40b9e5380a5d99660acc916855","ssdeep":"1536:MIvlesNeZ3jR4o2RQ/hmXz4fwKYhOIAMiUqI8ix+vQm1dqEYQZ7:MIaJmvKgiUB8ixiZ7","tlshash":"0ed317e83992f5516ab312a700ef1807733d5a1b280c4990a215fd9eb5f846fb17becd","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-07-22T09:20:47.314671Z","times_seen":5843,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/image?url=%2Fassets%2Fimages%2Fbanner_033.png\u0026w=384\u0026q=75","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2Fimages%2Fbanner_033.png\u0026w=384\u0026q=75 HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 73877\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"banner_033.png\"\r\netag: \"638c6b1e66028106493b7b932de0cb34\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NaEqGGJnNLGsppvRllWSlIPMz3tSFOes2Xvf0TLuPfQ%2BfSCkMx3jsaBVY%2BLuaowWlcsmP0TQkYtIgfDZCzjU4wcvG1sBKdfhqwwj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b15ccfe287ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73877,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 394 x 153, 8-bit/color RGBA, non-interlaced","md5":"2d7cfd3e019bc8a8e16f8fd0984ba71d","sha1":"a8df10b444355aa6e8b07b13d7ed0bda1bb53721","sha256":"d01eb04882584bab8362a8ed267d941ded79a5af04659c259bd93e957ea0f3cc","sha512":"7401917a2cb14d85d6ce2e0b29bc5ca541165729cba7d07c38012013472da8e93fbcc2f68bbb31b17c7da0fea98ec7e1b7a33ed7828d7597799870e6c2fd0131","ssdeep":"1536:4sFyHFyj0ZLJIKJ5WN0ThPFbzb+A6fHpfEk03DMfL/eQys9tqZaXNTF6Tj:TyHEjkdDLptXb+A6vp7kD+ywpxF6Tj","tlshash":"337302bb1aee0a6fec29772ef5bab345e7d379a1484fe541aed4f10810b24549f0160c","first_seen":"2025-08-09T15:32:00.904148Z","last_seen":"2025-12-21T07:53:06.300574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj92dyb0","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:39.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj92dyb0 HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:39 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ul3D0RZjH0M5KtI3ewl2HRR6IO8lyi3MYcQD%2Bs2CVQXq0uYghP6yfphcRoLUNhwL6JHD12eF2de0hbLLxWC6QFsgaj5dAU2H1Jw5z78U5VroPW%2BnCRV5NDI%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd1f7c4532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj9od4nq","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:40.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj9od4nq HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:40 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHKiZo6BcztR72n6Dbpt1d%2F4FbHeYyaEdgYW9QdqDjGaSW2wIzJwY9Cu00CN39HfSpyNDSYJ2F5PFHMpGNWUmElFm7OzeIlnLC2K4lYHBmfVr%2FhSu54%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd246d5532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjfkjuap","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:48.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjfkjuap HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:48 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KuiaXhWXyk7J1pECkF1o8C8XyDiRBqonP%2B1rWVlAZFY8kvoQYIxNEgON92il0vJS5%2FTuTcjInM8Oe5vXyuLk%2BmrJgLNp9T8MhCa02Lh5hg3ansRMdpQ%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd542d7b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/slider_prev_icon.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/slider_prev_icon.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/_next/static/css/8d9b6ee3541a7223.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /assets/images/slider_prev_icon.svg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QRONepykh0yE7gK3cJ4NxXwRzuMhMMhYMWdLhp6E2w4Cw98VGiJS9XvClStGYDgEeeV6IN9db%2BPWB%2Fm82FafiRLdzlwRYVtiK8yZ\"}]}\r\netag: W/\"a1da8d114e0572ced07c18d6c77bc657\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccfdcfdda0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":553,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"54b8d5e205a153216c6cfebb41ad2f65","sha1":"aa25cd8b8b679d82071ba1b3e9ef39a3021f08e9","sha256":"59fcfbef9a34a0143a59a61d08c3c559282e65d4b1c89bbaf32d6c24d18c72ff","sha512":"561ae211a9aa050daa026bd871669448deb855efc9e0c335b01b3175fdd31938297f85499435bc8cc3877dfc2d844872c8dbe8d1ce722784f1932176c665cc30","ssdeep":"","tlshash":"76f020b3c5acb4110201ebdcdd2b1a3db86d30733e82423592800520f3868ff582c9d8","first_seen":"2025-08-09T15:32:00.940076Z","last_seen":"2025-12-21T07:53:06.301824Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=IBM+Plex+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=IBM+Plex+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 21 Dec 2025 07:52:27 GMT\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35637,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c9584a5f1efcdd6957dcf290a1e5d0c7","sha1":"a9d1221a5ce193a3d72dd011a6f1b47b29b482db","sha256":"a7ba371f6a6ee0d4d16c688e1e990c37b2df69e8eed2f63335c8d944c31198a5","sha512":"36962238a94ea57158bf533521e71945a8dbb85c493bdae747dc56dddb93fe77216aa20713514faba6cfe5c6bedb1864bb7c160e082b591dd0e80d31f668ab87","ssdeep":"384:v3kf3H3EQ3T3H3m5faXQAgDCfNKQ9hoffIFQCSd4fDQQnTytf2jQE8f2fZWQhtBJ:/CXTzXvYQhDag","tlshash":"5af22154c06a6490a6031dc633df3e329d5ea8502889d6bd5ffd2db89cead366370b4c","first_seen":"2025-09-09T20:34:30.889677Z","last_seen":"2026-07-22T23:49:32.730523Z","times_seen":663,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":56,"dns":1,"connect":8,"send":0,"wait":20,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/mobile_img1.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/mobile_img1.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjbzubol","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:43.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjbzubol HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:43 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x2iTQc9CRV%2BTIVKDvJdDO5s5WGKhB1G7Qc6BhvK2BN0T%2Fer0QlBw8LGUgyddjEjJaGK56%2Bg2eOYmuVgWREDu6RO3a8quY5DUmB0uv8zJcMZpge2CSIrD\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd37285e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjexrfqf","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:47.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjexrfqf HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:47 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q8t1ZPmkQHpbeCLeqLYNXTN1bychaiJQFoSZktt7THRgP50cYuJ5SuhBagUE8e9uAr4fY1YwufxkzwzMNFvOTDKEIlTsnA7kr8eNUo5xoua%2BFbx1QIQ%2B\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd4f0b7832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjez72mk","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:47.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjez72mk HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:47 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zLUDJo9nd8w3D%2FbRvJOBy2GRzyUd%2BxyNds%2BYRlmbA8u40mRbi8YEAeVLXO9gmu8AZ5y4GpmpLaBi548%2B4FAwxWvxF3WMEP6MD5Wv0%2FjV%2BXtxxnE5iTg%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd4f5c4232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/favicon.png","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:29.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 253238\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b54347751134858cb68d6de283fbac3c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /favicon.png\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R2mVGbuQYdBCFRiCnUF5ZM2PPoBjI8T%2BxBy6Bz2tbWKmNFJl90V1NVonTLZUX66M1mcuIKIocgwone%2FCsRJm2bQBzgNHYwund3Wy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncf-ray: 9b15ccde2f89a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3738 x 3738, 8-bit/color RGBA, non-interlaced","md5":"0b75a11a262b31635148bf1e6ced6c9d","sha1":"7d2da9a5bcc442e7e54d0abcc48a23fed138c385","sha256":"20b7a48049d9bd4af47af4f77eb76d8facb77a18d01bfc73b017131e7ed310a0","sha512":"32f8a09f302b1ca5d6156611a24a037d9d27e13baaa40488961323f4bdb9d2d5966f0cbfe52581aebc9b3c98945e6f9ff2dacb1b0a646cf678389b53a5bd0b2f","ssdeep":"6144:utq0tOCMMnVCcAhULhgrIzz2eeU3lCR0ES5:uVscmUlgrXeeU20z","tlshash":"4b3402c5cd0b9cc0ed2a1f7498ad0fa477301ac886e4176b8f7a24316ceb6de641b957","first_seen":"2025-08-09T15:32:00.933099Z","last_seen":"2025-12-21T07:53:06.303862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/service_01.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/service_01.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /assets/images/service_01.svg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oyc2skDzAl8SRBly9%2FiovgjbwSisGfQXzt5qQ9kmxcxD4kE%2FqM53p3UbrG%2FMBpv9kYUIrbyqo24%2BXp9%2FiNuhr60snjcAkPxd%2Bwan\"}]}\r\netag: W/\"4e699f8c68df53094fbd9d4d65e5b454\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9b15ccfde816a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70253,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba23cb3420beaab0a37f084d1200cd12","sha1":"1f4f31aa08fa474265e54061d341e3afa9eeb280","sha256":"dc9ce3372a06be36f974464d3973881c300e1cad7e42c96c139387cdbc91be12","sha512":"d3b7fc4c067d27bb26614487f9a8e7b90cdc9a1cc43fa1789762191426066fc3ee4559b246f122c1baeb453d6605fc89342884c5a2508d424195948e63815351","ssdeep":"1536:I+GlfVs7INzqah0p8gaIANbPozmiMdtd1sMXFC:VGl9OizqgAaIAZAzm9dtHswC","tlshash":"246312f460591a6f8eeaf02451adfc857c51c7de4ae81bff30987c9a285233898e45f4","first_seen":"2025-08-09T15:32:00.915901Z","last_seen":"2025-12-21T07:53:06.305144Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/playstore_btn.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/playstore_btn.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /assets/images/playstore_btn.svg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hSYr6fj9jDK64a0BII3TN9CWeQdcBqtj0VDDGdPFSCKbJffhW4NlwGW5n0kn%2BTW9GDMEyzcuUSA8J0O59lD3fwCl5%2F71kdi3lw%3D%3D\"}]}\r\netag: W/\"c609c5a5bf386c12b7fffcfc9c9b344d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9b15ccfde81ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a79145db710269df304512dadaa2a3a0","sha1":"0dcd0ce7a391f6aee6640f4260bf4e56a074ee02","sha256":"cd63e01867d2d0a89b108da15952cb5f2c4ea6a1accee853cf03f4ecb5c01d96","sha512":"99840c5f531ed94295963d0ff3ed466efd7feaf29dfde8c85cc3fe414e43df8711a544d0b217641cdc1a1d4368b6006ec5e005c464ff02b9a30897cdfc05b7b8","ssdeep":"192:FwASrZq82SHi5LEYYz03gxNGHhFeLet5YWcmwvuNNMqx7fOjU+F:Fp8X2Ki5LExY3gxNvgyW2voNMmGUg","tlshash":"ac12b8cdb7cde1a4f801abe6d704852d340ba9fa5d43cae58f580e11fc466bc8d29883","first_seen":"2025-08-09T15:32:00.935261Z","last_seen":"2025-12-21T07:53:06.306444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/banner_bg_light.png","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/banner_bg_light.png HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/_next/static/css/e320f3d2a0cd7de1.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 2058934\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"21c26e637356dce457f05d61db7e8aba\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /assets/images/banner_bg_light.png\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQcDYcinpca7QZiyUgzb5dU9RLK9qIXd9Rpm1n1vEhE9yYSeKWyyVNzG0AdW%2FvkuKJLS0efQmHksY%2F%2FfF7%2FsysdXnKbTP%2BXmwZo1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncf-ray: 9b15ccfe084ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2058934,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 756, 8-bit/color RGBA, non-interlaced","md5":"ca772ea5fbc26f7be062d68b62cbb8d3","sha1":"254ac07d5accb498fed0991289fc56a25d91d43f","sha256":"5e054c5c7a2df549d24019c85ddb85db0462807973f17402114fabbfe7af38d9","sha512":"7982f02f72889b9d8f7ee3d6a14c97185b5167dd418f7a11292312fcbc401c0979495df9a0d7235f8941006b2b82da84f36f2d8b9e50e78eb8cb333f984faa77","ssdeep":"24576:4HCiWIptSgQ3tLGe4PHauGSkZxiPtRrs8hhbqUy3YqCqpRMlogPWLg:4FRptSgQ3bnxi/Y8aU4N1pyhP","tlshash":"892533e07b69a4776a2cb047658242291c72e315bb8df8696901c7f1d36feeb5020f63","first_seen":"2025-08-09T15:32:00.907912Z","last_seen":"2025-12-21T07:53:06.307697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjcma3jh","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:44.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjcma3jh HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:44 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWD4K%2F60q2aNgwTe7B5chPozdCDPVWJUPnpAf8SXvLy0XafShc%2F45wj%2Fnycyi65ye46YHXAMdiyyl1fi%2Bys04u39hJLYA8iXcCO7PTqzA5r5vCJtYnI%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd3c3b7d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjatl21k","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:41.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjatl21k HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:42 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HyaCj3cRRUFT3CUcpWD3DdUKKh9fsKfAOqzdosFUXIheH3EkLp%2FYPLjZaX%2FI3C3DdHjtQjRa0sboam2ZRbJr%2Bm8Lyr5KqrKu0fQTa33Oo3ZdyE6mBRv%2B\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd2dad7a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjbem3r7","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:42.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjbem3r7 HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:42 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGlPZWqAEpExuwSekL8ps0q9zc%2FQe8TuswchtB3JqgV7Xww9trhaRjAfwwq5BqY9YvHkYLqf6JpE1Ij57cFb2B8%2FR4o1ujEnegU7nqZ37IQDeup9EqrO\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd326ea132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:45:09 GMT\r\nexpires: Sun, 20 Dec 2026 10:45:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 76045\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-07-23T00:32:29.416216Z","times_seen":9403,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj6q5c44","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:36.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj6q5c44 HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:36 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=83B6UaqUU%2BuATaJ1qT3GeD3bluiotoVnBaBZ82pH6UoAOw1rt9iNTIyxv4bNuvlL%2BibknydgcNqq%2BtbI8SQNEn10mKNg3cMM8%2FBsc5xTsN12SE8hjxc%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd0c789532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.1/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.1\r\nx-jsd-version-type: version\r\netag: W/\"38d97-sT73BUPXDB7H/dVqXrydfWQCOFE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\nage: 3975506\r\nx-served-by: cache-fra-etou8220158-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33026\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232855,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"896192cc65e20f1fcc6d792b5b9a4626","sha1":"b13ef70543d70c1ec7fdd56a5ebc9d7d64023851","sha256":"d939d21f27010c09b6c2966681d8b4cfcd64ca418f240922518f967fded16ef6","sha512":"67f75e7f9cf9bb6691f3d3aecd873198327406777957570aa8111bbcb3a250d59d83d3d079756f5cb23dd1213840e1c695f2ea5270cd540632662f14c144e659","ssdeep":"1536:EZCtjXbn98fOdRfvO5wlP7Qy9A37zV98IsY/ElV6V6pz600I41r:/tjT98fNV98mI6V6pz600I41r","tlshash":"d53481d6f590317d9ca7c1499681fefd896fa985cb1209aaf003776807cabd30962dcc","first_seen":"2023-08-02T23:07:40Z","last_seen":"2026-07-22T17:50:03.170156Z","times_seen":6764,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":26,"dns":3,"connect":9,"send":0,"wait":9,"receive":5,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/3502-a6c3717deced5376.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/chunks/3502-a6c3717deced5376.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5HcYsHpJVTDaQnsC4yHwNZWZ3QcoKyE163B9hDofCQ%2Bgs%2Fq4YwdBmTYHsE0DwwSbDocsA1W0ridRrKTsGG%2BRpssBliEb9oKZqk9I\"}]}\r\netag: W/\"e1212c36cae50f121acaa24278e6435b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51fa6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22487,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22487), with no line terminators","md5":"c7334661362d8e63e116d5639f0579cc","sha1":"a21cfeb84e497c49c6f39a106db88a6e9e0f51c3","sha256":"5d6ab6caeb92fb9fb663b34dc249a531965239609eb027fa56dcdc53cd8b663c","sha512":"cb608be6a54d98e15bd420d5d4f698de8975a0e16b2e754ab8eecfe4685d3ce57e74b725188625a9fa4c7f8038a050d38ef29300becbc947c212d1b243bb960a","ssdeep":"384:S3BSjVlbPkMt/r8rg6C+4v13tHB9KR/el0Y0cEZEZENEMeEnOmEaM+CMawivVdx/:S3BSH5t/QV0jHrK1Y0cEZEZENEMeEPE5","tlshash":"cea2e77836e0f6ecb54b18d4502f902d7a2f768c960908f0f17aac3596189e87d53fda","first_seen":"2025-08-09T15:32:00.93895Z","last_seen":"2025-12-21T07:53:06.309393Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj6519j0","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:35.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj6519j0 HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:35 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ArwyP3X3zs4XbMyWI2SH46OCpIfOHYHPO4mx3J3IrHf3iJtZZ0YeGBeAXeDqm6%2F%2FSFiAg6b4MqvYOxdJHH6j4nL9r%2FhgGFvtSqvzGFoVYvY9L6vqorU%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd07cefb32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/pages/_app-e2d221eb698ceb94.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-e2d221eb698ceb94.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owPYS%2BlUH2Buhr%2FrCAtdxT0ovc6xi7fIvfsLWzeYK4bIvev775Qw2Z8XP0rpWd%2ByRBJQqg7PI2t6hN4YF9XuomwH6byRrX7adw17\"}]}\r\netag: W/\"7c81c69dde2f67e0f41a115b10e4372a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51f9aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":301663,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"efa1aee90db21c715955eb05f3964c6d","sha1":"3481e9d08d6fbdb158d3e81cbd5a7f6ec31232bd","sha256":"dd688a383db4acb31373063cda35fefc4e771e904122ac4632ff1305879dd414","sha512":"d3bb9b409068f510ac5f1d088c7a96d9e4dec1aeaa5135482d152c98936709b2cb9466e61f0b9a1e3cb281071d410e3ffa9b8a7875461da4a9164245190d4d31","ssdeep":"6144:dmwB4vB16K7jInDS0eeyIh3lGQM4uBgeiA7d3NH:uOajJx3rzZNH","tlshash":"41541a89b2d1f07506ea50a6803f510bf339a995740e8058f728ecde7db898a7177f78","first_seen":"2025-08-09T15:32:00.920465Z","last_seen":"2025-12-21T07:53:06.310604Z","times_seen":2,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:45:09 GMT\r\nexpires: Sun, 20 Dec 2026 10:45:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 76045\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-07-23T00:32:29.416216Z","times_seen":9403,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":1,"connect":9,"send":0,"wait":8,"receive":4,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/2741-2239f1ccc2cc140d.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/chunks/2741-2239f1ccc2cc140d.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMMlvJnRZmvm1icKc4qfzSuvCx8cwKRBhsWsZORMGAQ1%2F3zKPd0Yav67Xlm48aAqILxdGJEFEPgsKm7GAyQFmWuZtUZpAe79zw%3D%3D\"}]}\r\netag: W/\"f7dd2eb0c430163a560dd0494d689c56\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51fa9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18438), with no line terminators","md5":"c1cef2b53546b43f8ad21ef2687f5892","sha1":"1701b7b06f21d2b39f9c70839fd5f6d2e50964b4","sha256":"a19508d3e199f8855965f298482d335559f04c328258f17c3c5e3c28cd36319c","sha512":"77211eb18b4c7cda3062bf28f6e4789e857767a4d1e859faca5311f3c02f8373ade2ad482bbd1b1ee8d379774acfcc9dd5436658a370ccddcaab8fb2938cca53","ssdeep":"384:+53jmqXGIsm0Y0cEZEZENEMeEnOmEaM+CMawivVdxQgl3B9KY/LEwBqLZM6zgOiq:mi0GhY0cEZEZENEMeEPEaMP9wivVdxQl","tlshash":"7082b7b46262afecbc675dc8543b602d316b139ccb4e05e4d1b6ac74218cad47a92fc6","first_seen":"2025-08-09T15:32:00.895696Z","last_seen":"2025-12-21T07:53:06.311928Z","times_seen":2,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/why_choose_02.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/why_choose_02.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/image?url=%2Fassets%2Fimages%2Fbanner_022.png\u0026w=384\u0026q=75","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2Fimages%2Fbanner_022.png\u0026w=384\u0026q=75 HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 117461\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"banner_022.png\"\r\netag: \"7c7f95252bde55c6d3d64e4b32eaf2a8\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6MI0VW7%2FS8HUknbH0fl44txEKXsI%2FLZ9SPLyXmmUhyFSROLWa%2BFBl7lgc69vDngIiGKq3MB%2Bms3y49NU4bkWMY3XOIIv4S1pSYFx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b15ccfe2879a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117461,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 394 x 153, 8-bit/color RGBA, non-interlaced","md5":"fdc069bb4a66aa82b268a662ca8779a9","sha1":"5c4b95ef9b8c1d683ec2e5540f78fce5ec72cec4","sha256":"d7c43adbb1dd6670623549fa98db4e7134704f8193c1fbe3ff43fed51f8035ab","sha512":"c4d6ad54c48faaea5329378e20d02d3bf1ccd9f74283c2462445ee644b37410fb38fa1ace6180eae7aaeaa3f5d89cbf610f7045f7d6eed539b2c375914c4c17d","ssdeep":"3072:YONjo4VDAdnQeCHfi5WHQID9F5Tz5JvstMXjtLRrqkM3B:YUZEdnr7WpBffvstM9RO3B","tlshash":"0ab312e3d4e9e6a523133fd60d487b7974fd762c0b8c2bcfde9462d019b82a0a446849","first_seen":"2025-08-09T15:32:00.934193Z","last_seen":"2025-12-21T07:53:06.313617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/chunks/b637e9a5-577c4b22a83d6c67.js","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/chunks/b637e9a5-577c4b22a83d6c67.js HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h5%2BB4O73DfmTIBGnQg%2Bz7EScjcfZETdYDR%2BPi2u1KuIpjmCeWUTGL9Eojf1LaM7CgDJbkD3YVJx7NSwxB8Xvk3NYWMcUpstVzw%3D%3D\"}]}\r\netag: W/\"758a706ff6d9f145a4ce32038db0a9bf\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51f9ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87664,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f025015805e93b0996e7413c4211fbf5","sha1":"150ba48bdccfb24897950f4f13ba389a3c1cb818","sha256":"46c8b1f0f162f08409686c73b9465fdae4fa188b49329e31dca5c5c219c045ed","sha512":"dff77696391afa3f583457a606e911ca7948d72fdde663a088b6faf17673e1b64eff8fab6f2536d5303486b1a0a5553a519e25b398678cb840c0a1d29b976629","ssdeep":"1536:vR/Oo1GDM+xvlVx7ZCAJ5QGvVakgG1UrPzEOMtmBMVrbPFtcupZK03Fi0Zgnwz:vRWPQ8ai5nXPFtd/Zgwz","tlshash":"f68319ddb2cab06347a770ba407f510ff2361999680d8400f115e8e9bc78a4a927bf7d","first_seen":"2024-02-21T13:19:25Z","last_seen":"2026-07-08T11:30:22.487048Z","times_seen":20,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/api/currency/getCurrency","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"OPTIONS /api/currency/getCurrency HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: timezone\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XtKlAs3%2BkmLwCUCCZMU98IhuDnwh1hZQaaZ%2F1FA%2FdW%2B9sTyx3WRlqGZNXd4mQCKrsityJ5lwFGIb6ZuHmN0mcbQPDShlJlusK9VOzHtjBmxaDR5IwP4GxQE%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15ccfdac8632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fja8ast0","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:41.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fja8ast0 HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:41 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HovMV2Gs%2FZiY14t6cP3bw3NvJ2ZyIeaapn2VcGMud8DTx7FnyBGBIottNGXWrWLUo9JFBisXsdZw0UMs1AtlHxpFMpCARBvXOyjrc3SeI6LZTwsb7D3HxVk%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd28dd1632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjdrfk17","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:45.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjdrfk17 HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:45 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJgDY5jWNS1ZJZgkWKJO1VilWeKXQQ6tVOpSFAPGGQLnzhOEXE%2FE4A5hMXr9byitSyEfYsnGWzYYTPmK9t9YSLuGsVj5jdxYxdk9y4%2FYe6M2ffS8rT2M\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd457f0032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj4vg7aa","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj4vg7aa HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:36 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SqBzyFOohu1MBYnrvZRdSpvv%2F0G3ayQZ423cA0QQ49tfKfOIrWj8czcquE5q%2FaishCMu25l4GfzuF8sPW6PRAQBSAjZXMYqcCIlbxiPlQzr6prmAsz8n\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd0959f032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":2531,"timings":{"blocked":1893,"dns":0,"connect":0,"send":0,"wait":638,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:45:09 GMT\r\nexpires: Sun, 20 Dec 2026 10:45:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 76045\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-07-23T00:32:29.416216Z","times_seen":9403,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":53,"dns":2,"connect":8,"send":0,"wait":9,"receive":10,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/faq_img.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/faq_img.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /assets/images/faq_img.svg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3pohYttBE5FqScjXCrvbfrT0%2Fd4HtUfgJIsczI8Y01RtQXWYeQjPkPsZHwY2WbpqRiQ%2BrIrMG1WVralTYOWTCjE3ScBI8ipB%2B4d\"}]}\r\netag: W/\"1387580e3479956aaeb820083244b79b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9b15ccfde81ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35653,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"96b62fff4ee9c22258f2c7ef037cffe9","sha1":"1054cf51069824d8c5324076e28d54fba433a4ca","sha256":"98c60efeeaa2355b522f61c2aaad753f2580675a32c9ddf5d58d9a09f1e054e0","sha512":"3c3d629f9a97ac7b8481892b99aed8eb1fa028897e67b4bad8cbdbafc88154fbbc214d4b9cf3d9387a2e716ddde624e6e6f5fbb5f4c91928f035ffc0acae76b8","ssdeep":"384:GD1KJCbJUkzsBHvw8V0Sz2KPy48+4aFQJFewUEOwsadi+358Dm282jpW0gm4e5X1:SKsl7zGHPgxJFewUFw7XJSj80v5Xh6fa","tlshash":"1bf2c7dc3b741ee8dcc8d7ebbf1244a9bc1691b758448e18c35c9f5c288586d9da29c3","first_seen":"2025-08-09T15:32:00.936721Z","last_seen":"2025-12-21T07:53:06.316649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/faq_img.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/faq_img.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/assets/images/why_choose_02.svg","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /assets/images/why_choose_02.svg HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /assets/images/why_choose_02.svg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPeT25XXQQEOhlzbeO74QW6wqYE%2FmTpX4315DvlciaY0%2BaxsPSF3lqF5bPk6s8qmlr7AsJZXa2gTATtshFcEUnFS6Deg4RDvYbE3\"}]}\r\netag: W/\"d101640df58aff985887cc79edf0606d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9b15ccfde815a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":455042,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afa73dee1dde7351258b5f3173c014bd","sha1":"8a7eb2ac2e5ddd033c2fb63a2e631918e3687f96","sha256":"4720b489ab41e4e17b312aaad762333e3f009ac65a78e1ccba4f26ea8c78386d","sha512":"44282629cc3d91f2a3e2c8a67b0ea36c66d971f15edf3be6b86aaebfa47a286081baf5c3b26b2a42fb452c17d07814e5f6a00e91ff875692b107b8e615a8c768","ssdeep":"12288:k6E+ck24VQz6dY4Ys1BIeo2Wuctv/XJHI8587X1X:++G4W6dYGI32WuQpIB1X","tlshash":"69a423316a123f5b8618dd1971964a8c08e58d857cfa3ced717c6ac3a1acf09a28f47d","first_seen":"2025-08-09T15:32:00.941973Z","last_seen":"2025-12-21T07:53:06.318128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/image?url=%2Fassets%2Fimages%2Fbanner_011.png\u0026w=384\u0026q=75","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/image?url=%2Fassets%2Fimages%2Fbanner_011.png\u0026w=384\u0026q=75 HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 92533\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"banner_011.png\"\r\netag: \"2d4fc38eeb9aa7ed7202ff1389c21816\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HrR4h0h2qwZaCUlEOke9LUgtjo%2Fjcrs9681K3XULhTXSlZW4XxYJ7ZMBgpwJ1IvFl2XrYElY6IVJ58t7VbqdK0QjYVzkzJbMnpYk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b15ccfe287ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 394 x 153, 8-bit/color RGBA, non-interlaced","md5":"ceea2ff4b638595acff3128529bfa45c","sha1":"006932c1ee593efc89c3432de01292fd62b42020","sha256":"27ed77625203f884189a6a7d2e7225e1a0575e68dbd5d78ed5e7a66301ce7adb","sha512":"e5b767b968fb8f0f79c342a0f303663bb4b1efbf44a6439f21c750545738f978e7f043ccbdcd9bbf88a7174f22994f5ee3ffb0f68650b1dc1986073dacf0738a","ssdeep":"1536:jNH9GPZnGfRFwRKypSxHgvi66YO+AVE35YFPOysLoHuMgMNWIfy7ywkjzuIBxjoX:jXOnWQBpTi66YAWJYFG/okMN2kjzujBJ","tlshash":"8293126a47d47afec16c8260decd2acf6236919decc79190f91644cc299c83a3f3912d","first_seen":"2025-08-09T15:32:00.931982Z","last_seen":"2025-12-21T07:53:06.319852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj7vlksu","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:38.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj7vlksu HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:38 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2QXzBn86TeWrnwSid%2BCrLLhrySbn3wFFkBjfmFz5JFH6KNQDKSqEmOQCmHx%2BHUBWkvR%2BMZmcfUm9t7GlNXEjRO3xXqcufSqWDSIxLvwQWxUIea7d2MJr\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd15d9e232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj932gdq","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:39.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj932gdq HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:39 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IiS6hG3lH680g6JuBT1euO88vB2MzJTM92AqranphlkvfKHaK%2F4R3B8oLa4N8knKZsk7DcCdFbKhrg7uEXO2Az0aGxbUJLgfyRh1gDK1WwfGwIx5x0g%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd1f9c8e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjateev6","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:41.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjateev6 HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:42 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GpU9Vm4XJrDxbf8U5xnAMoMs0RhjknuXuI6fd4UmcnFVJtwdoS5ACcTDf9Eigfuv2oyQiknpB68if4SIIf49iDiZne0CDHDW1iknqFp2G062b61fT42zo%2Fw%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd2d9d6f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjc16ks0","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:43.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjc16ks0 HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:43 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BeacvvsVgigZyN56d747QPQe5lXoxGNUcpNnF2yvPSM2dj%2BLbw96ryFZ0gUcd4RtHcwnv6JCJZr3YrIKnWs0rfaFBbyAUEv3E3oWlC3Nreig2cDwg4%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd3778ed32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjee3s41","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:46.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjee3s41 HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:46 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RfnCLenXf5jDl4b5cB1IEtGXSwzWy%2Fy7XVdb792fZuVDLs0sQFiwuoU5F3eDdhdaGjPXvITFe8veaCBtzqmVn4oDJBsqYfOrH%2BvZVV3PCH9EcWvmqzs%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd4a999832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj9n4w6b","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:40.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj9n4w6b HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:40 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nwd4G12Bef53Bt3mM1YDIBJFrCXnCaof9K4mlh76dZSmfCTnTVrbZ1XGoxq9Gau3rTiJObK62oNyH4s%2BaOucM%2FnZFmS6sSA0JhSakaqmzE0pV2Ni8MNE\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd241cea32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodwalletapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjfhp9a0","fqdn":"prodwalletapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:47.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjfhp9a0 HTTP/1.1\r\nHost: prodwalletapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:48 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnZ%2FU9IwdR4zxVvAfg5tJAVXWRC433%2Bx9%2FlnbUwnCCftI2VLKl2Y%2F1VdWteolyUb6OIaxvzEQEgtBa82YqBZjT0%2BCwCLCDjfE5prq17zFC5PHapZfB%2B3FDU%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd537c0f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodwalletapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj8hyxqn","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:38.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj8hyxqn HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:39 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kR5P9E0SwSQBS5jaiUK9Z8JnwzDRjNuxCZFcY2oMNkr7wYGa53ojsCUlE7jcaoTZOYOhpa%2BkkMQd4a5IkOMSjX3p4jRQYjwbg5WKBZcbmCftL7x%2Fdng%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd1adbf632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fja8ddfd","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:41.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fja8ddfd HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:41 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XtRp2GfNGeyT9hp3K7s1A8B2iCzBQyOPkwoBNGYvHBifaBDtCHrLBycG6yxIj4pn%2FNgw4fxsTfEYB4kPBr60A4P9%2FGo%2B71gen3IO1iXwfLs5cgJpXn9F\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd28ed1f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjcl40pj","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:44.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjcl40pj HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:44 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aq7lKPqsLYIvXhYdL8M4xT1Hp5JmvOjiMgQPIddu%2Fv4rku9sBmE9R8k9IjTa%2Fr2zxLpbVP76wNFXrkvHCMhzamxPijAbzlA6mtH4Nuc%2BncNr0pj8JKZU\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd3bfabe32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fj7ajkpc","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:37.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fj7ajkpc HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:37 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6JEJlye3%2FJ29i%2Fh7QgtAv5ZoTQqdr1NZyGVvRMaeMQ5hap9ahQjHg2iUJJaki2hraACFtexh5LZHtgVIzbojL1naD2c%2F%2FSPbE6rzOh2uQ2lCbxCt4EO%2B\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd11189c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitomax.com/_next/static/css/aa81d61ba553d6fd.css","fqdn":"bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:27.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 18:47:25 GMT","end":"Tue, 10 Feb 2026 19:47:24 GMT"},"fingerprint":{"sha1":"14:F4:96:05:D0:D9:78:A1:7B:1A:4E:59:D4:31:2C:21:60:62:33:0B","sha256":"21:8E:92:42:E4:66:5A:ED:B9:41:51:22:1C:D6:A9:06:DA:7D:E9:80:1E:6D:74:3F:9A:78:1B:4F:29:8D:1D:FE"}}},"request":{"raw":"GET /_next/static/css/aa81d61ba553d6fd.css HTTP/1.1\r\nHost: bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 07:52:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jKEzdOJM8TZWvEz0jGAP8AVkjQCACT3BwvO863BkuTo1kkjjjCcu8srx7zvCu5j8usbsBqB%2F1DeG7XIMjKa0wsw1JmkGtSZKMAJW\"}]}\r\netag: W/\"6bdc7ce6a84387a03487a33e592efef7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncf-ray: 9b15ccd51f92a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37291,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (37291), with no line terminators","md5":"05b592e0aff9c4d749c4faf92efc8d5b","sha1":"102f43fbf4c1d8eefcef6f951e4842ede1c24a0f","sha256":"d7c74e0970978b04a8ddad82acfff2f06d8ff2cf81f6a05c9585b37ac79be650","sha512":"4d28701b6fdaf51df2b090d470b75318ae4e5def1993b7fedea41d4aa366b45dfea7afc6ead7c740de76898053265060cf543afb26f7f7b735230b5a547f7f97","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4p:CMJihoCcZCOud8G8tKS65wqsZCG+dM2j","tlshash":"0ef24559ba4c9510be831b4322df6e0c95357588d530198abe3f31ca1cc1ed6ba73fa9","first_seen":"2025-08-09T15:32:00.90239Z","last_seen":"2025-12-21T07:53:06.270385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/api/spot/tradePair","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:34.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"OPTIONS /api/spot/tradePair HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: timezone\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:36 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sd8XMJ6uUePshFki2bJhMv6hARbbL6e6tQixrem4aZMx7Xzx8zmj5sNrELLHgOq%2FKGdsgGaVICvfyBv%2FgAqIOV2wHSaKngVs12ecgZ8FOvNbbXIEYPie\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd0959f532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T01:24:26.492937Z","times_seen":17465191,"resource_available":true,"data":null}},"time_used":2424,"timings":{"blocked":1787,"dns":0,"connect":0,"send":0,"wait":637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodspotapi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjfiz57t","fqdn":"prodspotapi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:47.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjfiz57t HTTP/1.1\r\nHost: prodspotapi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:48 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dNznZs7XGXA4JyvLNEdM%2BpHNfVO7agnDmU6uWKGFPkVt8fiw7vGFv5GYTDCIrHebHsQFKVq4aFTOkdaEx9bGQbLDDz9v%2BhuFv9eTmluQjQN4arFVt5l8\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd53cc8532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodspotapi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prodp2papi.bitomax.com/socket.io/?EIO=4\u0026transport=polling\u0026t=fjbfvugh","fqdn":"prodp2papi.bitomax.com","domain":"bitomax.com","tld":"com"},"ip":{"addr":"104.21.12.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitomax.com/","date":"2025-12-21T07:52:42.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitomax.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 09:54:18 GMT","end":"Tue, 10 Feb 2026 10:52:05 GMT"},"fingerprint":{"sha1":"34:DD:74:02:50:59:C5:91:5F:C2:61:F2:12:BE:E4:07:A9:1E:2C:C4","sha256":"B2:72:0F:B6:83:6E:38:B2:9A:B1:66:74:72:72:0D:97:8D:3E:2A:AD:4C:E6:29:D7:A7:33:69:B3:8C:91:C1:B2"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=fjbfvugh HTTP/1.1\r\nHost: prodp2papi.bitomax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitomax.com/\r\nOrigin: https://bitomax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Dec 2025 07:52:42 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1h2iPp393VntSpGvicI%2BIhnKJHZMBh%2FBbClqVWzTlttTfimvaH9Q7nnqmpZ3wSvQNEnY1jMoA7miTrGPuYFuilqjyw0fyUZsrEw7IG2naXolwwNUTA%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b15cd32aeff32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T01:24:58.453875Z","times_seen":543017,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"prodp2papi.bitomax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}