{"report_id":"b3143b34-3f65-42f4-9e57-4fcec95f56f1","version":0,"status":"done","tags":[],"date":"2026-09-04T16:04:53Z","url":{"schema":"http","addr":"bituni.top/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"title":"BITUNI","dom":{"size":24520,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18021)","md5":"6e39d88abac6c2ed631e66728b200847","sha1":"04dec08e515f1303e3208f7799d99df1ebc3094b","sha256":"4c2f13b123a6de3c53b1acf84b6088521d662bc546948d993feea2fbb496d2d5","sha512":"8aae1067471938fe7d7d7dc424aa233adfc10a7f2e8036f7c52f647b0b235274f8f13c5ae4abb09170ed6aedc32a1b66830110d787c390e8c42f813076dcb1b3","ssdeep":"384:n6ru7DBXZCx32YnS8qgFOFDuFORFOFKFmJF7FoLp9YcZHY+mI:nlQx32Yn3qDKOjqemLBoLjJBY+mI","tlshash":"e9b2ceb56600406713a799c1e670be1fb7d2f30fd00a8156babd81891fd3efab769421","dom_hash":"domhash023eba43a7ba58318fc897feef79b09f","first_seen":"2026-09-04T16:05:01.761961Z","last_seen":"2026-09-04T16:05:01.761961Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bituni.top/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T16:04:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"webapi.bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"webapi.bituni.top","ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-15","domain_rank":0,"first_seen":"2026-09-04T16:04:55.787718Z","last_seen":"2026-09-04T16:04:55.787718Z","alert_count":16,"request_count":9,"received_data":8383,"sent_data":4860,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-03-06T08:06:35.039863Z","last_seen":"2026-09-04T15:52:16.378932Z","alert_count":0,"request_count":30,"received_data":467566,"sent_data":17259,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"bituni.top","ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":58,"request_count":29,"received_data":2672305,"sent_data":12983,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bituni.top/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca04b19f7375dcc310ce413eef42f358","sha1":"43cf579ef2930b0aa1456f0ad40bf9a51f2251df","sha256":"c010f2e0c4e225cae3d73ae38108fa22ca8fcaf33b79d73deff57cf2ba7fc8db","sha512":"9e6002be207a4dc56fd82f65967e344d207df0554fd938fe059fe967271a9e20e5c5fdc01d020f8ac64df596a8489ad27ff1daa9fc2056632639f97ebe96ce2a","ssdeep":"","tlshash":"89116bfe191a602e6303444f976b7911642660ed401a185273ccdb9dbb9abadd0cfb8d","size":1034,"data":"","first_seen":"2026-09-04T16:05:01.847247Z","last_seen":"2026-09-04T16:05:01.847247Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-04T17:05:38.457728Z","times_seen":42270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-04T17:05:38.458266Z","times_seen":43654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-5b690286.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"929bccc528ab837bf6684a35d60e88e9","sha1":"0f608aa9193278e87b8f60d5d1c143f67aaa59a0","sha256":"4d2e0d38a9e8bc016d5c4508c4fa08e28cbbfb9551cb517f891a1b8bc290add3","sha512":"7db4145088f37b405662307d69deefe40c1bb47617faa2689887ac49a0fb0407f45aa226d815ef379bbf0db561a3d47ddfe5b517f21c87dcab56fe9dd0faac45","ssdeep":"1536:gmC2YQsGAyJEn1HBF0vinYRS/rHYaq5mAiOQrWmwKX:gSAdyJEnSM/rHYaq5mAixfX","tlshash":"c8a33cc995070fff6cfd0854a99b491020a91f93588ccc97b3beae552bfacd42389719","size":101275,"data":"","first_seen":"2026-09-04T16:05:01.790461Z","last_seen":"2026-09-04T16:05:01.790461Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/charting_library/charting_library.min.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-04T16:48:50.862494Z","times_seen":1463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-09-04T17:59:00.788522Z","times_seen":401088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-2246b2b9.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c22c7e52ed2869445b74ea643547ab7","sha1":"10be2d760a9c1a3d88409b3837efcd7b4362c2e3","sha256":"9a6a6c6413dd9e88ee0bcfd3d8706bf9d281a776c2ab313122c43538dd1900be","sha512":"baa90d86125337d828cdfb1041bcf265f974da84cd914e9c6209548864fdf4e39ff434b12a0abaa12e707d1cecab110f281a6a3de00d5769fe912691aebf3c07","ssdeep":"384:6Vppio11LGTqGVSoKqHFp186fYh2AC/u70lS9zRNKaWmm+ddCkJe:iiL/Hlz86fYhL/umm+ddCkk","tlshash":"2f62b796f81ada3df5b6a05100980090766e3fda800c49e2f6bc6d4b5757ff87b84b29","size":15168,"data":"","first_seen":"2026-09-04T16:05:01.818717Z","last_seen":"2026-09-04T16:05:01.818717Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/filters-3ba95cae.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c923635b6ebc20fd2c34a2ec1f7a626e","sha1":"2879b730ba96c3873af8f0491be2c250490600c7","sha256":"bc5886bb8df06a3eabb8f22432a0297efc07a53d4e96b438114e6d9f5b88c703","sha512":"db67712f7bdc30d367485d21f6726e7ef3d7bfddf303420aad1a7a9a30bc3e61c1c12d427904935f3c3e40e7560a6b2ad9b8b7986abf4ef673212d597c23445a","ssdeep":"","tlshash":"165134fdfdd7613356fa6af940288054728eae20686e0a4df54bd0455a33888e0bf778","size":3102,"data":"","first_seen":"2026-09-04T16:05:01.795989Z","last_seen":"2026-09-04T16:05:01.795989Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-3b171223.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09b465ad89c3b2c65a9e055102dab327","sha1":"4366a11430569fc29055a814fccd239c8a2f282b","sha256":"07795fe38b47e1b8d3262c3492afadcf60411ee6f9a3e05b375da66decfaed96","sha512":"94156b19bf1230b0a08cad00b9119ef3e55c6f766a66e27a1f2c7f1bfab20733a0b84a7205abcc3ddaad7c9e7f8aeb04c32f9e651cfbc9e58769c0eb56075524","ssdeep":"96:wQpC8c9Y+XqD+wSY+CdfMWGRzbU4igQW/3hvLL3A0arijA:wQpC8QY+XqiwSY55GRzbbRvhvvnbA","tlshash":"60a1a699f90285bea9675484489c0010319c7bfab1984cb2fbfe9d0d77b48b9e364362","size":4811,"data":"","first_seen":"2026-09-04T16:05:01.836841Z","last_seen":"2026-09-04T16:05:01.836841Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-04T16:47:15.088528Z","times_seen":1107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-04T16:58:43.071623Z","times_seen":1481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-09-04T16:58:43.075689Z","times_seen":1204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-04T16:47:15.083419Z","times_seen":1104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"30a8cfc448ca44bb6a96cab16cbe4d55","sha1":"0162910a80fa1940b1744ef16bcde1bccbe7fe4a","sha256":"63ffbf759c493e328f09954e3a6511188c56873a13067b287ad9dcb105121a67","sha512":"678d84e043b954f01d00bb79edf7b648121f2343b23503a9be058c717a4eda86eb263635c7eb95354dca73a8c9ca224ece9c814c209c9eb75c32c0deb393564b","ssdeep":"","tlshash":"c0c08cc4b0c23d112a42641510ff34e49028802670882b02cc98d8482e230b0d233e98","size":145,"data":"","first_seen":"2026-03-26T23:24:24.723302Z","last_seen":"2026-09-04T16:29:27.75225Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-09-04T18:09:32.968428Z","times_seen":7558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-fa395a57.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45d6deae63b6174f983719d40fe442e8","sha1":"65b1e2bfd46f449f2fa8f6a85b3d09a209934a17","sha256":"79f29775e167a932499f74a874381992383e4f6831ded9d434771220db68b8c1","sha512":"544b7861d1e4bfe4ec73418080bdbb579d7ee467bbb9f3b5678f2b285ea1ae3dabe9c0aeb829699c5a9ce06f1de448ba67edae4974530997c64c5ed6566eb11d","ssdeep":"","tlshash":"06f0023fe96d413107f348b491531c25e51d1e5917689164d28b0e28df745e7d68f514","size":615,"data":"","first_seen":"2026-09-04T16:05:01.81398Z","last_seen":"2026-09-04T16:05:01.81398Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-09-04T16:58:43.086323Z","times_seen":725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c1155eee87487f5efe9634a03695b16c","sha1":"2532dae40bd8f2c93a9eb7cbb00bf21e050124b1","sha256":"41c9b4311d7a14bda7da372afb964f0bf08f0823e01617a967aa9eb2554d298b","sha512":"ae1174eea2e3597d1ecd46bea51c7948e05095c00c03cb3670e5b62dd0c14abd26e7c3643fda485610290a4426fa92d0c9d7920303a7bdbc659f735313f2ea48","ssdeep":"","tlshash":"28c08cc4b1d22e106606641010af36e490298426b08c1b028ca8e8892e260b08237fec","size":148,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-04T16:47:15.081123Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-04T16:47:15.090972Z","times_seen":1269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-0ec05f0f.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"353c49bfccd3a0576dfd63ab4c462169","sha1":"5320f684e221ea6b38918801af9f0a60862a2bdf","sha256":"ffd317fbcd5ec6c1d4681fa37685e88514eb6e2a19bde7942bea7648e1eb2497","sha512":"030f2fb58ad0f3ad4610150f9af4846c34b1c2b93fb85c5eadae0b5dce80c6a1afbca8e1c601e5165e5501c7f06828a92edf498fd70e4b9c00ceca927759fcd0","ssdeep":"","tlshash":"9f01bdf8fd0d8ebb0ea20a5141913601140a1fddfa2419e198877d661be4990d7de72d","size":776,"data":"","first_seen":"2026-09-04T15:57:27.875845Z","last_seen":"2026-09-04T16:29:27.682585Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/en-73faa964.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9cd1740df7792ae549bb27f07105370c","sha1":"cb82abbd6e615c7986ccac1b8388f954fd495edc","sha256":"cc2e99fc343fe8033764eb116261b11dd1fc02603264f83d0c037b22420dd580","sha512":"37ddf57ca1aea0479895396b8b175f9992d0dee02a921d606fbe0e462a33c7dac1a6b0d6ac5c1300848ba7fc5b7081ba7fc4f850742c69cd149683113beaccd9","ssdeep":"768:+GtZcEw/o7rZOdAcsifnAMCxrAaAMFVoP6+6sPG9w1mwO6fpk7aOLxJ:iponZOdtbExrdFVLsPWwqLxJ","tlshash":"4a03d6893e1a989a04f3537674ce6e1120f60ac18255881f4fedc9fd53d2b67a363b34","size":40658,"data":"","first_seen":"2026-09-04T16:05:01.809025Z","last_seen":"2026-09-04T16:05:01.809025Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-09-04T16:58:43.085365Z","times_seen":4604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-04T16:47:15.082595Z","times_seen":1093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-04T16:47:15.072307Z","times_seen":730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-04T16:47:15.073098Z","times_seen":507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-09-04T16:58:43.088435Z","times_seen":1910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/vendor-8113f08a.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6daf4e90925d88c223f44004a37bcd52","sha1":"20134bc4c956191c1ec0d5b562bce791f4f7c837","sha256":"d8d5ed9273aad18b82ff7ad874d24bee6f754594ae8133c5cbdcba3e5ee5a595","sha512":"cc8f0098430f730d8de8dd1badf4736665a8680eb858078e5e87f6bfd1081364e2ac12f41afb78c94718c882dd4d59524b4435b18c9535ff70143d3843e30a9f","ssdeep":"24576:3eG5hXxw5cNGDIJws34V7EXLoWn0VQa2y:3eG5hXxw5cNG634VAXLoWnWGy","tlshash":"34153ac57692f06147ab20e140bb1006f3396e59740ec4a4f16d98db7d6ae89e2b7f3c","size":890529,"data":"","first_seen":"2026-09-04T15:57:27.888516Z","last_seen":"2026-09-04T16:29:27.723283Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1831de11b3f834a2de4166013d75eda2","sha1":"4cd45ddc173078df52a6a5da8ee597fc7b8fa84b","sha256":"890bb39f44fdd8c6b918239d60c90dce9fd3fae1b9b2049c5a0e9f80f02c8009","sha512":"7e4471d6a84fcda0c90b1ef370a7ac6853bb28d5fe3de1f3955f2cd491853b7b07f7eab7a9df9731f584e664d59606ca969359d613ca46193c9a31e392fa594b","ssdeep":"","tlshash":"b9c08cc4b0c36e103a26a450a1af34e4d0248027b04c1b139da8e88d2e630f18233e98","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-04T16:58:43.075095Z","times_seen":839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-09-04T16:47:15.093053Z","times_seen":644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-04T16:47:15.070784Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/currencyItem-8bc35ce7.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf33929eeb420ca881f8122474f09c27","sha1":"1663ae849aaf4763d4317ea7772f335dde34ddb2","sha256":"7be796b4a0f47df5f3be3e8dde087e4b450995492bbe9b3816d6d0912c3d84e0","sha512":"aa8a29e38a03c3fc28832341174bae3df9799bd1f55b7b71b86d0dce48cfdad519a8b6e57999acf5933c5d6e15413a98e3a0d5ef607421c2d1f0ef87849e80b8","ssdeep":"","tlshash":"c421df99ae02c7b1cbbe5062c5bd1414170d7fda701185c1efed148a3b865fcd728a31","size":1206,"data":"","first_seen":"2026-09-04T16:05:01.773202Z","last_seen":"2026-09-04T16:05:01.773202Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-09-04T16:58:43.086983Z","times_seen":1774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"94cb806f13187b76d16e8079124171c5","sha1":"be4a8d1cf84b787988d13ce1525597114ffda19f","sha256":"8d842a1f950c7dae6582c415825541111a6556359dc37380452abbb9c426b1d1","sha512":"280cc32cda89db02b4cb60e620a1c175194998afeb2c4bea92194c0c4f335d00a8e35d4c1ca28c2f4201c4654493fc96a581e54175ed4ee4153af805d69c10df","ssdeep":"","tlshash":"62c08cc8a0c32d101603a92020af29e490384027b14c1b038de4d8492ea30b48233ee8","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-04T16:47:15.081873Z","times_seen":983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-09-04T16:58:43.079784Z","times_seen":1494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1797b90369a99ff22f1c40b0d94ec9a1","sha1":"aec8ba7bbf7bb80c7a4669d074c61aefb319ecfc","sha256":"e7129c3c36ef7b4a55f09622f14d1a60dd64551f16fd0f7a070edf2c75a13680","sha512":"a578a2dae3c0843433b3aca46d828da3db506e6c048302d6e857b77767968b4cac8e71e6d56dbd81aca28909b96a5f23447544a7a24ac9e3486478aa64b977bd","ssdeep":"","tlshash":"70c08cc4a0c72e001646641018af26e49034402ab0482f568df4d8492e620b08233ed8","size":146,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-04T16:58:43.07446Z","times_seen":404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-09-04T16:58:43.073183Z","times_seen":1902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-09-04T16:58:43.082307Z","times_seen":1819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/#/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-09-04T16:58:43.080429Z","times_seen":2258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"wss","addr":"wss://webapi.bituni.top/ws/d5a5efcc-6b85-4726-b04a-e9b8852d8db9","fqdn":"webapi.bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.944Z","timestamp":1788537860944,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /ws/d5a5efcc-6b85-4726-b04a-e9b8852d8db9 HTTP/1.1\r\nHost: webapi.bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bituni.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: sM+y5XARSzkQtBT31dWatQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 04 Sep 2026 16:04:21 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://bituni.top\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: jHuFJmEzXXCJLBsGnjJLw5ksa8s=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3eqkemesWufntH5lkC1nU3zr5Jo6X9pURRzE%2FT9U1owR2UofmohfD3Hm0vF9cmREAFRobowAxmMeaXA68eX43XK%2F%2F2dQBBEX9J7NL36TiucD%2BnwSIgbFEqtBkAj%2Fc3UiMhvFkA%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a35e3abf2e0d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":883,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":34,"connect":25,"send":0,"wait":645,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdtbb9adaa256ab427d848164ad7802eaf7.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.627Z","timestamp":1788537863627,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdtbb9adaa256ab427d848164ad7802eaf7.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 999\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08521C4A3335C38554\r\nAccept-Ranges: bytes\r\nETag: \"6F521E42123E0AE7A9C7426AA1B93D6D\"\r\nLast-Modified: Sun, 19 May 2024 11:08:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2459671971500805948\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: b1IeQhI+Cuepx0Jqobk9bQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":999,"size_decoded":1572,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"6f521e42123e0ae7a9c7426aa1b93d6d","sha1":"2075c0c2ae981dadfa8b66d6a0cb0fe6071ca1e8","sha256":"7cabd93f00d075780aeb3821fa27d010c12f4fdc04adaeda64a4c936a7aaf500","sha512":"38e873b34297d45acec73a99495a9159a872694cadfc3a14690679760c17a242cb9b7c40fb0250a46e22375e7993dd8b31836e8b1115cdd2507119678cc4d539","ssdeep":"","tlshash":"4b11cc9583194e73c2cc49a809381494c7d55531cd295f502f43e23707f0bdf96af5d5","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:29:27.701545Z","times_seen":59,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":-1,"dns":27,"connect":174,"send":0,"wait":177,"receive":0,"ssl":542},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdt1c329e3e74524663a4c69aae6447888c.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.629Z","timestamp":1788537863629,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdt1c329e3e74524663a4c69aae6447888c.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1599\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC087049483136B81F88\r\nAccept-Ranges: bytes\r\nETag: \"7982395C5BE4A71C84A0E6ED25C0FFE6\"\r\nLast-Modified: Sun, 19 May 2024 10:33:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10124007141188402507\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: eYI5XFvkpxyEoObtJcD/5g==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1599,"size_decoded":2174,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"7982395c5be4a71c84a0e6ed25c0ffe6","sha1":"47b16735c5532d2f02fd0f2d644d2e32c4a29a5a","sha256":"18c72092134e339b1b587b0791f93ce88e6d7a4e3fb8ceb46f708050d9e5caf7","sha512":"410cd3f16dfed2cae78da54fbb283132c9ea52b14649abd5ff3812f16038b1c6acd50c84c7cc202cb0f40580bf636f473ec90563f84ce246b6b17f5f156141e2","ssdeep":"","tlshash":"0b310adf6e4f2cabf7f43855e3125e48de33d1e43874071d87a2e10230516560584a45","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:42:40.159418Z","times_seen":163,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":25,"connect":169,"send":0,"wait":171,"receive":0,"ssl":513},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-0ec05f0f.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.961Z","timestamp":1788537860961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/index-0ec05f0f.js HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQgWi%2BBPP8REWaQ2rVVSVtI%2B1bdl0RyOI1le0ANRV8QQ0Fku%2ByTPSdoi8wEnPLaE6tencbPaPgMPgFLGRHnZcle68zDzIqbt%2BIYolQDo51vUT7%2FSNHoQ2YjVfVvl\"}]}\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 04:04:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69206be4-308\"\r\ncf-ray: a35e3abf087432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":1249,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"353c49bfccd3a0576dfd63ab4c462169","sha1":"5320f684e221ea6b38918801af9f0a60862a2bdf","sha256":"ffd317fbcd5ec6c1d4681fa37685e88514eb6e2a19bde7942bea7648e1eb2497","sha512":"030f2fb58ad0f3ad4610150f9af4846c34b1c2b93fb85c5eadae0b5dce80c6a1afbca8e1c601e5165e5501c7f06828a92edf498fd70e4b9c00ceca927759fcd0","ssdeep":"","tlshash":"9f01bdf8fd0d8ebb0ea20a5141913601140a1fddfa2419e198877d661be4990d7de72d","first_seen":"2026-09-04T15:57:27.875845Z","last_seen":"2026-09-04T16:29:27.682585Z","times_seen":4,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/currencyItem-8bc35ce7.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.966Z","timestamp":1788537860966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/currencyItem-8bc35ce7.js HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69206be4-4b6\"\r\nexpires: Sat, 05 Sep 2026 04:04:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7EBTY71cAgRDSfr5%2BTuCaGJ4lgN07hdTPF31D%2FVcLFrKfefiNxvTWQ9ndZ5CDB3HhFNeUypf7iolidXRvgBfNSQoHV7vagK1ECmBD0ucjpiuE%2BSrsfqdSNyT%2BGKd\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e3abf087932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":1390,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"bf33929eeb420ca881f8122474f09c27","sha1":"1663ae849aaf4763d4317ea7772f335dde34ddb2","sha256":"7be796b4a0f47df5f3be3e8dde087e4b450995492bbe9b3816d6d0912c3d84e0","sha512":"aa8a29e38a03c3fc28832341174bae3df9799bd1f55b7b71b86d0dce48cfdad519a8b6e57999acf5933c5d6e15413a98e3a0d5ef607421c2d1f0ef87849e80b8","ssdeep":"","tlshash":"c421df99ae02c7b1cbbe5062c5bd1414170d7fda701185c1efed148a3b865fcd728a31","first_seen":"2026-09-04T16:05:01.773202Z","last_seen":"2026-09-04T16:05:01.773202Z","times_seen":1,"resource_available":true,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/platform/BITUNI/logo_144.png?2.0.1763703650539","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:22.186Z","timestamp":1788537862186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /platform/BITUNI/logo_144.png?2.0.1763703650539 HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Aug 2025 15:21:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a88b0e-3359\"\r\nexpires: Sun, 04 Oct 2026 16:04:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YvPzGepEfZwDxNAvt1hRIl2HBHK1ur%2FUqeYDzBagkmHx29PgQmRjgXgHn1v39Ua%2FNFL7WXu0ZCr68FR6gW%2FCbvn2FmWH9Q514cnACosW8SNylCkXj6NVuj3LXvCf\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a35e3ac6a9b232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13145,"size_decoded":13946,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"e46c064b6b669c8bcc775fcd985c07f3","sha1":"a1373f5c504fb8b9d335cb8497e0af8261e82627","sha256":"d877f67bd2e66ff25e1adcce3cf9c25dfe6cce621f3328899d9557bde82d2820","sha512":"f977ec373473d8d90848083dbbfe0799fd68bb920d491f3792698abf9ca02589284989ecb5e04d9dba8a07fe6106fb2d35fe6255509238a373cab2f6d0b26bc5","ssdeep":"384:LGeMcqRDSkUHSwm9Dz+eg8ZzSS67b9QcPuaI:qj9hSkKx7bBWaI","tlshash":"c342cf8f31d7e45fda279165832b0ba2cb15888c0bd99dc3e1d22ad70e9b682dec5584","first_seen":"2026-09-04T16:05:01.776132Z","last_seen":"2026-09-04T16:05:17.331126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/platform/BITUNI/favicon.ico?2.0.1763703650539","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:22.187Z","timestamp":1788537862187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /platform/BITUNI/favicon.ico?2.0.1763703650539 HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:22 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71SJLTDiZ%2FmMdvfcG66ICGem53tF%2FwsajZtLcQCqFpJaSY4jpV8QzcWr3G9a9phehCjSAIPqHtSRG0UJ%2BLEvfgH2tIls6i%2BNz2uMGmWbyFmPaGSpLcJnATSTnGhz\"}]}\r\nlast-modified: Fri, 22 Aug 2025 14:50:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"68a883a8-2c1e\"\r\ncf-ray: a35e3ac6b9b332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11294,"size_decoded":1911,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 52x52, 32 bits/pixel","md5":"7b612fa302e6f878c1c5fea0e49aa7a2","sha1":"b8d4bceb70b64ce4643cdeacd0fde64e8fd0afa1","sha256":"336c4852984f86095200af2b3924466e1f809fd8428ea75d27667a01f0052f47","sha512":"b57eb4b46d38b257a71af8b0198a017d357057a5cf35ce6d058476a30e793e0dd89c81fc93b061d0b512d67b50b35c4c0d84be9fa0976412a742859da24a650c","ssdeep":"96:t58+bCApuTHsi6opvtBOseg5ZolVylU3iyG:L84MTco7Bwgvmil","tlshash":"8232dee7f641b0bbcc8519380aa9cb677168fd7830cbe4707188c63f5a36a193261f84","first_seen":"2026-01-25T05:39:33.135948Z","last_seen":"2026-09-04T16:05:01.778851Z","times_seen":4,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/static/coinInfo/ethereum.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.657Z","timestamp":1788537863657,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /static/coinInfo/ethereum.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 1100\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08D72D2033362F11B4\r\nAccept-Ranges: bytes\r\nETag: \"8658D5935AB59EE39D15C39226279D46\"\r\nLast-Modified: Sun, 17 Aug 2025 04:55:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 533354087542411518\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hljVk1q1nuOdFcOSJiedRg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1100,"size_decoded":1647,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-09-04T16:45:13.67022Z","times_seen":1946,"resource_available":false,"data":null}},"time_used":1071,"timings":{"blocked":887,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bituni.top/api/common/getAllSetting","fqdn":"webapi.bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.678Z","timestamp":1788537863678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://bituni.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:23 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bituni.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6TG9%2B9zw48674EqUv2boUknwU9TpKZ3NJ9dAd2b6yeB%2FKIo5TNuXS59gPCimKM2EbcJeZCDWmuQkLiOmpV5DPV6LgCAyzSpULEXzyddbZSMwma4JS%2BAc3QAqIScOY%2F53bv0%2F3g%3D%3D\"}]}\r\ncf-ray: a35e3ad00b1456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":944,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"webapi.bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/resource/fonts/Arial.ttf","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.380Z","timestamp":1788537860380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bituni.top/assets/index-2bd8b124.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 01 Nov 2023 21:05:30 GMT\r\netag: \"6542bd9a-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Li1YWTTUarxLdWCpSBYFgYLPPnJr5EmHsbAb7IXcryyZY98ouEG3GUeyb5u4J2Trqth2Xh2wJWB%2B2q30ZcX5lSB6igXpZVZizOp8alYq66SfS4Z%2Beqpz6FCDrBoM\"}]}\r\ncf-ray: a35e3abb680232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":1047755,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-09-04T16:58:43.029725Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":1869,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":650,"receive":1219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/static/coinInfo/binance-coin.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.663Z","timestamp":1788537863663,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /static/coinInfo/binance-coin.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 12869\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08BFDFBE3430C8D439\r\nAccept-Ranges: bytes\r\nETag: \"A533EECDEE5A789E7D94F8F79F95D588\"\r\nLast-Modified: Sun, 19 May 2024 14:17:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18158548296662870332\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pTPuze5aeJ59lPj3n5XViA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":13419,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-09-04T16:37:19.62461Z","times_seen":1003,"resource_available":false,"data":null}},"time_used":1266,"timings":{"blocked":1077,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdt80f3aba752794673ac0fcfa0b46e07c2.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.672Z","timestamp":1788537863672,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdt80f3aba752794673ac0fcfa0b46e07c2.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 763\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC097049483136DA2088\r\nAccept-Ranges: bytes\r\nETag: \"56F724B14201F1C40772EFF14FB9E575\"\r\nLast-Modified: Sun, 19 May 2024 10:15:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1937609555909061863\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: VvcksUIB8cQHcu/xT7nldQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":763,"size_decoded":1336,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"56f724b14201f1c40772eff14fb9e575","sha1":"44d3cc7f75839d2ecb8267ddb718797bd93ad0cf","sha256":"bea79ab0a3a1ddde47bd64fbf2a5c1dd168465b6f5c02193f3d7343aabfe1861","sha512":"240cc8306392da9ee9857bf04f3d2ffcb21f84fb18727709b8229161761c68eeee5bf4c3e3c3f19368c40946b53c9698263ba05d1d202d6959ede79355fb9991","ssdeep":"","tlshash":"f501b5530e87d254ec9e6dfc85080ca1ece61ebb082ed25d609905ba4f150a39c4e303","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:29:27.671549Z","times_seen":41,"resource_available":false,"data":null}},"time_used":1717,"timings":{"blocked":1544,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/vendor-8113f08a.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:19.169Z","timestamp":1788537859169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/vendor-8113f08a.js HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69206be4-d96a1\"\r\nexpires: Sat, 05 Sep 2026 04:04:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Frs95%2FlNzjtmpgSskNaoffhl16q3KBLIvSruHJEfQlCwQJqxJUWmqN4vKdwfBVyPIf1Prti54bCySGeIRR7oFuj9FJmeo60kedsqKXeMBz6SqUuTNaRyhreYYPvu\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e3ab3df2932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":890529,"size_decoded":326496,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6daf4e90925d88c223f44004a37bcd52","sha1":"20134bc4c956191c1ec0d5b562bce791f4f7c837","sha256":"d8d5ed9273aad18b82ff7ad874d24bee6f754594ae8133c5cbdcba3e5ee5a595","sha512":"cc8f0098430f730d8de8dd1badf4736665a8680eb858078e5e87f6bfd1081364e2ac12f41afb78c94718c882dd4d59524b4435b18c9535ff70143d3843e30a9f","ssdeep":"24576:3eG5hXxw5cNGDIJws34V7EXLoWn0VQa2y:3eG5hXxw5cNG634VAXLoWnWGy","tlshash":"34153ac57692f06147ab20e140bb1006f3396e59740ec4a4f16d98db7d6ae89e2b7f3c","first_seen":"2026-09-04T15:57:27.888516Z","last_seen":"2026-09-04T16:29:27.723283Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":892,"receive":697,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-a7ac0a81.css","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.963Z","timestamp":1788537860963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/index-a7ac0a81.css HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69206be4-a01\"\r\nexpires: Sat, 05 Sep 2026 04:04:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S22qJJeWwkvhcbx0b7B9dyFqnMR40ewuVMzUZsq8vjd5yq1W79kSSa9vaPl%2Flnb%2BkJlmZAiEXA13B%2F6yvFNZO9oabH7vQkXX%2FnsEokbW2%2FXW0BjBUkXyHBB63Jgi\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e3abf087632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2561,"size_decoded":1583,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"41835307df3424108623f378783c9a47","sha1":"f05d2356602fb9a0d73ce2f184e63506277b8fcb","sha256":"a7ac0a81483a533bc6603e844dd4b148f70b990ac6f5267ee278145ed66afdf5","sha512":"68ece305257739bf113f2fec0bdb181b3139210f5b75281a715249464d607b4ef4b4f84d0a356575b05704687a19121994d00adca89b86bc450ed9f39465e4e6","ssdeep":"","tlshash":"6f51015cfe5511345cbbd7cfae889b4cd0007e92e58a9dc5f00bc6060adf5a32725259","first_seen":"2026-04-25T09:05:55.396701Z","last_seen":"2026-09-04T16:29:27.724263Z","times_seen":10,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdtd721415e2e4c46669ca0d2e1281d72e7.jpg?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.650Z","timestamp":1788537863650,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdtd721415e2e4c46669ca0d2e1281d72e7.jpg?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 792\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08385D5B31314B9241\r\nAccept-Ranges: bytes\r\nETag: \"C313ADB26A2C7091669AFEFC4F5C711B\"\r\nLast-Modified: Sat, 14 Sep 2024 11:13:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15694834363244323763\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: wxOtsmoscJFmmv78T1xxGw==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":792,"size_decoded":1366,"mime_type":"image/png","magic":"PNG image data, 21 x 21, 8-bit/color RGBA, non-interlaced","md5":"c313adb26a2c7091669afefc4f5c711b","sha1":"fcdb7eeaf7a23248453e22de0197045ce6f67168","sha256":"09e2e41ffa345481127c861b698b86e60747985266b677534d00bbb7ac69678d","sha512":"efdbf50b5172e122ae66c0e2ffe3ffca011cae82348681fa9c324a6ee56f49b1bfbf4f1577d6c414dda18cd16f27e8458258092738817b7bcc0fce3b6d678ba6","ssdeep":"","tlshash":"7601c512733d1c3d414e2627f194a7e8482138ae0262c618387fad36002273b952383f","first_seen":"2025-09-01T16:46:49.446507Z","last_seen":"2026-09-04T16:29:27.720397Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1042,"timings":{"blocked":862,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdt87c9587717b34f51bc9d94494f8fe11e.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.667Z","timestamp":1788537863667,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdt87c9587717b34f51bc9d94494f8fe11e.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1160\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC09D72D203336AA11B4\r\nAccept-Ranges: bytes\r\nETag: \"317A55A9FED5B3CF128A8A5FB0396970\"\r\nLast-Modified: Sun, 19 May 2024 10:13:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8256275106131043676\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: MXpVqf7Vs88SiopfsDlpcA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1160,"size_decoded":1734,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"317a55a9fed5b3cf128a8a5fb0396970","sha1":"37d67afa8af6324119c8aab774b10dedf1507782","sha256":"d273b94a0936146b2b2b631466f167a33661f0989bfa30f010479f0a6ac44181","sha512":"0318e3dbb07436029572a14c2f3cbee5b8fdcd3080d18be88d6879d0856c8ee25da6a29bd06a0d7076e4ddd381d672319aa22fc0a77c148efc571523d5b62cbd","ssdeep":"","tlshash":"5621b48ed8e0f955c6938233c916a9c26136250a2eee5025ab4af8d5fce482d801f7d6","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:29:27.728385Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1440,"timings":{"blocked":1256,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-5b690286.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:19.167Z","timestamp":1788537859167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/index-5b690286.js HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69206be4-18b9b\"\r\nexpires: Sat, 05 Sep 2026 04:04:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qdFZY4FPsVQagjADEqQbCe1h8gNIkyFEdDW%2FCt9ccyTd4k4%2BqCqJX2lrhHy3MPsPLLYbAvHR4oxSFhf3T0rRtW2dHVWRduKlI4ZrrvAYEpKkM3vCZMuWXNlUup%2B1\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e3ab3cf2032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101275,"size_decoded":31512,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"929bccc528ab837bf6684a35d60e88e9","sha1":"0f608aa9193278e87b8f60d5d1c143f67aaa59a0","sha256":"4d2e0d38a9e8bc016d5c4508c4fa08e28cbbfb9551cb517f891a1b8bc290add3","sha512":"7db4145088f37b405662307d69deefe40c1bb47617faa2689887ac49a0fb0407f45aa226d815ef379bbf0db561a3d47ddfe5b517f21c87dcab56fe9dd0faac45","ssdeep":"1536:gmC2YQsGAyJEn1HBF0vinYRS/rHYaq5mAiOQrWmwKX:gSAdyJEnSM/rHYaq5mAixfX","tlshash":"c8a33cc995070fff6cfd0854a99b491020a91f93588ccc97b3beae552bfacd42389719","first_seen":"2026-09-04T16:05:01.790461Z","last_seen":"2026-09-04T16:05:01.790461Z","times_seen":1,"resource_available":true,"data":null}},"time_used":944,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":928,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-2bd8b124.css","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:19.171Z","timestamp":1788537859171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/index-2bd8b124.css HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69206be4-4a927\"\r\nexpires: Sat, 05 Sep 2026 04:04:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CES6ITLRghC4%2FIGueDuodLJwAGyXY5ojNogYsKTkxpWGNwizChp9zhZXhkbmgjuLyResewh%2FcLNfsYdtIKhRRsczwwdKIZVWhihfpo3pqAkvkBdWyM8AP854Rl%2Fo\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e3ab3df2b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305447,"size_decoded":75543,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"078bbc7fb4c046eb021b1ef2d34dd19b","sha1":"b3c2cf715861338ad0e2592e9b0f3edb88e2b8d4","sha256":"2bd8b124bc955e0bcdb65f3e43ad7963553ad82fc35861851da873f6b465f58e","sha512":"cbaf683a862d5001503352b5074656df73dcdba23ee159319960d696707ec87296362a760ea96b72fcc23fa5cc6f1a63f2792fc0505766af8c28b6ba477c1b55","ssdeep":"6144:ncvxsalDW/EkZ8w71ZACkFDS3vyf58rBeV05TG:cv10/dZ8w71ZACkFDS3vyf58rBeV05TG","tlshash":"fd54d6a9a590117c6f27aa759bce5ad8f23ce6719c018de9f20160094fc3ff92363617","first_seen":"2026-09-04T16:05:01.792798Z","last_seen":"2026-09-04T16:05:01.792798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1098,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/static/coinInfo/litecoin.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.662Z","timestamp":1788537863662,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /static/coinInfo/litecoin.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 34858\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08D72D2033365D11B4\r\nAccept-Ranges: bytes\r\nETag: \"BB27C369A3AA54D9C1F8E59E1706DA48\"\r\nLast-Modified: Sun, 19 May 2024 14:17:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2593469271640333430\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uyfDaaOqVNnB+OWeFwbaSA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":34858,"size_decoded":35407,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-09-04T16:37:19.619811Z","times_seen":964,"resource_available":false,"data":null}},"time_used":1257,"timings":{"blocked":1071,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/filters-3ba95cae.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.965Z","timestamp":1788537860965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/filters-3ba95cae.js HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69206be4-c1e\"\r\nexpires: Sat, 05 Sep 2026 04:04:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dch4xhcJZO61UJOKNsyC7qVvlUKHjthQ9UteDaPxUWRRERwFz%2Fr%2FGoOtYrf8nL7RJARsnLzvmOicmBzX8CBEU88XhNI7iyCAcYqq4ljEleDQrim7hNDHicaw6o0\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e3abf087832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3102,"size_decoded":1927,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"c923635b6ebc20fd2c34a2ec1f7a626e","sha1":"2879b730ba96c3873af8f0491be2c250490600c7","sha256":"bc5886bb8df06a3eabb8f22432a0297efc07a53d4e96b438114e6d9f5b88c703","sha512":"db67712f7bdc30d367485d21f6726e7ef3d7bfddf303420aad1a7a9a30bc3e61c1c12d427904935f3c3e40e7560a6b2ad9b8b7986abf4ef673212d597c23445a","ssdeep":"","tlshash":"165134fdfdd7613356fa6af940288054728eae20686e0a4df54bd0455a33888e0bf778","first_seen":"2026-09-04T16:05:01.795989Z","last_seen":"2026-09-04T16:05:01.795989Z","times_seen":1,"resource_available":true,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/resource/svg/dark/mengbanzu12.svg?2.0.1763703650539","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.651Z","timestamp":1788537863651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /resource/svg/dark/mengbanzu12.svg?2.0.1763703650539 HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:24 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7NJUA9Snp9EsKHCFNqohEktYl619WNm4Vd%2FfCCG9ep9k4ngX4XN1AQphIfruMs%2B7yaOxB0wZSyK8os95JlPbGMJF4ZQzybgTXyVY7JlqxvdXP9ePWbp5SjGZm36n\"}]}\r\nlast-modified: Wed, 01 Nov 2023 21:05:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6542bd9c-306\"\r\ncf-ray: a35e3acfdb1232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":774,"size_decoded":1171,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a8fdb5cde40e8ebcb2b7fddbe19943e","sha1":"c1560502d0305ec2f9973a5857c7cdd9b56caee7","sha256":"3ab8082b5d02f0e40827f2520fe7d423877d2f8d78c6f41cc11fed84b276a0ee","sha512":"8791e15406186847e2527fae5de31e11f9820322947716a0b54d235607efaae19370d66d1864a78b5f65f84ddb778b46df2474860ae9176d828c6cf958d9aac1","ssdeep":"","tlshash":"4d01f17a5221c15da2434b80c6e93f4092bda29ba2d00448b3a32da54d74f7f55bc996","first_seen":"2025-06-01T04:11:58.700896Z","last_seen":"2026-09-04T16:37:19.611989Z","times_seen":317,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/waihui/WLD.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.658Z","timestamp":1788537863658,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /waihui/WLD.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 8646\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08BFDFBE34307BD439\r\nAccept-Ranges: bytes\r\nETag: \"6D5B4D5FA1076FD069C299E6269E337A\"\r\nLast-Modified: Sat, 14 Sep 2024 12:42:16 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12611491678234257564\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bVtNX6EHb9BpwpnmJp4zeg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8646,"size_decoded":9195,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6d5b4d5fa1076fd069c299e6269e337a","sha1":"9bd71d1472ff39ec523711f4ba39e15dae78105e","sha256":"d934caba25d66b415f679f6b08a8ece3e10d1ce9c4a324216594493cfd42692f","sha512":"dc8f9c4e0c3cddd31befe0fdcadfaca7f4e17bcf42c5b7c9dc0e4cb990ad96e015d33a3e17b7aaa5a08af23219ec155d89bb3fcd081836426360a4c996429dfa","ssdeep":"192:eH4TtYPopn/FNZPyTxOwUVRjIt9HzSJqQ9rKtm0cB81vtw9/p:eH4Ttii92xUSKX9051vtw9R","tlshash":"d102af82b77257b19523927cc716f2cbaa6e43c1e5d250ff0341a0b997ced24c0426f9","first_seen":"2025-07-06T22:01:43.154442Z","last_seen":"2026-09-04T16:29:27.676941Z","times_seen":69,"resource_available":false,"data":null}},"time_used":1077,"timings":{"blocked":891,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdt2c2415d3cc7b4c4ab795b4b717de1ab2.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.668Z","timestamp":1788537863668,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdt2c2415d3cc7b4c4ab795b4b717de1ab2.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3220\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC09521C4A3335888654\r\nAccept-Ranges: bytes\r\nETag: \"6C8AA729DEF54ADDF8F5F5FF69FE8E82\"\r\nLast-Modified: Sun, 19 May 2024 10:14:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10653848856368533484\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bIqnKd71St349fX/af6Ogg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3220,"size_decoded":3795,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"6c8aa729def54addf8f5f5ff69fe8e82","sha1":"68033bbd88ef411a027f04c4895bcdca19f96cb2","sha256":"304dee61cd6145155b100434424a359ce0ae56aff263cd7b5280edd592ddd713","sha512":"c325ccf9871663cadfb55d2cd2a847cddafdb8797c0e9b02e4693cf5ba535eee64d9ca7568223b546a552e3b06fa1590cbdb60b1fd6ee5369369fa80c2bcddbf","ssdeep":"","tlshash":"bd61da4d78259c510e06af02a6dee09b1a3f4b48834379c8bdde9a678e500b6dc1dcc6","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:29:27.714686Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1603,"timings":{"blocked":1427,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdta0e0ffb1936e4711bb71db1b91d7715c.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.671Z","timestamp":1788537863671,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdta0e0ffb1936e4711bb71db1b91d7715c.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1874\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC097049483136A32088\r\nAccept-Ranges: bytes\r\nETag: \"FEE16CE16A23A37EF3920798742FEFBC\"\r\nLast-Modified: Sun, 19 May 2024 10:15:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8433800826941682001\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /uFs4Wojo37zkgeYdC/vvA==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1874,"size_decoded":2448,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"fee16ce16a23a37ef3920798742fefbc","sha1":"f862e3e61b12495b9f683a71d3d06053bc407b0a","sha256":"dfca8887d489be448d10cbd211b271db5330d73d299fe9c76f3e3300a9045a82","sha512":"560e8d3bbee698aac3f311defb7031f289096c6101339fc642889b10e9887000240109dd3e25139f0f12b6b7583b0b185f96e86248bc98d3252e1bcc5ecec990","ssdeep":"","tlshash":"d731f7da97b3107f3e5d8374563429c5555b85d1ba050a2efcdebc4c9f066e70128071","first_seen":"2024-08-20T11:40:30.958723Z","last_seen":"2026-09-04T16:29:27.677641Z","times_seen":153,"resource_available":false,"data":null}},"time_used":1544,"timings":{"blocked":1370,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-5a8d86a5.css","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.969Z","timestamp":1788537860969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/index-5a8d86a5.css HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69206be4-2b1e\"\r\nexpires: Sat, 05 Sep 2026 04:04:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uN2hcWA9PrwZkgBmxkoi2MwPe8d2NPbVFUr6xjO%2FoPU9FA7o%2BswD1gTX67Yey2j2biB8sdXEmXKjwmQA0DyyPK%2FL5VCVaOUG2hq4pkupLqJR3mfZ7RQQuUYd9xbi\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e3abf187d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11038,"size_decoded":3407,"mime_type":"text/css","magic":"ASCII text, with very long lines (11037)","md5":"2b1c11570cdd8804eba20adc5c05ca39","sha1":"b72ef7aed124fb944ee124ec7fd2b3c5d660042e","sha256":"5a8d86a53ec66f3b5e55c9df9ee90e61579f14dd88c756faa2f7d46db165b2ef","sha512":"f92b9a0da850937b0f6ec4269456631294d45459078db54086f384dbb9a03b9e6a224b9171f6b3466cf5b2270bee35a96f7e543b9c5891adf39fe8b235201d1c","ssdeep":"96:tYyGhezOETj+jXMp5mXUVM2tL0a5OoaDn62rqI4Ec4gfx1pJMLy3J8dZ:tYhePf+EYveyfcjx1pJMLy3Jm","tlshash":"cd326429b3952638ac3be165afe80dcce208ba12e643ddf4f55746260deb5f31a3444d","first_seen":"2026-09-04T16:05:01.800391Z","last_seen":"2026-09-04T16:05:01.800391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdt084113f32bcf4976b0e1f2b507f56f4d.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.647Z","timestamp":1788537863647,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdt084113f32bcf4976b0e1f2b507f56f4d.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 899\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08D72D203336FA10B4\r\nAccept-Ranges: bytes\r\nETag: \"08E093865192B5A92AAABFBFAE44C760\"\r\nLast-Modified: Sun, 19 May 2024 10:32:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16872590259160764689\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: COCThlGStakqqr+/rkTHYA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":899,"size_decoded":1473,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"08e093865192b5a92aaabfbfae44c760","sha1":"d8270cec67953ad8ea7f44aeb74975a06590c5be","sha256":"22dd145d6c8b576fc62a0d452e79fee701ca49caa17e1e3395b107640b20d5a1","sha512":"0e0008f63114b6462f097f7a3d2601cda82cec3a1b42db17c224432b264ef60c2227eeaae1c28c561616fab48caf8629284dd89111e0027ec2813ccf36f17676","ssdeep":"","tlshash":"781163e3d3c4053c5f4b9e228252b923c2a02546446ef89dea77a92e094edca043cf62","first_seen":"2024-08-19T20:18:19.606217Z","last_seen":"2026-09-04T16:29:27.713948Z","times_seen":144,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":-1,"dns":7,"connect":182,"send":0,"wait":188,"receive":2,"ssl":542},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdtf6d48d6d7c8045e7a17e90c8ef1e24e8.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.649Z","timestamp":1788537863649,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdtf6d48d6d7c8045e7a17e90c8ef1e24e8.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 801\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08B200F23933064349\r\nAccept-Ranges: bytes\r\nETag: \"2AE028AC8B83BBB61963669703398AF4\"\r\nLast-Modified: Sun, 19 May 2024 10:26:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6784440504219574938\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KuAorIuDu7YZY2aXAzmK9A==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":801,"size_decoded":1374,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"2ae028ac8b83bbb61963669703398af4","sha1":"68dd8f2c5241331ced97f7400e31d40bba2900db","sha256":"57a1356686884718fc655255495c865822cb2d0714565da6e9898240d9889c01","sha512":"a9cf6e012e04f6e51ace9259dae3f7d1ca057934a0b95bedbe183f561fc8f8d0b6ae48f478eec442d61834441d787b0a9d521b9d89a5d1673946711255a80e6f","ssdeep":"","tlshash":"8801c56b03b358b0ca12d83fc1130ce7b8b7d0273a40e24c5b1fc370085b0020074364","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:29:27.683242Z","times_seen":131,"resource_available":false,"data":null}},"time_used":1033,"timings":{"blocked":856,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/logo-d877f67b.png","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.676Z","timestamp":1788537863676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/logo-d877f67b.png HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69206be4-3359\"\r\nexpires: Sun, 04 Oct 2026 16:04:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYsY4bIGInwW%2Far8HGpeFsO%2F9MueRJWwyRKcPmGxztJQNDW79B%2FlyfpB15mTgHQnF1UTRAcbfkdFLJxVW30Y2S6hkQl3uzlly2XtDh%2BhlpFVz360c8UBMhjxo99k\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a35e3acffb1c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13145,"size_decoded":13945,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"e46c064b6b669c8bcc775fcd985c07f3","sha1":"a1373f5c504fb8b9d335cb8497e0af8261e82627","sha256":"d877f67bd2e66ff25e1adcce3cf9c25dfe6cce621f3328899d9557bde82d2820","sha512":"f977ec373473d8d90848083dbbfe0799fd68bb920d491f3792698abf9ca02589284989ecb5e04d9dba8a07fe6106fb2d35fe6255509238a373cab2f6d0b26bc5","ssdeep":"384:LGeMcqRDSkUHSwm9Dz+eg8ZzSS67b9QcPuaI:qj9hSkKx7bBWaI","tlshash":"c342cf8f31d7e45fda279165832b0ba2cb15888c0bd99dc3e1d22ad70e9b682dec5584","first_seen":"2026-09-04T16:05:01.776132Z","last_seen":"2026-09-04T16:05:17.331126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-e58389cb.css","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.958Z","timestamp":1788537860958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/index-e58389cb.css HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V2FPLiamuAtZvC2xP1u%2BqbndDlwohKFpUPk37NlcDmCK3Ea00OqJiRILo%2FaVimT60BVMLmfmoJdIJEk9lvBmy6EwlL5delQfzTMfAitCiUdM8rPC0rCDVbaoEr6b\"}]}\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 04:04:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69206be4-3d\"\r\ncf-ray: a35e3abf087332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":809,"mime_type":"text/css","magic":"ASCII text","md5":"b758467ff28900509c9b6c9192b08399","sha1":"07e2d156828db94c2dd1b1fbbc2156027bfdc5ab","sha256":"e58389cb149f3381f3269bbd3d65cc2c8ff00fa437ff7c3844a965f3e73927e3","sha512":"dabe1339ceb925412b02776e1fc2aecb88e384868d8c54d57a35799bca04c795cd647a52da286e80a799759c9575e553008095dd662d6befa144630a56d6dd02","ssdeep":"","tlshash":"c4a0027d11196504b2229321ff1ae90ece2869539bd1d21553121d9136dbb1e255990a","first_seen":"2026-04-25T09:05:55.375899Z","last_seen":"2026-09-04T16:29:27.679299Z","times_seen":10,"resource_available":false,"data":null}},"time_used":658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bituni.top/api/common/getMt5Amount?coin=xau","fqdn":"webapi.bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.067Z","timestamp":1788537863067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://bituni.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:23 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bituni.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4C1rw0sG8UnP11khrOxkMmQHTod70p%2FbMM7pcO%2FcAboMboe59bdXL2xVizKjrzmr6YnuaaSII%2BYf%2Br8mUseTTL3tBv%2F55YooV7Ja7A9TpwVgKOTsEoKi4xrA5HO4AiuuEpRSIg%3D%3D\"}]}\r\ncf-ray: a35e3acc2ae356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":934,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"webapi.bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdtc4cf22f00cbb415aba398a3eb2525474.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.645Z","timestamp":1788537863645,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdtc4cf22f00cbb415aba398a3eb2525474.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 376\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08385D5B3131189241\r\nAccept-Ranges: bytes\r\nETag: \"BBAD5D8588FA82242A90D749CDD4B43F\"\r\nLast-Modified: Sun, 19 May 2024 10:28:16 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1622123216351148044\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: u61dhYj6giQqkNdJzdS0Pw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":376,"size_decoded":949,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"bbad5d8588fa82242a90d749cdd4b43f","sha1":"aa2ec10316872a7a99bee54bd7a219f725f1738a","sha256":"2b10a6251723a1d78eebdbfc3ff8bbca7b0bf0ef3df87520025e12b595c9e292","sha512":"0e02dff3e327831196961905d0aaa054beb807bc1cacdababfd0c78e106ee95c1630c0d3890831e656e4cb45bbb01021dd4a70191e03992cdc63bb42834a6e85","ssdeep":"","tlshash":"32e060e7f2808cf2cac90037e3320320d08f80523380324b41301a914180fd783c134f","first_seen":"2024-01-21T00:00:18Z","last_seen":"2026-09-04T16:29:27.7263Z","times_seen":139,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":-1,"dns":9,"connect":175,"send":0,"wait":176,"receive":0,"ssl":536},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/waihui/pepe.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.661Z","timestamp":1788537863661,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /waihui/pepe.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 9753\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08521C4A33352D8654\r\nAccept-Ranges: bytes\r\nETag: \"E29BBA4DFAAC166AFE0E63DE1BD6407F\"\r\nLast-Modified: Sat, 14 Sep 2024 12:42:16 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13362049969433790972\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 4pu6TfqsFmr+DmPeG9ZAfw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9753,"size_decoded":10302,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3","md5":"e29bba4dfaac166afe0e63de1bd6407f","sha1":"c0ba78cacc9f1a2180ecf912a7abc9009c35d30a","sha256":"f7ada49ac8d38875c30aac25c1cc312b0e86165dc22dd400d28e04820afc6f86","sha512":"ec42e557c07b2369caaa448281d14ec9a732a19e6f1dcdb3768830a18c0b907b52f4338aae63b700c78046825038b9d86e6a202fef26f3f77259048121652c35","ssdeep":"192:BrIwt1fiW5l4p3ibe1EZIjl2eNnNKQWdR/BMRQWmjR/HxpD:NXjbGEylPPWdZBMRQ7lLD","tlshash":"99129e23bb8c11e8ff382b30e39e5b88bd1b5cc79574f920cee1129150261d89bd5e52","first_seen":"2026-02-18T02:06:00.242882Z","last_seen":"2026-09-04T16:29:27.692248Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1225,"timings":{"blocked":1045,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdtec3387ba04604c158f3fb288f91c28ae.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.674Z","timestamp":1788537863674,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdtec3387ba04604c158f3fb288f91c28ae.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 499\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC09385D5B3131299341\r\nAccept-Ranges: bytes\r\nETag: \"758505DEC73355A50FA0EA7479FA0223\"\r\nLast-Modified: Sun, 19 May 2024 10:16:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8231209139480566513\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dYUF3sczVaUPoOp0efoCIw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":499,"size_decoded":1072,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"758505dec73355a50fa0ea7479fa0223","sha1":"f625f75d14059f9ca2f10573bb2c8634c6dc0b8e","sha256":"9ba4907adb5327ca635f6187be09172b1598fcfc0e96b62fb9736d9b17ac23d9","sha512":"de61b7e447da38fb2dad09bafceb7749b71e7fcd5cfa1e1d595c79bbb59e48c630c15c57c88d5154b3fdd22364d12d5fc6569173fedfb98fedbef50ae5191ac1","ssdeep":"","tlshash":"3ff054ed83a4ec7cf60bc3608f20e828c630b96b348d0c16256eb6309b4d09c2db11f6","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:29:27.733596Z","times_seen":189,"resource_available":false,"data":null}},"time_used":1762,"timings":{"blocked":1584,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bituni.top/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.678Z","timestamp":1788537863678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://bituni.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:23 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bituni.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBuFQHoqMSTDy5ulOJwhPK5v2L5ZOYB4deEFu8p24%2BeCqVa9l6t61CX3pR5BJi7F%2BzoHqQzmpSfYjBKUCjz0b%2FguSLWemWVhZ3co5YbpxcsZKxlgyl67%2Flhj22uqAUTHmn5ozQ%3D%3D\"}]}\r\ncf-ray: a35e3acffb1356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":942,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"webapi.bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/currencyItem-15550dda.css","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.967Z","timestamp":1788537860967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/currencyItem-15550dda.css HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69206be4-6d6\"\r\nexpires: Sat, 05 Sep 2026 04:04:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnQ3SncfydePu8xtpRjkGsOnYtLPaMMgTxePU%2BgvD278rrdjO%2F8jorfhYLKN1UADKncAVnKN1T6zTVumQm%2BKa5p5LCtp1JZjLBjrGOkP2LvWPxDm8%2Bak9VGd7ixh\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e3abf087b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":1296,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"0a88af6b4dca3c130c74addeb274fb10","sha1":"fb0c4b8a0f7b7c4bac8e193999f99b4070ffcfad","sha256":"15550dda13edd7fe55a2d29edacb7ba57f23f39ef10d087669c0f75facae0763","sha512":"5d046b442f0f471b2063fcd34fb68b1d95b79647ec7e50cf5290ebd866febcd12e9b890a1784512959c4f4a433d3f31d57540254b4e0abbb6f55dc7773677619","ssdeep":"","tlshash":"ed31c05457110375da3bc8866ea8010dc0d47fd1901765cae8afaa2b2ccfa931b7096b","first_seen":"2024-08-19T15:53:11.157884Z","last_seen":"2026-09-04T16:29:27.675611Z","times_seen":472,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/en-73faa964.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.070Z","timestamp":1788537863070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/en-73faa964.js HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69206be4-9ed4\"\r\nexpires: Sat, 05 Sep 2026 04:04:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gxQTiyAGbAItfTvGLYg%2BAOZuRaUNb86aI2ilifH%2F8zsKLsy6ssXymFZgb%2Fj9R0fDp660KqnYOYFhdGECy0xgrxljKo61U1KyPQBNGCX7H%2BYTbKay2FJ5Ms7O4Kc3\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e3acc3a5932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40660,"size_decoded":14715,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (40637)","md5":"9cd1740df7792ae549bb27f07105370c","sha1":"cb82abbd6e615c7986ccac1b8388f954fd495edc","sha256":"cc2e99fc343fe8033764eb116261b11dd1fc02603264f83d0c037b22420dd580","sha512":"37ddf57ca1aea0479895396b8b175f9992d0dee02a921d606fbe0e462a33c7dac1a6b0d6ac5c1300848ba7fc5b7081ba7fc4f850742c69cd149683113beaccd9","ssdeep":"768:+GtZcEw/o7rZOdAcsifnAMCxrAaAMFVoP6+6sPG9w1mwO6fpk7aOLxJ:iponZOdtbExrdFVLsPWwqLxJ","tlshash":"4a03d6893e1a989a04f3537674ce6e1120f60ac18255881f4fedc9fd53d2b67a363b34","first_seen":"2026-09-04T16:05:01.809025Z","last_seen":"2026-09-04T16:05:01.809025Z","times_seen":1,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/static/coinInfo/dogecoin.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.665Z","timestamp":1788537863665,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /static/coinInfo/dogecoin.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 55728\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08521C4A33354D8654\r\nAccept-Ranges: bytes\r\nETag: \"48384A67185DBDFEEF3AA43C99D3319C\"\r\nLast-Modified: Sun, 19 May 2024 20:43:56 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3192987439189544564\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SDhKZxhdvf7vOqQ8mdMxnA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":55728,"size_decoded":56277,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-09-04T16:29:27.722269Z","times_seen":995,"resource_available":false,"data":null}},"time_used":1427,"timings":{"blocked":1225,"dns":0,"connect":0,"send":0,"wait":181,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdt4ed8557b68d94c88ac1a8e3d5a3f72a7.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.669Z","timestamp":1788537863669,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdt4ed8557b68d94c88ac1a8e3d5a3f72a7.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 619\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC09D72D2033361F12B4\r\nAccept-Ranges: bytes\r\nETag: \"6CFE73F06DA3C5604FFE6B41D284540D\"\r\nLast-Modified: Sun, 19 May 2024 10:14:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1104380098065402225\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bP5z8G2jxWBP/mtB0oRUDQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":619,"size_decoded":1192,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"6cfe73f06da3c5604ffe6b41d284540d","sha1":"9e9fa8144a7cb0f1da7daa4e5858fa49106c171c","sha256":"c0f3d5204944bd902aa03323ff6d9543ce33f9c8a523ef06b9953dabcd5e1556","sha512":"db8346b7c7d8216db595641f02a1fecccbbe268f7384be291647e939883348696f6d8b2d6754b62559eaf23a47ed50322013c87837c674745a05556bc64f665c","ssdeep":"","tlshash":"fbf0685df3fc843d5be15b598535f1b5d414ce3bc4e151080bd06891522b4553851b11","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:29:27.706701Z","times_seen":189,"resource_available":false,"data":null}},"time_used":1624,"timings":{"blocked":1440,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdtb338908c7f814bb5abbeba66a81f3ec5.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:24.263Z","timestamp":1788537864263,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdtb338908c7f814bb5abbeba66a81f3ec5.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 207867\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC0870494831360A2088\r\nAccept-Ranges: bytes\r\nETag: \"64645909667B7D5ED3DE154C29F66777\"\r\nLast-Modified: Fri, 29 Aug 2025 11:19:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12821714564201058861\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZGRZCWZ7fV7T3hVMKfZndw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":207867,"size_decoded":208444,"mime_type":"image/png","magic":"PNG image data, 430 x 230, 8-bit/color RGBA, non-interlaced","md5":"64645909667b7d5ed3de154c29f66777","sha1":"c5ca7fc86a5908889bd67a404f4efc346affed6e","sha256":"f3175a11e160cd6a6f8431434d8707e5a7f97fb3a26dd1826a7beb0a6de1bead","sha512":"382c1694dda32919e7e91763b875193a41190904417357b65831d1e97d1be184a7f8fa6dc0edde5e3b97d1054f88fb747d1db15a4c17ad83f6d3f280d882161f","ssdeep":"6144:1npSsuiYoczvBscRid3WLA00H6bI1HSpAP:rSsYo0Bse7yHSpU","tlshash":"cb1413a66169a66dfe4275708c2624448fb2246174d76fc64c6e816cc3ecb0a3dfcf72","first_seen":"2026-04-25T09:05:55.372313Z","last_seen":"2026-09-04T16:29:27.672813Z","times_seen":6,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":176,"receive":366,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-fa395a57.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.953Z","timestamp":1788537860953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/index-fa395a57.js HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZMTnUAHXF5bahxtiCWhsNR3EBb7KIfyD3%2FssFHT6WelHHlN6YVj%2F7W8N3ysjS50kz%2FBpmN46MLizQAvO3D9iG1lw%2FSk8NOL54Xr2PAzUucZm3%2BbdEDa2eFANm7zV\"}]}\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 04:04:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69206be4-267\"\r\ncf-ray: a35e3abef86c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":615,"size_decoded":1212,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (614)","md5":"45d6deae63b6174f983719d40fe442e8","sha1":"65b1e2bfd46f449f2fa8f6a85b3d09a209934a17","sha256":"79f29775e167a932499f74a874381992383e4f6831ded9d434771220db68b8c1","sha512":"544b7861d1e4bfe4ec73418080bdbb579d7ee467bbb9f3b5678f2b285ea1ae3dabe9c0aeb829699c5a9ce06f1de448ba67edae4974530997c64c5ed6566eb11d","ssdeep":"","tlshash":"06f0023fe96d413107f348b491531c25e51d1e5917689164d28b0e28df745e7d68f514","first_seen":"2026-09-04T16:05:01.81398Z","last_seen":"2026-09-04T16:05:01.81398Z","times_seen":1,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/resource/fonts/DINOT-Medium.otf","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.402Z","timestamp":1788537863402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bituni.top/assets/index-2bd8b124.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:23 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 01 Nov 2023 21:05:30 GMT\r\netag: \"6542bd9a-11d88\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5hQRpC%2BVkOy2YFkDEerk2l8%2BCJWBB8cbgS69lgcUaSW69fG1bHxLkAev%2F7vpmZQTC%2BqtJ72pjzGa9gn8NZjol3AuW1eC5E%2Fa0M6uymZcOcSaU7yIoeR6pFQhO5OD\"}]}\r\ncf-ray: a35e3ace4ab632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 73096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":73843,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-09-04T16:58:43.056716Z","times_seen":1881,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":469,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/static/coinInfo/bitcoin.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.654Z","timestamp":1788537863654,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /static/coinInfo/bitcoin.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08521C4A3335028654\r\nAccept-Ranges: bytes\r\nETag: \"2EDF1EF8B333C40979976D1A49BC234C\"\r\nLast-Modified: Sun, 19 May 2024 14:17:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Lt8e+LMzxAl5l20aSbwjTA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":3239,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-09-04T16:58:43.051105Z","times_seen":26255,"resource_available":false,"data":null}},"time_used":1046,"timings":{"blocked":868,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-2246b2b9.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.951Z","timestamp":1788537860951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/index-2246b2b9.js HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69206be4-3b40\"\r\nexpires: Sat, 05 Sep 2026 04:04:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rp2rO%2FXMiQljPEDKMqX9b6yLgvLx5t18PUkNtv%2FaUwg9NoMxfWS33QCquse2eSf0iFoQPHMNLkL6kIdX8sgEQlk2GcK6nh4e%2BvJqwNLnLZZXG1PyRgl9Cx7ef0Bn\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e3abef86a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15168,"size_decoded":5504,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15153)","md5":"4c22c7e52ed2869445b74ea643547ab7","sha1":"10be2d760a9c1a3d88409b3837efcd7b4362c2e3","sha256":"9a6a6c6413dd9e88ee0bcfd3d8706bf9d281a776c2ab313122c43538dd1900be","sha512":"baa90d86125337d828cdfb1041bcf265f974da84cd914e9c6209548864fdf4e39ff434b12a0abaa12e707d1cecab110f281a6a3de00d5769fe912691aebf3c07","ssdeep":"384:6Vppio11LGTqGVSoKqHFp186fYh2AC/u70lS9zRNKaWmm+ddCkJe:iiL/Hlz86fYhL/umm+ddCkk","tlshash":"2f62b796f81ada3df5b6a05100980090766e3fda800c49e2f6bc6d4b5757ff87b84b29","first_seen":"2026-09-04T16:05:01.818717Z","last_seen":"2026-09-04T16:05:01.818717Z","times_seen":1,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":677,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bituni.top/api/common/getMt5Amount?coin=xag","fqdn":"webapi.bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.071Z","timestamp":1788537863071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://bituni.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:23 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bituni.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WE3JQD0NAgvXA6vGg6phtVSMlwF2Xk25AHT0cQJH5KaPcaVX8Nts8RGEI8%2B5yvzwih099FCnijjBnjRp29%2BMxhcNH98JHnYB27YV2rfYpA6VOm6x%2FP5cCxm3nuOkqKmW%2F%2B4NPA%3D%3D\"}]}\r\ncf-ray: a35e3acc3ae556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":934,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"webapi.bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdte3d9cedc0eb3431891d3539889a3f195.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.631Z","timestamp":1788537863631,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdte3d9cedc0eb3431891d3539889a3f195.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 598\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08B200F23933B94249\r\nAccept-Ranges: bytes\r\nETag: \"CB1474A6586606366122E796E7C7B790\"\r\nLast-Modified: Sun, 19 May 2024 10:31:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 52651854032997638\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: yxR0plhmBjZhIueW58e3kA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":598,"size_decoded":1169,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"cb1474a6586606366122e796e7c7b790","sha1":"65e5b65ac7af71f7c74943cbbb786c502da79f51","sha256":"59ffe909363cd4f08954e3d43522913d7f06837b0a726f4f094d07e4443970e7","sha512":"24e9f1f19d63ad08cae741f4a599ed906a4b047498dd9805dd8a5ef69eecb48ba4beaebeee27f86e61b054c5b894da1da38e1ba466ee616a4de71d851d798faa","ssdeep":"","tlshash":"57f041ea69d79ad8a36c0fb3564205908447d0d0f305d7536459f7fd272074016b9a36","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:47:15.048576Z","times_seen":170,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":24,"connect":172,"send":0,"wait":174,"receive":0,"ssl":534},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdt177617ae5d65441998fffe08ddefc803.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.646Z","timestamp":1788537863646,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdt177617ae5d65441998fffe08ddefc803.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1020\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08BFDFBE34301DD439\r\nAccept-Ranges: bytes\r\nETag: \"FEFC4C2FEE1744A34034DBBAEF82316F\"\r\nLast-Modified: Sun, 19 May 2024 11:17:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1657945692254989793\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /vxML+4XRKNANNu674Ixbw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1020,"size_decoded":1594,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"fefc4c2fee1744a34034dbbaef82316f","sha1":"ad1774785b02870643113d742c59a861007902ae","sha256":"b9f7aa27195c249887b07ec3b570819e71f7373b36e5a25ae23f55517816b760","sha512":"ebd655eaf1f6896c483cde3b8ddeea93beb609a77207f85aa102822734f26e7882f0f42c5a2704c3d9b3aa52c1d01032c9d92204b200cb0290a84ddf25d394d3","ssdeep":"","tlshash":"4911d8cd6671cf7543f88250823fc86892396d9c50e31df8a21c7543687e130221ccc1","first_seen":"2025-01-06T18:38:04.012508Z","last_seen":"2026-09-04T16:42:40.126155Z","times_seen":117,"resource_available":false,"data":null}},"time_used":925,"timings":{"blocked":-1,"dns":8,"connect":183,"send":0,"wait":185,"receive":0,"ssl":549},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/static/coinInfo/ripple.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.660Z","timestamp":1788537863660,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /static/coinInfo/ripple.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 2274\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08385D5B3131789241\r\nAccept-Ranges: bytes\r\nETag: \"674B0999F6083084A2A4B1D8B20F3BC1\"\r\nLast-Modified: Sun, 19 May 2024 14:17:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2919851811578833622\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Z0sJmfYIMISipLHYsg87wQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":2822,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-04T16:37:19.61799Z","times_seen":964,"resource_available":false,"data":null}},"time_used":1218,"timings":{"blocked":1040,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bituni.top/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.677Z","timestamp":1788537863677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://bituni.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:23 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bituni.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dxSxs4YmsBO9zilIrEfWcdbch5K8IKMrhpNarsS6WbuojvnMn9CSTZoa1IEqsEHMoV1pivROGzp%2Ffx2greLu8eSWPRBUxi%2BXqQa86syYF2FoNqXwwQ1381O2QokX2S%2BEM%2BIfdQ%3D%3D\"}]}\r\ncf-ray: a35e3acffb1256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":942,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"webapi.bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T16:04:18.241Z","timestamp":1788537858241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:18 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BegAZnyk4EA6b4Sfg2yOiLIgQhmHe1DLpTA8nEyVuZJlDHwoXNmx4vzCY6APFGWJ%2B8aKgrT1WxQDoQhe5OUOpoQm91uuRlZjt5pcTxkNAutNhEOR5YcM8JT6fooS\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a35e3aae8e8f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5304,"size_decoded":2592,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"fa668c9b2dc292acf25074bcfa0bc579","sha1":"e6e28e9569dc4103041786c5f471479738f47259","sha256":"2f0b9c5acf5fadde01a8aab61724d0362e2cb5ed0966300180fc2cb7cd242eec","sha512":"b6d1e952310f0f416024036041a321fb89090a36354025ee0b69dca75b67ea63f7afdefb5988eee937c073b9d97bf4483ccd511f8fc54508276541e3addc61e2","ssdeep":"96:+r82JA0Af53uSPE+AEquN/Ubr6TCZydHRH/g92mUsGKAiowGwuB1niH9iHGH/2:+F29PENU8ZCxfw2nfD3bwuB1nidimf2","tlshash":"34b130e759a4881a17b6092befe7f408dfa0119385195854b4cc80ee4fe6fe584cbb36","first_seen":"2026-09-04T16:05:01.827284Z","last_seen":"2026-09-04T16:05:01.827284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":0,"dns":61,"connect":18,"send":0,"wait":670,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/resource/svg/dark/zu29.svg?2.0.1763703650539","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.653Z","timestamp":1788537863653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /resource/svg/dark/zu29.svg?2.0.1763703650539 HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:24 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8tllGNel0ngyf0KBOL3H6ohNL1a8IBG5ILdc4pb3E89t6KvrAOEEDbHP7N49qYvRr3FpXVtuTlL51qGz3vfxTgnIqsM%2BxMJ%2FACh7I9CK%2F9xr3w7OuIRWazKFVpD\"}]}\r\nlast-modified: Wed, 01 Nov 2023 21:05:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6542bd9c-345\"\r\ncf-ray: a35e3acfdb1532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":837,"size_decoded":1176,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"357e9e22a01768dc0a074a8cd1556131","sha1":"2d45da133bcf125352b92ac22ce445819d6de392","sha256":"16f5917f9b8a87e02921ef6461afe3b3b1d1d529715cbf184ec1de62f0d2259f","sha512":"777463938489448aa26f2721b2e395769f0915cec5f794ffde8414555a24101646a28535f9021a5595fe027a814eae081d8c33fd6f1f851f0d74fc49118c2048","ssdeep":"","tlshash":"d60112be4736a3fdd5544a80aad42699343de042e16404ecb3817e17be2062a0abcd91","first_seen":"2025-06-01T04:11:58.667223Z","last_seen":"2026-09-04T16:29:27.663946Z","times_seen":119,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/static/coinInfo/solana.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.664Z","timestamp":1788537863664,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /static/coinInfo/solana.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 25649\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08385D5B3131A69241\r\nAccept-Ranges: bytes\r\nETag: \"670C723ABC22056BC5368CA2A97DD6A2\"\r\nLast-Modified: Sun, 19 May 2024 14:17:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10769821075161595358\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZwxyOrwiBWvFNoyiqX3Wog==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25649,"size_decoded":26199,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-09-04T16:37:19.614672Z","times_seen":1014,"resource_available":false,"data":null}},"time_used":1406,"timings":{"blocked":1218,"dns":0,"connect":0,"send":0,"wait":182,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/static/coinInfo/tron.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.666Z","timestamp":1788537863666,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /static/coinInfo/tron.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 28273\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08B200F23933B44349\r\nAccept-Ranges: bytes\r\nETag: \"D5CA5F90C7A46CB88E5F57B2D3046BA8\"\r\nLast-Modified: Sun, 19 May 2024 14:17:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 651333452456791640\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1cpfkMekbLiOX1ey0wRrqA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28273,"size_decoded":28821,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-09-04T16:37:19.63862Z","times_seen":791,"resource_available":false,"data":null}},"time_used":1417,"timings":{"blocked":1227,"dns":0,"connect":0,"send":0,"wait":183,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdt113a5399d78a45fbb1bfcf848c189513.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.673Z","timestamp":1788537863673,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdt113a5399d78a45fbb1bfcf848c189513.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 784\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC09385D5B3131E29241\r\nAccept-Ranges: bytes\r\nETag: \"19154533B233E7A8D836C55D57165033\"\r\nLast-Modified: Sun, 19 May 2024 10:15:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10570888818531062478\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: GRVFM7Iz56jYNsVdVxZQMw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":784,"size_decoded":1358,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"19154533b233e7a8d836c55d57165033","sha1":"79e82f076eda4be14c1e56e3be6aa491607e5d54","sha256":"256f9e3bf6fc881ae8aeb6d248325db9052f1d4cff6f96eee406fc199eb50cc0","sha512":"9e65a255678d151171890a33653739f942ddeb6e4dce4be74dcf6b865e893ee752f5924c1f96fcbd625b43040afd93b152b988b0cb50d5a838390f8a84061c36","ssdeep":"","tlshash":"6c01c5b5eda3b778f206eab640e80b1bc13d8e944252ca0f1ab988808421036a861026","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:29:27.693325Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1584,"timings":{"blocked":1406,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdtc0fd09a136d34fd49b53e8e25a188ec1.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.675Z","timestamp":1788537863675,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdtc0fd09a136d34fd49b53e8e25a188ec1.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 525\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC09B200F23933E94349\r\nAccept-Ranges: bytes\r\nETag: \"39EF9D38FE0AAB83585DD87672DB2F9F\"\r\nLast-Modified: Sun, 19 May 2024 10:15:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17681862502574744688\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Oe+dOP4Kq4NYXdh2ctsvnw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":525,"size_decoded":1099,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"39ef9d38fe0aab83585dd87672db2f9f","sha1":"73beb0a9847b3f98e5e96b384767896452dfaa33","sha256":"ab447108bbc8e802ba2d67626f51554cb9f1fab5db2bfeabfc8371eff71204cd","sha512":"5a1441bce9b88fbc5f0ecac5aee541406dd05eec641a6d2db62c6c38d7d59365d5568aeb95efdacacd125d808fd0d9e64c7954305b6da00dab35ec659b7a75c6","ssdeep":"","tlshash":"b7f00ce9f558cc65461855e6cf79742100fefc5cd57cf81c8d45f564f54d41259502c1","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:29:27.707879Z","times_seen":175,"resource_available":false,"data":null}},"time_used":1591,"timings":{"blocked":1416,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bituni.top/api/common/type/defi_activity_type","fqdn":"webapi.bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.679Z","timestamp":1788537863679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://bituni.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:23 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bituni.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JN%2F8pSEZxdWF03XGv%2F9JO%2F93yrHXCAp5y9cU72TrhoJstaRkXts9QJYRzYn3KaZ6XM9J0GZXd5abyG3vBskJAcmz48kLt9smPIhayEhdAHWbof5Sc6rkO9PktCSQbQ%2Bc1mMk6w%3D%3D\"}]}\r\ncf-ray: a35e3ad00b1556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":942,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"webapi.bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/charting_library/charting_library.min.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:19.163Z","timestamp":1788537859163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Nov 2023 21:05:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6542bd9a-2a6b\"\r\nexpires: Sat, 05 Sep 2026 04:04:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAZPEMqrO0WJpKr3PgWy4AyMOJYZxUJlUK15fegqJgVxSY5ui665YNVw44b%2BiHk0edKQVJF%2BfIAzpTLZupXWfd%2Fvt4uf1ChhmsfXbYpWM0pXlMVPPg6SaUfqsJHA\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e3ab3cf1c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":4229,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-04T16:48:50.862494Z","times_seen":1463,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bituni.top/api/common/getCoinList","fqdn":"webapi.bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.957Z","timestamp":1788537860957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://bituni.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:22 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bituni.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QH3WNnurEPZ7%2FwWcm51fnIIQknTvvKbgE%2B2j11AjX0nPB4I9rLDc00URTILycgQCAIWjWr03fxY403PgNMXDbhHIgKY6aINdp0BgwU1uq76ZcELHh6%2FbBz0egcolj3viLQ%2BS%2BA%3D%3D\"}]}\r\ncf-ray: a35e3abf1a2f56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":934,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":1783,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":1780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"webapi.bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-3b171223.js","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.959Z","timestamp":1788537860959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/index-3b171223.js HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69206be4-12cb\"\r\nexpires: Sat, 05 Sep 2026 04:04:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cSmqXWatW34J0OMev73zyjn6byoDXO44DCIwvnlTFxXzIUqUaLCHSda3FWqooWCajEYqXjSjt8qtj901yW7pZ%2FJudYKdL4XyrwSQEwlFlRfAeXUOCwYoX0EMUzQF\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e3abf087232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4811,"size_decoded":2971,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4804)","md5":"09b465ad89c3b2c65a9e055102dab327","sha1":"4366a11430569fc29055a814fccd239c8a2f282b","sha256":"07795fe38b47e1b8d3262c3492afadcf60411ee6f9a3e05b375da66decfaed96","sha512":"94156b19bf1230b0a08cad00b9119ef3e55c6f766a66e27a1f2c7f1bfab20733a0b84a7205abcc3ddaad7c9e7f8aeb04c32f9e651cfbc9e58769c0eb56075524","ssdeep":"96:wQpC8c9Y+XqD+wSY+CdfMWGRzbU4igQW/3hvLL3A0arijA:wQpC8QY+XqiwSY55GRzbbRvhvvnbA","tlshash":"60a1a699f90285bea9675484489c0010319c7bfab1984cb2fbfe9d0d77b48b9e364362","first_seen":"2026-09-04T16:05:01.836841Z","last_seen":"2026-09-04T16:05:01.836841Z","times_seen":1,"resource_available":true,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":675,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/resource/svg/dark/mengbanzu13.svg?2.0.1763703650539","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.652Z","timestamp":1788537863652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /resource/svg/dark/mengbanzu13.svg?2.0.1763703650539 HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Nov 2023 21:05:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6542bd9c-4a1\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZZ8hJS8z4IAnNkSgfZOGx6Rhh9weWcStLKAhJpmVP8bodGEbcsDLID6GeF8IMGXOUAiLK7Uubq1Wd571ZdUUdHuo91l6R4IaZoZsmkRds2wbgDWu%2FmJeqttFM6q\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a35e3acfdb1432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1185,"size_decoded":1348,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ed9f9b6d12bd8c03bbd38cb6734207b","sha1":"ae379a9b431428b493abbd53c1a5d3db643bdf5d","sha256":"4459f6b2e766c434b3cf0746ee2939f7c05b588bf5ab4901f6d9427e602f4d91","sha512":"43b0c19361ca45562e501bc37a4ae4424f578dfe49b1fea83507052d085c72b01ec712aa7bcd9e5aefb743a9fd835f882afa8a7c335fc95bf6934ea8d5a3d9a7","ssdeep":"","tlshash":"172163b8c51152ca62814f88dbe82606623ef167f3f54d9cf39016b20e78d9f15bca21","first_seen":"2025-06-01T04:11:58.699477Z","last_seen":"2026-09-04T16:29:27.727423Z","times_seen":123,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdt7f458d03546349149fb1a718be3ec492.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.670Z","timestamp":1788537863670,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdt7f458d03546349149fb1a718be3ec492.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 614\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC09BFDFBE343021D539\r\nAccept-Ranges: bytes\r\nETag: \"288529B0E33D3B66A2731D058A0EDB26\"\r\nLast-Modified: Sun, 19 May 2024 10:14:08 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12140603420238383984\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KIUpsOM9O2aicx0Fig7bJg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":614,"size_decoded":1188,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"288529b0e33d3b66a2731d058a0edb26","sha1":"45e95e851bc5f5ecf47f60051a2f337c4618b343","sha256":"c0a8c66763227f10f381f4aa054b2a851693e6519fd8daa435c326c4831bb34b","sha512":"47bd6e3b05c428e8fd039220d02a9e5498a8027c1aab085a7d04024472b2c88644e7b5097ddac8d2593c4d1ab7681ea57891066e36f782cbb28f34fef388432b","ssdeep":"","tlshash":"cff04751dff9f27d6bc1b051a7cd1027f2397c51403428308a18541cf01849afc56202","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:29:27.732731Z","times_seen":175,"resource_available":false,"data":null}},"time_used":1452,"timings":{"blocked":1266,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/waihui/TRUMP.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.659Z","timestamp":1788537863659,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /waihui/TRUMP.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 41871\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC08B200F23933604349\r\nAccept-Ranges: bytes\r\nETag: \"C17FB2AD4136F0AE9C0F8CC76203B089\"\r\nLast-Modified: Mon, 20 Jan 2025 09:15:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 230717204766387871\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: wX+yrUE28K6cD4zHYgOwiQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":41871,"size_decoded":42419,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c17fb2ad4136f0ae9c0f8cc76203b089","sha1":"987ca3f5149a44ec1e31833672d5661ce1a6a708","sha256":"d4a651e74adee7510d4da40304f48c9dca2f2130dcf4ae2b19d8c64e334b5223","sha512":"ce9b251f36a25ae4efde9fecf88197198c7031a001afd7e2bdc08578df55e820a4556ac049a8c80f0715ab69c753264bc443867afe91a77e7c585d13f0f0fada","ssdeep":"768:YepL62JLS//jk7O0tUz0dgF8TXZEz55FB5KGfLzO6OHtDd4i7ACk/31Rnqu+7POg:zpO2JLdO0tKQ3ZEz5TB5KILi6ONDdf7f","tlshash":"6313f1d0ce9b3131e5061c57bcadb8911c7a902ca337fe2e30c7f4256f94995c858ab9","first_seen":"2025-02-26T18:31:17.555429Z","last_seen":"2026-09-04T16:29:27.721253Z","times_seen":143,"resource_available":false,"data":null}},"time_used":1227,"timings":{"blocked":1031,"dns":0,"connect":0,"send":0,"wait":181,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/platform/dev/config.js?1788537860939","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.941Z","timestamp":1788537860941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /platform/dev/config.js?1788537860939 HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 01 Dec 2025 17:07:01 GMT\r\netag: \"692dcb35-0\"\r\nexpires: Sat, 05 Sep 2026 04:04:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C58VwKUGGXR422Qglq0M48Ym3vFjPXGqsD19a0QDBkoeo72M0urbnHfRvqVKsYJQfJ736t%2FfabzFXHif6LTPoYRoCOf507I4R4k03PUOL%2BSMgSOHXHRYqyqWt%2FRH\"}]}\r\ncf-ray: a35e3abee86932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":773,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":677,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bituni.top/api/common/getAllSetting","fqdn":"webapi.bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.955Z","timestamp":1788537860955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://bituni.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bituni.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNvqVSpQ0BRLM8VEVbPdOp7Gl%2FAUIhrKVL5LAZatztxqVOqhZSw0rhNp28iBGvvaQXMncQpjFpwwE1l85gO9Z3hEhmAXyzHhSGgB7vdMDdh%2B3MC3JuALEL9Tj0Cc1jaAjomxQQ%3D%3D\"}]}\r\ncf-ray: a35e3abf1a3056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":928,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":707,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"webapi.bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"webapi.bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/vendor-0926603b.css","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:19.170Z","timestamp":1788537859170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/vendor-0926603b.css HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69206be4-16c16\"\r\nexpires: Sat, 05 Sep 2026 04:04:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=22XXYNxvZJ0gCOhZDgLs%2BFONOeBqiSH%2BgL7oMhj2tKevE5g4adb0BcbHcTS%2B%2Bku9ZO2m%2FHpmgzSKPnW4vw3MuCEinPIxZtoID0uQvy65ntwIxAexv%2BNn%2F9oJW2rK\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e3ab3df2a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93206,"size_decoded":40497,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"b7646ab2157bda9f87a85a136b0e10b7","sha1":"562dcb5834c8b11fa0b43167e43069facc9476a4","sha256":"0926603b8bb00ec6b9f2e371777d368bac932d0a8fbd8e8c6c9d8a123e5894e4","sha512":"1824a7e60d64715a509a04d661f04b776851e71f345e6bc4cbece5a8f217bfb6b5907867391b0162e162c6ec491cffa58d67e1cc46eb97295ec021de6e7b46ea","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/za:BnNIClDsIxuVS8na","tlshash":"d793d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-01T04:11:58.654275Z","last_seen":"2026-09-04T16:58:43.061083Z","times_seen":47,"resource_available":false,"data":null}},"time_used":935,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":909,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-bc011be9.css","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.962Z","timestamp":1788537860962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YPrvfSoklMlm0KIynMXDP60NRnDiqMyawSR3XdhGh7di%2FS6TaTzRpNvu%2BswjJlYeK%2F%2BSfvN9wduRAHAY78DoRQGhuPUiXIReG2V3%2Fw70cHpB%2FL7U3Bff2QeMgf03\"}]}\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 04:04:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69206be4-18d\"\r\ncf-ray: a35e3abf087532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":950,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-04T16:46:51.693515Z","times_seen":1564,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/assets/index-c23222db.css","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:20.970Z","timestamp":1788537860970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /assets/index-c23222db.css HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:21 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xRNGl2faLvynVut0ieyN8l0zYvJJwS735zpqu09eWOQhp0BCa2xYAAMKrRIgkDZ%2BRIgxDPA7h9IkaXeOh2T4FKXbWWMQI1ee8%2Ff3YwMQWQhmDx01xnjAPp2D8KZU\"}]}\r\nlast-modified: Fri, 21 Nov 2025 13:40:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 04:04:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69206be4-232\"\r\ncf-ray: a35e3abf187e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":562,"size_decoded":981,"mime_type":"text/css","magic":"ASCII text, with very long lines (561)","md5":"400218fe243bf189827dff67121ead69","sha1":"0b30978e1e2c1f9750d857ec50dd5ceffbbaa3d5","sha256":"c23222dbca6ec0262b1025d434748c09445bfd8a5c369f174aa84ddc3f2f83ce","sha512":"79dfe7fc04b4b8f2b142053caf8f0af415d0ce8f8a2dc6dcb5335c668e13c1a82055bc0b86a0d0bd10fb56f8b5c51582e2b9d72e6ba0ec155368513e8ea425c7","ssdeep":"","tlshash":"99f087c66274e5387ed4307b2319b4e4a46ce88b8a22c5b5b2d382058cc35f22f20215","first_seen":"2024-08-19T20:20:38.836335Z","last_seen":"2026-09-04T16:29:27.715573Z","times_seen":161,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":691,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bituni.top/resource/svg/dark/user.svg?2.0.1763703650539","fqdn":"bituni.top","domain":"bituni.top","tld":"top"},"ip":{"addr":"172.67.136.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.615Z","timestamp":1788537863615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bituni.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 11:53:24 GMT","end":"Wed, 07 Oct 2026 12:53:22 GMT"},"fingerprint":{"sha1":"1B:87:D7:66:F5:3B:7D:1C:08:18:94:53:4E:48:D8:F2:6E:4E:2B:D3","sha256":"26:9F:4E:CC:01:04:C8:D2:02:C8:2D:29:03:33:F1:0B:0A:90:BA:B4:FB:2E:72:38:3D:FD:3B:AA:B6:00:1A:15"}}},"request":{"raw":"GET /resource/svg/dark/user.svg?2.0.1763703650539 HTTP/1.1\r\nHost: bituni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:04:24 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xfPvj1Kpfu66mmuFZP7GDQ8e37I4upZuK9u2XsXk9NPO%2BcXwrDsLvukV96o3QDjVgTk77ISNkfFuU%2BIW2Y6HiaAEFIx0bMDDXrM5GrGaAd4V6s8AtmMa5%2BC7q3rY\"}]}\r\nlast-modified: Wed, 01 Nov 2023 21:05:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6542bd9c-227\"\r\ncf-ray: a35e3acf9b0732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":551,"size_decoded":1054,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-04T16:45:13.665641Z","times_seen":465,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"bituni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"bituni.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com/tg-a5usdt598b1d1be2314330bc8cf232db66941b.png?2.0.1763703650539","fqdn":"tg-a5usdt.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.189","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bituni.top/","date":"2026-09-04T16:04:23.670Z","timestamp":1788537863670,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 28 Jul 2026 01:36:56 GMT","end":"Fri, 12 Feb 2027 01:36:56 GMT"},"fingerprint":{"sha1":"22:6F:2E:70:43:4E:4C:9D:26:5B:09:D7:DA:80:2A:D5:88:B2:F7:8C","sha256":"5B:B0:93:13:00:ED:AE:DA:44:A7:BF:EE:C2:45:5D:D2:6E:3E:10:DF:AE:BB:2D:06:CE:AE:94:55:1A:32:B4:1E"}}},"request":{"raw":"GET /tg-a5usdt598b1d1be2314330bc8cf232db66941b.png?2.0.1763703650539 HTTP/1.1\r\nHost: tg-a5usdt.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 04 Sep 2026 16:04:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1907\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9AEC09BFDFBE34308ED539\r\nAccept-Ranges: bytes\r\nETag: \"9459A1B16A6346A8DAF9E2E700D8A0AF\"\r\nLast-Modified: Sun, 19 May 2024 10:15:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17079821215456291766\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: lFmhsWpjRqja+eLnANigrw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1907,"size_decoded":2482,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"9459a1b16a6346a8daf9e2e700d8a0af","sha1":"7aeef8fb0483dd8f7089324bf338a8baff19c377","sha256":"fdbb68edeff25fa09404179dfc144d6343af95599093ad71043bd44939983a04","sha512":"87f2d69526f66e1169d4ca8a4ede4337e912b04ceab6438d0cb29021f3687a3e6802fc103fb77f7af9ad5ec1ebba3e404794cf0daf8a13f2c05c2be05c7e1376","ssdeep":"","tlshash":"c141f9a8f7a5f50fec540152146b69040df94844b560c04f06df94be4aa7af38c9f584","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-09-04T16:29:27.667941Z","times_seen":158,"resource_available":false,"data":null}},"time_used":1637,"timings":{"blocked":1452,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}