{"report_id":"c265d494-2aa3-4d60-a853-5ba80523ab0c","version":6,"status":"done","tags":[],"date":"2026-03-17T15:17:03Z","url":{"schema":"https","addr":"bitgets.cyou/","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"172.67.145.207","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bitgets.cyou/#/connect_wallet?redirect=/home/index","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"title":"XAUT","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bitgets.cyou/","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"172.67.145.207","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-21T15:17:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xaut.fh.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1994-11-08","domain_rank":0,"first_seen":"2025-03-01T05:35:38.23094Z","last_seen":"2025-03-01T05:35:38.23094Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":550,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":4,"received_data":1306159,"sent_data":2232,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.bitgetlink.sbs","ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":22,"received_data":21297,"sent_data":14494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"bitgets.cyou","ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-14","domain_rank":0,"first_seen":"2026-03-17T15:17:07.53384Z","last_seen":"2026-03-17T15:17:07.53384Z","alert_count":31,"request_count":31,"received_data":5506247,"sent_data":13645,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitgets.cyou/#/connect_wallet?redirect=/home/index","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3ba97364650b15ee6dbaaed64615469c","sha1":"233b4c686a7117c9574f12b9831446247fec31ce","sha256":"5f98e5f581b95ea45aacbf5de4c683d2a2c2c084d448aacd139a52eb0d0cd13e","sha512":"2441d406937c0bf8451a169341d0ce03fcdf58deb48bdcf6b77f86e3a02ba2e17ad6a143c1421891491e06683d027da96d3e8398ed21e9f13e0f1cdf0455a904","ssdeep":"","tlshash":"70c08cc4a0c22f207602651810bf38f4d034482a79481b628cd4d8582e234f0c237edc","size":154,"data":"","first_seen":"2025-03-01T05:35:43.215053Z","last_seen":"2026-07-27T06:32:38.467547Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/#/connect_wallet?redirect=/home/index","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bc21739009c91e3ee4d4a6c8e60d18ba","sha1":"1eaded4765b6f479ab2a208867c085988ccda571","sha256":"5248884e1467c7062f597d81733c36c693a656032b38615586adf0160dd06f2f","sha512":"bca42ba64b27f02d3a7cf7e7f739952ab1dbd34a8395f07fb190ae682ca74d657a6e6ca83714b4ea6565fe7b99769148eb0fda5a85d9cd2453768f6abb082248","ssdeep":"","tlshash":"7ed097c962cabb204902100109bf31f0f120002aa01483956df8d86c2a130f8533ffe8","size":232,"data":"","first_seen":"2025-03-01T05:35:43.246885Z","last_seen":"2026-07-27T06:32:38.49048Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c3ddbd12ff83ba85ab2ea7555185625","sha1":"b178cd86868a31448fd4c98686f7c522a5e90d84","sha256":"9b91566978ca9a69258db255e51c92810ca33a4d6071f118961fd9c9c42e3e62","sha512":"6900521cab8dbb9bfbd64a15204ebafa9f8624c3e732664234bc10f11c7d8ada82c587744535fc7dd88c6b28e16a240d9f9cf4a0f72d33cb510451b1408bc95d","ssdeep":"","tlshash":"8e8000228a0e8080b8003e8e8aaa0008b0a8e8338a8cc823b00ce8030f20330008e0c0","size":36,"data":"","first_seen":"2026-03-17T15:17:13.351236Z","last_seen":"2026-03-17T15:27:48.808428Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/ConnectWallet-jzz4neVo.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cf4aa90fd4c36522493786dc6c6e889","sha1":"3558239776a59b21d4a0463f3fc4dfc0014bd695","sha256":"f064383b06c255771d32d58f089b72003835c2dd683196761922c34084e564b9","sha512":"bdc9f23a9dbfa71abd02b97b487c3d729c8c55c391151da0ea784f8777ee32481514494812471a6e56fee1f15b23c6ad6e56ce20925000cc8332bb03720be9bf","ssdeep":"96:mX1CNhL7mtEn2i451/sWcfoNrNifJFfe5Kdr6p12X2nK2WX6bXb:01CNhXBn2D1/TNifJFf2KINb","tlshash":"669197fd08407ad8713bca1248113a15f03736beef3d8e02a1d69a35aaf546465fc375","size":4413,"data":"","first_seen":"2025-03-01T05:35:43.24609Z","last_seen":"2026-07-27T06:32:38.436496Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/#/connect_wallet?redirect=/home/index","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e58d1151e4fd2b5921ed8bce6bcb383e","sha1":"00c4861a97489eb2b201d7604ef8611c3ddc8108","sha256":"66a8a82062059c78b0ef00a444fc22ac2979c05a83f72ef1f860054eab9e40c2","sha512":"ee873aaf8a93fbdca4da0a93af83c4dadda21bc7605bb29630f4fb38e94167bbb8b1af6520aff74da0f6b3313418b7505f3bec2ad22ec5fd8a9f8c48c4226cdc","ssdeep":"","tlshash":"43c080c5a1c23d201915795511ef38f45024442fb14817529cd4dc4c2d234b4c133dac","size":160,"data":"","first_seen":"2025-03-01T05:35:43.220919Z","last_seen":"2026-07-27T06:32:38.468847Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/#/connect_wallet?redirect=/home/index","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1296cc6577de9cab461144c1ad4567cb","sha1":"3418f33dbd290f37d6c80cc1e219df7e11c2b694","sha256":"6a3e564b3fdb4d534a0b94f1cbe00035f2d23589427ef4689d3ba1556f259b9c","sha512":"93aaf28fcde89d2fb6d816e659479da0a2e62c2bd37214690ee72276d9d4dfe1c1a5ac3f597705a8b923c23433aff8901d8e0263250392e1b670deabd65d39c3","ssdeep":"","tlshash":"dfc08cc8a0c22e002602651090af38f49034442a72481b238ee4dc682e230f48233ed8","size":154,"data":"","first_seen":"2025-03-01T05:35:43.237887Z","last_seen":"2026-07-27T06:32:38.521659Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/index-PBVdB8c5.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a1cd713ea89ba3941feadcc54ee5448","sha1":"66222db8af68bc09a038d93348f359775ec4fa55","sha256":"8b1413319843c9383eab6991e8be0a26a3cf35e5b11b4d9be0901c27e24d2125","sha512":"eb2c42c6ac58510c5d0030b2db951e6dbd747d648058953c0a21343d2dc05ce85aaa5e3205e6c8b885de74202240ff0b23542fd03c6e2d81a29494f0e22e0262","ssdeep":"49152:JwDjawPn/l9qLZEQhl+Q8UAe1Ox2qOhIl34p+xAxUHjw:CxDw","tlshash":"86067c54764e6e12516240e49cb3144af6346793b019d8c4f2bee9e83a88d3c3776ffa","size":3795643,"data":"","first_seen":"2026-03-17T15:17:13.354942Z","last_seen":"2026-07-27T06:32:38.508491Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.bitgetlink.sbs/login/info","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"GET /login/info HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-request-show-loading: 0\r\nx-response-show-notify: 0\r\nToken: \r\nAuthorization: Bearer\r\nLanguage: en-US\r\nX-Ca-Signature: \r\nX-Ca-Signature-Method: md5\r\nX-Ca-Timestamp: 1773760609318\r\nX-Ca-Nonce: 0.30035936026493315\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://bitgets.cyou\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With\r\naccess-control-max-age: 1800\r\nset-cookie: PHPSESSID=dd1465babe62151199f5b9150d0769a8; expires=Tue, 17-Mar-2026 15:40:49 GMT; Max-Age=1440; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YxX8Aiwag7D2ki10B8SwRPUPRmcjfwmu9AoJGNsuKY9fIRCLe66Pnm%2Bn66LvPL2fLjtAmlRXU%2BAeMkpO3EZOiTNG%2FR6qJYw5GCrXU2NmCyyu1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf602098c35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"98f1a11ee98933a0a60bdce6d9dc21e7","sha1":"83f32d01cf1fa7fcaf7c66eac9d5e25e96fec8f0","sha256":"f676a2b8aa19a17079e58899095f44271759c1f5eeac1467bc2909643eb16ffd","sha512":"226d74b0ba8422708e599b35777c08c3d55a29a694a9d4c951b4ef8bb5a0a67d59cf6441bc843a4f7f2d0f2eb7fbe6421fc6e9b100b4faf40aed0dada2c8fcbb","ssdeep":"","tlshash":"cba002221d0c8893f80235c425ae5f0065fd3552d7581214dc9c5a38cb181a5b19795f","first_seen":"2026-03-17T15:17:13.298787Z","last_seen":"2026-07-27T06:32:38.420384Z","times_seen":7,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/index-PBVdB8c5.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:42.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/index-PBVdB8c5.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 12:16:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a03981-39eabb\"\r\nexpires: Wed, 18 Mar 2026 03:16:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxLYPoyVm5niQPx4jWgOSj3te6N3rvY%2FJ5rgPy%2Bc1JnqkRoZSZchqt6fpV3yAaz38dHH22BmMqW3bdyVoy%2FAHhvfsLTsz88jDkT2gQ%3D%3D\"}]}\r\ncf-ray: 9ddcf5d2f8f61ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3795643,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44896)","md5":"8945f7ce6ebb1908070e8b27470168f2","sha1":"1e9e5dacb8cf04b480d695ca7f2bf79a64569af5","sha256":"4b703790bea5e2c37098d59d6c8ec5722fd9973a90ff3abaf040ab800a08e65b","sha512":"1a85ea9c78ec660617420f47b35e3bc92c33ea20e722dd543e80811374908ab29467ee2bba2640d6db5cee6ffd1ab4437d317109d3d298f7c5236b8835d078d4","ssdeep":"24576:F3xyDjaFNy6qU3tCbbhMGfdKn/qHU9qLZEQwglvGQWLnQ:JwDjaNNn/l9qLZEQhl+Q8Q","tlshash":"fb358da0b381b35147d771e9147b3706a3385a85b018d8dce6edcce836d5a289127fbe","first_seen":"2026-03-17T15:17:13.301327Z","last_seen":"2026-03-17T15:17:13.301327Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2018,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":1493,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/arrow-down-GBZF8giN.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:45.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/arrow-down-GBZF8giN.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitgets.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-866\"\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EqxeAYz3UTARiyvo3DM8TZCeqqyXILtNTAdANo9ZNhZn%2F%2FeCj2q6%2FRWyxjgVtRxAG7eVmK%2BssgnJlI0saGGVkQOKBe7e807CMqBXzQ%3D%3D\"}]}\r\ncf-ray: 9ddcf5e7fbf81ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2150,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2149)","md5":"bdc581f535f58d2217d6c46b45a5a507","sha1":"a700c3b81608366954f149fda1980d140b999487","sha256":"c6a62f8a8b0519e43f6f93ccee17266264dc1a0a69960deecb7ea9eaf5e488fb","sha512":"2a0f12fc0e78ab311947d3f865ab640e5423e2939b07b812e5f2bb0454255e0b55d625f97e061e9e0d0b80e3722f70e8180afce068440f93b08d83e974c2ddd8","ssdeep":"","tlshash":"5441d3fc894116cfe53cccdf7a227508a02257eaff552cc1d6e67614d0a64b516dd48c","first_seen":"2025-03-01T05:35:43.247674Z","last_seen":"2026-07-27T06:32:38.434974Z","times_seen":8,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/icon-lYXNp7dh.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:46.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/icon-lYXNp7dh.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/assets/Home-JaR2e-XQ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:46 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y891bFIyaS%2B5ZM76UKRgEHMNugKYnrLTyNtXLwwNzCXBlT3NgAwQsjojB5OJZ0rgC6T3fZEbYZGxRHX65hdpG2giPG0hxHNF7nyA5A%3D%3D\"}]}\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6741a29e-1e9\"\r\ncf-ray: 9ddcf5ecdce21ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":489,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (488)","md5":"2d31bd55feb68bc1f4153f6c35f8d451","sha1":"b27f235dcedd7149127e8ac53372a8e6b866e802","sha256":"f099080d3a1624e5f53056ee901bb52b26af23e5c62885ed3350e143d534173d","sha512":"bd75a6059c1c24285bc6c0198d96dee1750e3f8d5f0bf4d19226c7e659a4e142d740821a969e001ba00a56f431ab9198ef01db4893b54e3b6e750d84e3314fbe","ssdeep":"","tlshash":"8af027ccf9401194c83c12622f269f1f3403f290ef9a38a32916a34890ec11ea97b45e","first_seen":"2025-03-01T05:35:43.203373Z","last_seen":"2026-07-27T06:32:38.444396Z","times_seen":8,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/index/getConfigValue","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:48.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"OPTIONS /index/getConfigValue HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,content-type,language,token,x-ca-nonce,x-ca-signature,x-ca-signature-method,x-ca-timestamp\r\nReferer: https://bitgets.cyou/\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t6vyl3BKxKBTxVIbamE%2FwmOLsq112Ww6SabXaRI60KYS288eRHlOc8VReK%2BVD6jU0jY3Ys8%2BwmXl3brwieRsFuLCuwV%2FUJeNMLks3%2BDaMf%2F4RA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf5fb58b035cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/login/info","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"GET /login/info HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-request-show-loading: 0\r\nx-response-show-notify: 0\r\nToken: \r\nAuthorization: Bearer\r\nLanguage: en-US\r\nX-Ca-Signature: \r\nX-Ca-Signature-Method: md5\r\nX-Ca-Timestamp: 1773760609342\r\nX-Ca-Nonce: 0.9155132845894187\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://bitgets.cyou\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With\r\naccess-control-max-age: 1800\r\nset-cookie: PHPSESSID=d4c4c6275713c6c4d94b1ffdc136b740; expires=Tue, 17-Mar-2026 15:40:49 GMT; Max-Age=1440; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnA0Gb72RwT13PLBkMErdljAvlOnKtTjnGEGkTImzV0kX9v0ttf6O6WcsvoPt2rOcdU8yK83aaCQ%2FuJicYoYzj4IcSuRMvrJyJrtOSOEfZEsvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf602399135cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"98f1a11ee98933a0a60bdce6d9dc21e7","sha1":"83f32d01cf1fa7fcaf7c66eac9d5e25e96fec8f0","sha256":"f676a2b8aa19a17079e58899095f44271759c1f5eeac1467bc2909643eb16ffd","sha512":"226d74b0ba8422708e599b35777c08c3d55a29a694a9d4c951b4ef8bb5a0a67d59cf6441bc843a4f7f2d0f2eb7fbe6421fc6e9b100b4faf40aed0dada2c8fcbb","ssdeep":"","tlshash":"cba002221d0c8893f80235c425ae5f0065fd3552d7581214dc9c5a38cb181a5b19795f","first_seen":"2026-03-17T15:17:13.298787Z","last_seen":"2026-07-27T06:32:38.420384Z","times_seen":7,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/ConnectWallet-jzz4neVo.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/ConnectWallet-jzz4neVo.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/assets/index-PBVdB8c5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-113d\"\r\nexpires: Wed, 18 Mar 2026 03:16:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YQ0R2nWCqHID93CKR%2FwqEDrEckyWiu8nVmaPHcwRmf70cVEpGS4YGlf64fhau%2B6TmsIrmoqr56hmFzcXShvAclLUhSq6dIKZhxYVUQ%3D%3D\"}]}\r\ncf-ray: 9ddcf5ff2f401ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4413,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4412)","md5":"2cf4aa90fd4c36522493786dc6c6e889","sha1":"3558239776a59b21d4a0463f3fc4dfc0014bd695","sha256":"f064383b06c255771d32d58f089b72003835c2dd683196761922c34084e564b9","sha512":"bdc9f23a9dbfa71abd02b97b487c3d729c8c55c391151da0ea784f8777ee32481514494812471a6e56fee1f15b23c6ad6e56ce20925000cc8332bb03720be9bf","ssdeep":"96:mX1CNhL7mtEn2i451/sWcfoNrNifJFfe5Kdr6p12X2nK2WX6bXb:01CNhXBn2D1/TNifJFf2KINb","tlshash":"669197fd08407ad8713bca1248113a15f03736beef3d8e02a1d69a35aaf546465fc375","first_seen":"2025-03-01T05:35:43.24609Z","last_seen":"2026-07-27T06:32:38.436496Z","times_seen":8,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/index-OsHIMrMM.css","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:42.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/index-OsHIMrMM.css HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-973d\"\r\nexpires: Wed, 18 Mar 2026 03:16:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMyqWdEvahsDA60Gz834zo43aPxZUx2%2BO2fIo2cUMaKrPPoytSNilVnj5r7kZcpu%2FdyVZJ40W53JMn%2FjtaDTEOySRaDIWnxXwGZiEg%3D%3D\"}]}\r\ncf-ray: 9ddcf5d2f8f71ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38717,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (38700)","md5":"6b7d12ea6fdfae1400379521c92fe35d","sha1":"f8393a55aae314be7fa886b3ee665f52d2e82c73","sha256":"605a4473381deca47fc61ee01790d80dec0a2ad7626bab4c3b9b50f690550fae","sha512":"9ae9249f49a334fbc4ca3227d7ba7919cfe992655eb971b4075de6ba2b5199fbc2d7e4088ac16fcbb69e7fe176a27f601de723d0eb3efb78dbef46f7a91f9b1b","ssdeep":"384:/FGBMTGs+4LTSiWwoM2OIcKAu22IMHbIwccL80LY9jbYmfLrmo6CdrmcshOFdh:9GBCLTSiW/OIcK6MHnccLIMmfmRarmcl","tlshash":"d303e6667709203ab433ca2a34d17b3c7238de52c6134a79f6513629dacb1c726e3f59","first_seen":"2026-03-17T15:17:13.318832Z","last_seen":"2026-07-27T06:32:38.425187Z","times_seen":7,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/login/info","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:45.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"GET /login/info HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-request-show-loading: 0\r\nx-response-show-notify: 0\r\nToken: \r\nAuthorization: Bearer\r\nLanguage: en-US\r\nX-Ca-Signature: \r\nX-Ca-Signature-Method: md5\r\nX-Ca-Timestamp: 1773760604520\r\nX-Ca-Nonce: 0.030392297648785482\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://bitgets.cyou\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With\r\naccess-control-max-age: 1800\r\nset-cookie: PHPSESSID=ab91c31640998d11348478a1f62c9b57; expires=Tue, 17-Mar-2026 15:40:45 GMT; Max-Age=1440; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4t%2ByEsRyfqLrR0ATDclpxmJ6g70b6XPI8Pad%2FDZ%2FGwU4qC78AT5paTW%2Bfvbhd%2BXPObtF6DKmXajl9PK9USkEVn6Gdj8moq64OctcrQvJaDc4DQ%3D%3D\"}]}\r\ncf-ray: 9ddcf5e62ddab27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"98f1a11ee98933a0a60bdce6d9dc21e7","sha1":"83f32d01cf1fa7fcaf7c66eac9d5e25e96fec8f0","sha256":"f676a2b8aa19a17079e58899095f44271759c1f5eeac1467bc2909643eb16ffd","sha512":"226d74b0ba8422708e599b35777c08c3d55a29a694a9d4c951b4ef8bb5a0a67d59cf6441bc843a4f7f2d0f2eb7fbe6421fc6e9b100b4faf40aed0dada2c8fcbb","ssdeep":"","tlshash":"cba002221d0c8893f80235c425ae5f0065fd3552d7581214dc9c5a38cb181a5b19795f","first_seen":"2026-03-17T15:17:13.298787Z","last_seen":"2026-07-27T06:32:38.420384Z","times_seen":7,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/map-PjS8_vrP.svg","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:46.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/map-PjS8_vrP.svg HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6741a29e-458e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qRxASP54peSAzAoqAOky8y4cGBxnPkIFvrqyGUzIMT7%2FszBcIxVo4EuJMdYBCJsdWDj7usr8dFGdzyxeforbxDvC0PU8qQ2oyuHQjQ%3D%3D\"}]}\r\ncf-ray: 9ddcf5f1ad9c1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17806,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"865d9ca80345995be43ff8530457ae0f","sha1":"e50f5ee59eac570ba1d4ae88b3cb4fcb85bc8451","sha256":"4fe82aac53f9b1d66e4c7d50e618084a5e36b18fe03d664f0a57b31b4da20669","sha512":"68463d4e36ae0b4fd2df0e5807ffe17308172a854cd27872513f6b4d25e0f23022e93bd52e4a6de10cf3ce3fd51409d8867bfa327eb7f386835fcc9980079f5c","ssdeep":"384:l7i4hHyiS51IoD3XAaEKM+aMbSye7WpeyT5r+:l7i4hHpS5/FMdOpeyT5q","tlshash":"778294cc27955df45f4847deff0262281b17b0bbef490240c445a2bb586a51c9e3fae6","first_seen":"2025-03-01T05:35:43.169406Z","last_seen":"2026-07-27T06:32:38.435712Z","times_seen":8,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/login/info","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"GET /login/info HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-request-show-loading: 0\r\nx-response-show-notify: 0\r\nToken: \r\nAuthorization: Bearer\r\nLanguage: en-US\r\nX-Ca-Signature: \r\nX-Ca-Signature-Method: md5\r\nX-Ca-Timestamp: 1773760609398\r\nX-Ca-Nonce: 0.9325698067583212\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://bitgets.cyou\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With\r\naccess-control-max-age: 1800\r\nset-cookie: PHPSESSID=8b9f15d518453669c4e0ea6be03bdcb4; expires=Tue, 17-Mar-2026 15:40:49 GMT; Max-Age=1440; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F6oONQsXE7wCXTf9t7Ff54pULO5JFr07D5AwPdadUIt6%2FHJAekfzhT0KVZC%2FpBYilOlK9YpZ3vD2EE9C6DHFRJaHnqz7X7v5LUObNVeJZ%2FzXQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf602899e35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"98f1a11ee98933a0a60bdce6d9dc21e7","sha1":"83f32d01cf1fa7fcaf7c66eac9d5e25e96fec8f0","sha256":"f676a2b8aa19a17079e58899095f44271759c1f5eeac1467bc2909643eb16ffd","sha512":"226d74b0ba8422708e599b35777c08c3d55a29a694a9d4c951b4ef8bb5a0a67d59cf6441bc843a4f7f2d0f2eb7fbe6421fc6e9b100b4faf40aed0dada2c8fcbb","ssdeep":"","tlshash":"cba002221d0c8893f80235c425ae5f0065fd3552d7581214dc9c5a38cb181a5b19795f","first_seen":"2026-03-17T15:17:13.298787Z","last_seen":"2026-07-27T06:32:38.420384Z","times_seen":7,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/AppHeadProfile-Jl7pzMH5.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:46.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/AppHeadProfile-Jl7pzMH5.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/assets/Home-JaR2e-XQ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-9ac\"\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qj97BsO778SPSVs5wvaYjZDJCvGkCsZd4YC57u5u2jd11N4yNZkjQgQmWKkRA6etkwqgAvZHLhPoKfmQoiBWr5JONiEP%2FDtPJZB1lg%3D%3D\"}]}\r\ncf-ray: 9ddcf5ecccdb1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2476,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2475)","md5":"cadde6903929b8f45bd9d24cb18a822d","sha1":"6a665c2c9bf3c75820073552269636a270b0b7b3","sha256":"4c81edcfe684695fafacb3f00b58dac0346ce53cf2a3e3366ed5a7db173177f2","sha512":"6205a103f149e88780f52f77f4f43943736363a4ad6885a04e67a489ddf1e57e6c981cba868694e06eb71400cddfeb605471c2008f9f05a552dedb1b1d480bac","ssdeep":"","tlshash":"2e516348f9466d78d7730888a0514824ab4c3fe5e1388cd6d0bcde5787f5db4dd66031","first_seen":"2025-03-01T05:35:43.242803Z","last_seen":"2026-07-27T06:32:38.426058Z","times_seen":8,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/Home-JaR2e-XQ.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:45.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/Home-JaR2e-XQ.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/assets/index-PBVdB8c5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-13ad8\"\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2AZdB3Tbg0%2BK%2BfudCAS5g%2BR5mCd2k13LXaJcFhIA7qiEn0RgmCxGvn9BdhE%2BpebJ%2FhkKeYwHd60%2BOQ3B3ID%2F7FhIEHQI5OjMxz0SUA%3D%3D\"}]}\r\ncf-ray: 9ddcf5eb3ca61ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80600,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"ca5bf3c579e87e9b68b9a8da84e1e96c","sha1":"a7695125e2c98e4bbc8c86df185875bd25f00430","sha256":"b6d221546a4922428a451a655ca6249e3c16ea09eeaa67026f596e0c09a3d459","sha512":"c63a75d9182fa3887616c562ce1ade21f899f823c52354030de1aada17299077cd23da4827fa20070b8e0557ec13920ad49e5bc6284f42644006a9c2f187df87","ssdeep":"768:JXXF5mXzM2760NSNhyLlxOdi7KDQ01JwprdBx0Z2MV6wDhIpz2+u+AfbFZzyw8zs:8S4L3Ai7KDQ0vwhHx0Z2MV6uhgPWfozs","tlshash":"0d73d06b870e85fdaf1458c0d193580439e1e56b67a7ecaca7b7f62163b0ffb1428610","first_seen":"2025-03-01T05:35:43.208096Z","last_seen":"2026-07-27T06:32:38.434234Z","times_seen":8,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/Graph1-NN3oHkeM.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:46.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/Graph1-NN3oHkeM.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/assets/Home-JaR2e-XQ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-8eda6\"\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=72SVgzX9M4kML%2BNfMhw4v68OmJGJTLrJM7buc9b8WhqxEKgoD1hG%2Fjk%2FD3zyd04mRSamLQJhJJ3UJQANqhWOgCgD8LyldwOG6Go0BQ%3D%3D\"}]}\r\ncf-ray: 9ddcf5ecccde1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585126,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54991)","md5":"9787502b2e07674745cd53c692ec5257","sha1":"6709cc5b41067133cb839d0e7fe2c59c0e05f647","sha256":"014b2ce1ae7eec27f3fbc8a28bbd68c62e4cd27ad9fdaf385e988c8fd4037145","sha512":"9205edef83bb88be9259d8ae420989665100cb48b1e0e5dab70a98cd364aa15eaae36f8224fc7e73f67e8e8a6b860e55847ad2c9dc1c5b69b3b6e40b04c1e76b","ssdeep":"6144:r7b7OYFZUXeT5JgaGOu0i1Mg2J/of7VvA4KrtoIoDqntxgz7lKV0bx3LMYx0Z:XnOYFeaGZ0iDVo41TqntcpJbGai","tlshash":"f7c409e87254746183a770b004bf050f933a691da84e85a8fa59e0de2cfd44e667bf7c","first_seen":"2025-03-01T05:35:43.190155Z","last_seen":"2026-07-27T06:32:38.421758Z","times_seen":8,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":484,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/index/getProductData","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:48.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"OPTIONS /index/getProductData HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,content-type,language,token,x-ca-nonce,x-ca-signature,x-ca-signature-method,x-ca-timestamp\r\nReferer: https://bitgets.cyou/\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 15:16:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GTNI4FguuBMyaK1ivzt9QJcYq035%2FUl%2FzepAaYvimMZ6zIrzLomoZzxXFK96zULeS5vgMHtCxXVet0Gg6wli4KmO62GLoA6jpUa2I6LCyvN6lQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ddcf5fb4e80b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/AppAdvantageBox-TZOgZB7j.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:45.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/AppAdvantageBox-TZOgZB7j.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitgets.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-13fd\"\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2Fu6u26ceTJ00pEvpRQtCxFC9YijsAKSKCdT08uvT0NWIY3CyTiEXtg%2FNF5iHYsmhe5mVNb2orodsQfcxLVAPeRBJF0dRProUYHW1A%3D%3D\"}]}\r\ncf-ray: 9ddcf5e7ebf41ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5117,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5116)","md5":"878e2cb77e08af4ecad07256e7a8de60","sha1":"3ad0833ab38eaad66646c37728b3d528da7d5614","sha256":"64951042a7e8f263e31b103f3003e63425bcea00f792ea456a5f846f0150d89a","sha512":"dff9f21d1bf9eab52a1ca184d03f2d111d5f9043125b2a656927c46db3873af0d96359832ff7119b82452a61c2b89f8b1170ee9ebcaa75996d4327d1b9ec6374","ssdeep":"96:IrAMrcXah78hIrgJAJ8JO6JziJ8eJXEAGTUbptS5AAuuzUtrM:IRrcXIghI8JAJ8JnJziJ8eJ0AGTUbbmX","tlshash":"63b1638ceacb89baf53eca5f9a003d09903097dbef974441e2e51b245768571572e0f8","first_seen":"2025-03-01T05:35:43.230713Z","last_seen":"2026-07-27T06:32:38.442068Z","times_seen":8,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"xaut.fh.com/wss","fqdn":"xaut.fh.com","domain":"fh.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:47.198Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wss HTTP/1.1\r\nHost: xaut.fh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bitgets.cyou\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: PVL8PJzO/RdKDqfCskyZ7w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/index/getProductData","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:48.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"GET /index/getProductData HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nToken: \r\nAuthorization: Bearer\r\nLanguage: en-US\r\nX-Ca-Signature: \r\nX-Ca-Signature-Method: md5\r\nX-Ca-Timestamp: 1773760607288\r\nX-Ca-Nonce: 0.48387709048133665\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://bitgets.cyou\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With\r\naccess-control-max-age: 1800\r\nset-cookie: PHPSESSID=32364258387a5fa42dd8624a006e3f5c; expires=Tue, 17-Mar-2026 15:40:48 GMT; Max-Age=1440; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bt3ScqNoDZd%2BUCC5CriLko5kLDM573ZO%2F6N2%2FMeLNCO9tIVZUINQcwcsYbdEdQjB1JQ5wMGOsgX7CPkRTbeo1LPy55SJVPltHJFh8tN6%2FJqkmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf5fce8cf35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":63,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c8e5c578d906e7dd2f81002dd1e2cf4","sha1":"cb59c9e9af0bd35a3d447329db9a551820a2d53d","sha256":"69599c9d14409d3b47365ceef5eb41292aaf0c9aef5f56f6a8e37715b3b95335","sha512":"49282318ea3cfdf3fba75610455144eb01eb3ea6e5c462cc741aa88cd8679e8ead447d5a981af9588e15b0c2750df3026ec3a28cd72bf4a5fa948bf4e16b8d76","ssdeep":"","tlshash":"a0a0021d260914472a122394911c2a18579d10936a515739d89e5738e9f54e47292459","first_seen":"2026-03-17T15:17:13.328568Z","last_seen":"2026-07-27T06:32:38.427031Z","times_seen":7,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/metamask-icon-V46BvGad.svg","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/metamask-icon-V46BvGad.svg HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6741a29e-1912\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DpVh80jcjtgaKXCmNcNNCSEGbh8IA%2FOivY7KYU1BASSSF9e7%2BC08rNx5e7F9RFdBcSts1s5YfQw5pKnAkVR%2BrDFAXsD4gmyP0XhRiw%3D%3D\"}]}\r\ncf-ray: 9ddcf6045fd51ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6418,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9fe1b0a6699f8c8fd155af9c645d78f3","sha1":"58dc1cb2d4251e2d2c6ce5f140bba8ef0736c042","sha256":"42521bd436bc4ac792366023fd5f1b97ba1dc1e80f200b57ec9b1ea9d43ec19f","sha512":"6f5506b7aa2ac43ce0c8e92d34ee2d794608c09732d986594f7f4b0165f4758640a6de6661f1052272f7a9149dade6bb50a4ef7d8992d1b9939b14c6d609edee","ssdeep":"96:p+4dw75RzSwXNO6oSDpcPgrVQ8ycZC4rAO:prdo5NFoSDGPgrV34u","tlshash":"b1d157ce67881c7cba678b78e3097231e02b16f65e14b6818c73317a511561e2abfed4","first_seen":"2026-03-17T15:17:13.329774Z","last_seen":"2026-07-27T06:32:38.439718Z","times_seen":7,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/empty-mMieHafH.svg","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/empty-mMieHafH.svg HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6741a29e-4c40\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8IO5KOdrPi9K35qlK%2BvePjyqBI7cqF8B87ZAgdf77TXo1kzpiafaTiJgC11TsbfOuZHWg%2BGOZdFBIrETHngNh%2BYI8WEmGLDkba9Dww%3D%3D\"}]}\r\ncf-ray: 9ddcf6046fd61ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24fa0560d4ed91b3930218996f724e82","sha1":"8769cd5093af380eb7bc0641a839083d506e4940","sha256":"806216fcdfa5a28f7d4246968662f4496a8b0644c09ed5140736db96fe2d049f","sha512":"eef42ed58632cbf7af58327cadc77b35323bab81c9d970849b9c60bbc2b23d2734d7120e469f3e5775d90d7e7203c397b9764d685eac50480f94e7894ddfe678","ssdeep":"384:XIDN75sMaMtXCCn6wDXcZ66Qk13VYTRamKH1QDfnvDXQf3/eA65brGHMfVuf:XIDN5sMaMtXmwDXcZ73Vm0mKH1QDPvDq","tlshash":"fa9261fc27b029da9ec0c3d3bf15e5bc201781b764694508c7ac677d294ad5ea826bc2","first_seen":"2026-03-17T15:17:13.331127Z","last_seen":"2026-07-27T06:32:38.445965Z","times_seen":7,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/login/info","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:44.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"OPTIONS /login/info HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language,token,x-ca-nonce,x-ca-signature,x-ca-signature-method,x-ca-timestamp,x-request-show-loading,x-response-show-notify\r\nReferer: https://bitgets.cyou/\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=shV7HyQGg22RkLU4dvC%2FVsxIDmVhcokA3nKYXgFxo%2BMBPFNca%2F4a8Ek68whUTEeWnfBvu7zSYjcheliacfPFiXzVlCWxz2sVlv6awSJeT4kO%2Bw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ddcf5e2fc5db27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":88,"dns":58,"connect":9,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/AppAdvantageBox-tzM3HKho.css","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:45.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/AppAdvantageBox-tzM3HKho.css HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6741a29e-66d\"\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3QDmfaUqEf7cw9%2FE5aCETFp3vzE82wPu2l2SvrxtjdN4A4j4oA%2BlIEfzggM25UumocBuONxqfhJwnGN%2FhqmIG4913x%2FKed3K%2BsBT5A%3D%3D\"}]}\r\ncf-ray: 9ddcf5e7ebeb1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1645,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1644)","md5":"8553b48b6aafacbc995e57228192ac93","sha1":"d03ff9c5e3307a7161264052ea97553b67ca8e12","sha256":"6c94b283a20834cea7b2c207c103b981a0db989154ae0b724990a6c78fa4f656","sha512":"e69be955d535ba48a5136add7a73dc7e60ae66fc3f909eca030fd7b93f935823a1222e2a3c93144e451934c86fa3da082a961d92f342fd12b5e37fb1cce9c00b","ssdeep":"","tlshash":"d131c071300a112c7d37d5d258b19e9b7244fb03ab5a8169dd22a636cd9f5833e70a9c","first_seen":"2026-03-17T15:17:13.332917Z","last_seen":"2026-07-27T06:32:38.430174Z","times_seen":7,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/icon-lYXNp7dh.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:45.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/icon-lYXNp7dh.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitgets.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=12rt8HxmR2Img41kMJBhbWapvCWlotxddEQAsJn2VvbBbkzGO8u6puGjO9%2FV0tPK%2Bry0li%2FO6hNpFTxG%2BCHYMikYXZbI5LwKAlQGZQ%3D%3D\"}]}\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6741a29e-1e9\"\r\ncf-ray: 9ddcf5e7fbf61ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":489,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (488)","md5":"2d31bd55feb68bc1f4153f6c35f8d451","sha1":"b27f235dcedd7149127e8ac53372a8e6b866e802","sha256":"f099080d3a1624e5f53056ee901bb52b26af23e5c62885ed3350e143d534173d","sha512":"bd75a6059c1c24285bc6c0198d96dee1750e3f8d5f0bf4d19226c7e659a4e142d740821a969e001ba00a56f431ab9198ef01db4893b54e3b6e750d84e3314fbe","ssdeep":"","tlshash":"8af027ccf9401194c83c12622f269f1f3403f290ef9a38a32916a34890ec11ea97b45e","first_seen":"2025-03-01T05:35:43.203373Z","last_seen":"2026-07-27T06:32:38.444396Z","times_seen":8,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfMZg.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:47.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfMZg.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 158096\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 14:51:59 GMT\r\nexpires: Fri, 12 Mar 2027 14:51:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 433488\r\nlast-modified: Mon, 29 Jul 2024 22:45:36 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":324820,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409","md5":"a32ace5dba8400232b84bc017dcc38ef","sha1":"78eae8a823f461192b4df2d67d7eaa818cf09b5a","sha256":"1b08e7fc267a5c7e1d614100f604b83e7e8a0be241f0f288faa2b3ac93a683ba","sha512":"7885b898af0ce9b260017dfa483ef7641bdab7383421f51fe7215840eeb9c0a0eed9a8ce28f1f1c88590ffd6a76deedfc37e106ee1e1094af7404966fe41d251","ssdeep":"6144:Jxe0kGmW8XF53q+DREk6wPtE+nr1kfmq+HpvaQCRa14UYE0o:/e0kGmW0FGkZdkCvyR+0o","tlshash":"98645b27e723935ddb452d35cfa2c3a43775bca1bc57a20b70aa3a94c88b1b45dc48e4","first_seen":"2024-08-15T00:58:33Z","last_seen":"2026-08-09T20:27:06.803687Z","times_seen":1305,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":127,"dns":0,"connect":20,"send":0,"wait":9,"receive":6,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/index/getConfigValue","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:48.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"OPTIONS /index/getConfigValue HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,content-type,language,token,x-ca-nonce,x-ca-signature,x-ca-signature-method,x-ca-timestamp\r\nReferer: https://bitgets.cyou/\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQavnCFduT%2B%2FGeEYDfG6cPYpf%2FgrSsTcDDeLK02wRc4JnQmajpx3dWNAZpb%2BGLA9zUHb0kAJTZ5tAYjPlMtCLGSPcPT4lOnt%2BME%2FCq7mFS8bxw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf5fb58b235cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/Home-JaR2e-XQ.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:45.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/Home-JaR2e-XQ.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitgets.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-13ad8\"\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c9oez1RizhmwWfuiMElLM%2FpNr%2FTt9WeUJOx%2FZmzsa58sN%2BHZZ5qVRF7e6jnBmCro6Blxh9Ii3pG6XCcYOe7TU0A9%2B4lzUH%2Fm4fwluA%3D%3D\"}]}\r\ncf-ray: 9ddcf5e7ebf11ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80600,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"ca5bf3c579e87e9b68b9a8da84e1e96c","sha1":"a7695125e2c98e4bbc8c86df185875bd25f00430","sha256":"b6d221546a4922428a451a655ca6249e3c16ea09eeaa67026f596e0c09a3d459","sha512":"c63a75d9182fa3887616c562ce1ade21f899f823c52354030de1aada17299077cd23da4827fa20070b8e0557ec13920ad49e5bc6284f42644006a9c2f187df87","ssdeep":"768:JXXF5mXzM2760NSNhyLlxOdi7KDQ01JwprdBx0Z2MV6wDhIpz2+u+AfbFZzyw8zs:8S4L3Ai7KDQ0vwhHx0Z2MV6uhgPWfozs","tlshash":"0d73d06b870e85fdaf1458c0d193580439e1e56b67a7ecaca7b7f62163b0ffb1428610","first_seen":"2025-03-01T05:35:43.208096Z","last_seen":"2026-07-27T06:32:38.434234Z","times_seen":8,"resource_available":true,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":247,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/index/getConfigValue","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"GET /index/getConfigValue HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nToken: \r\nAuthorization: Bearer\r\nLanguage: en-US\r\nX-Ca-Signature: \r\nX-Ca-Signature-Method: md5\r\nX-Ca-Timestamp: 1773760607300\r\nX-Ca-Nonce: 0.9769143300674734\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://bitgets.cyou\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With\r\naccess-control-max-age: 1800\r\nset-cookie: PHPSESSID=650a0529fff3514637cdbf3997390ef6; expires=Tue, 17-Mar-2026 15:40:49 GMT; Max-Age=1440; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjlOOaTSenuxZfZe64XS46VINdWuJej9dzWjKe0s6s4SsJZc05Mvl5%2FE5RO8TPD%2B0tfg7bi9%2FzjqkXxKNZmKifo4aqqC2g7LWQ%2FJAygXYLrB1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf5fe892835cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":63,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c8e5c578d906e7dd2f81002dd1e2cf4","sha1":"cb59c9e9af0bd35a3d447329db9a551820a2d53d","sha256":"69599c9d14409d3b47365ceef5eb41292aaf0c9aef5f56f6a8e37715b3b95335","sha512":"49282318ea3cfdf3fba75610455144eb01eb3ea6e5c462cc741aa88cd8679e8ead447d5a981af9588e15b0c2750df3026ec3a28cd72bf4a5fa948bf4e16b8d76","ssdeep":"","tlshash":"a0a0021d260914472a122394911c2a18579d10936a515739d89e5738e9f54e47292459","first_seen":"2026-03-17T15:17:13.328568Z","last_seen":"2026-07-27T06:32:38.427031Z","times_seen":7,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/index/getConfigValue","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"GET /index/getConfigValue HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nToken: \r\nAuthorization: Bearer\r\nLanguage: en-US\r\nX-Ca-Signature: \r\nX-Ca-Signature-Method: md5\r\nX-Ca-Timestamp: 1773760607301\r\nX-Ca-Nonce: 0.8333396108059882\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://bitgets.cyou\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With\r\naccess-control-max-age: 1800\r\nset-cookie: PHPSESSID=1ffde7e64c9d437bd58d0340b1356256; expires=Tue, 17-Mar-2026 15:40:49 GMT; Max-Age=1440; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dkEX7tF4t2uomPOm%2BxKGZj6SwMqiXUIRvNh9W2Xf3KsZMEJbg3TId3VAsNpnayFTCjiGQqvHHJxkf1q5pHK2SMMB8sNFpv7StijTl8JwIFNTbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf5fea92c35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":63,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c8e5c578d906e7dd2f81002dd1e2cf4","sha1":"cb59c9e9af0bd35a3d447329db9a551820a2d53d","sha256":"69599c9d14409d3b47365ceef5eb41292aaf0c9aef5f56f6a8e37715b3b95335","sha512":"49282318ea3cfdf3fba75610455144eb01eb3ea6e5c462cc741aa88cd8679e8ead447d5a981af9588e15b0c2750df3026ec3a28cd72bf4a5fa948bf4e16b8d76","ssdeep":"","tlshash":"a0a0021d260914472a122394911c2a18579d10936a515739d89e5738e9f54e47292459","first_seen":"2026-03-17T15:17:13.328568Z","last_seen":"2026-07-27T06:32:38.427031Z","times_seen":7,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/login/info","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"OPTIONS /login/info HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language,token,x-ca-nonce,x-ca-signature,x-ca-signature-method,x-ca-timestamp,x-request-show-loading,x-response-show-notify\r\nReferer: https://bitgets.cyou/\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d83YD7BSELH%2FrYOczo7mcNIkzG%2B9om0KgcnlW6PiSfigrpLpPs8tjNxZn%2FWdwAJdL4mQKOmcpv5wGzxS851ugcE7kb%2FJ1pjbW1e0iN2qKrpfSQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf5fef93f35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/login/info","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"OPTIONS /login/info HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language,token,x-ca-nonce,x-ca-signature,x-ca-signature-method,x-ca-timestamp,x-request-show-loading,x-response-show-notify\r\nReferer: https://bitgets.cyou/\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u7TI6We48zlzmRGi9GPbW24XfKNsycyyOMXeqNcP3z4bCZFJWU6gNFo6K4pO7WlHlbjt%2BppHh%2BNMrOQq3CDn6TC6zwzJ96eoBck1%2FaMJxb%2B%2FNA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf600c96735cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/AppHeadProfile-Jl7pzMH5.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:45.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/AppHeadProfile-Jl7pzMH5.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitgets.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-9ac\"\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XQvTXJPTPwu%2FtmfbXjWYLRCIDgHoKfwbI1PeR4PN8NqDS%2B6VfY8HxTOooiMmadySQT6ENehQ7oPetHrMxbRx77o9iiEcrnmjV5EXwA%3D%3D\"}]}\r\ncf-ray: 9ddcf5e7ebf31ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2476,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2475)","md5":"cadde6903929b8f45bd9d24cb18a822d","sha1":"6a665c2c9bf3c75820073552269636a270b0b7b3","sha256":"4c81edcfe684695fafacb3f00b58dac0346ce53cf2a3e3366ed5a7db173177f2","sha512":"6205a103f149e88780f52f77f4f43943736363a4ad6885a04e67a489ddf1e57e6c981cba868694e06eb71400cddfeb605471c2008f9f05a552dedb1b1d480bac","ssdeep":"","tlshash":"2e516348f9466d78d7730888a0514824ab4c3fe5e1388cd6d0bcde5787f5db4dd66031","first_seen":"2025-03-01T05:35:43.242803Z","last_seen":"2026-07-27T06:32:38.426058Z","times_seen":8,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYMZg.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:47.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYMZg.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 162614\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 19:53:28 GMT\r\nexpires: Tue, 16 Mar 2027 19:53:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 29 Jul 2024 22:45:37 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nage: 69799\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":326048,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"84cf795ee940a39423fbee3dad4017c1","sha1":"1048573ec372a0c4a60bd3d5b3ab3b82bc3973da","sha256":"e7a1aaf7eda9f2fad4131725fa556265ec75ca7b2d756260173a040363e8d4f7","sha512":"e276355be5d939caa93c6417048240550d47bf9b5375e54955e9855acf1647a36b1ecf9084a0817be92cfa8266f3b32d229691f467f838575bc2a904a14efb4b","ssdeep":"6144:Eb9pkGmW8XFh3q+D2aLMs9lE+nr1kPLN5W6+8/WYJ0Km/ZpDfik:EkGmW0FyaLfdkPLm6+8u3ik","tlshash":"23645b2bf723d35dd7052c39cab2c7a437757ca1bc46a10bb0aa3a95cd9b0b019d49e4","first_seen":"2024-08-15T00:58:32Z","last_seen":"2026-08-09T20:27:06.773024Z","times_seen":868,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/index/getProductData","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:48.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"OPTIONS /index/getProductData HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,content-type,language,token,x-ca-nonce,x-ca-signature,x-ca-signature-method,x-ca-timestamp\r\nReferer: https://bitgets.cyou/\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rURKxWu5AqNUVDJPjFFmF21naI5OCkA%2FbDdzYd9%2BLjFEpwOEMUpe4nK%2BH7WF1E4zJRdtglu%2F%2BZfOQEDZ0pm%2Fg6Qkje2MjqrYEtEftsdZsa5Hjw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ddcf5fb4e8db27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/index/getConfigValue","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:48.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"OPTIONS /index/getConfigValue HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,content-type,language,token,x-ca-nonce,x-ca-signature,x-ca-signature-method,x-ca-timestamp\r\nReferer: https://bitgets.cyou/\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjzJdtbd6gNd%2BzQlcjjwNW8ZVgav3nDx4n9CCbpdVhTL2hju4s%2BWfL0Qe2HPTQbnc6SrfbDf%2FnpENASLqrVSJasI9i9QGRnNFRtgfA%2BQuBl1VQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ddcf5fb5ebdb27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/loading-hgmZDpjw.svg","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:48.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/loading-hgmZDpjw.svg HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/assets/index-OsHIMrMM.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6741a29e-15c2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mcQdxi6owdh4EvVJHDnjKNORVDmJCJ7gQlOLlPGg8Ff%2FuGRyj254cyxASIRe5URQDuboHu2a8t00qeJ%2FNqW85oaiyPqXGgFWN3FV5g%3D%3D\"}]}\r\ncf-ray: 9ddcf5fb6eeb1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5570,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb35b7b52b7b3a07d12a8d59ae7566c2","sha1":"9b7ec52f00890748156052e21f3357e179955c73","sha256":"41723f2363bcb82407764e71cd304c68b4eb3234b0d21e1753df57804fe56bf5","sha512":"06f0bb9bc8b60ea163f945eec317d5d92261f849ab809deab94ea88635e0cc8f8a525148285f9b415434b2a4ed9ec6f05ba19fa28ce65c317646c6720420f69e","ssdeep":"96:nn2qyK8sRWbPm+wbAsEnL8P6dP86sfvLLL1bN/AVDEA1uy:2qybsRdJEwydPGfjn1bmEby","tlshash":"afb123dd27201ef4ff86e3eefb2204d5794ea47e79e20514ca48af093096058d9a5c97","first_seen":"2026-03-17T15:17:13.335584Z","last_seen":"2026-07-27T06:32:38.44519Z","times_seen":7,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/login/info","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"OPTIONS /login/info HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language,token,x-ca-nonce,x-ca-signature,x-ca-signature-method,x-ca-timestamp,x-request-show-loading,x-response-show-notify\r\nReferer: https://bitgets.cyou/\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dZK%2Bf4rcInBtXmPwHrItFs6ok5Ju%2FYS2X9eBrEzJ6SbtRE1hHOxtvzXWcYTPHLRMIEb0BGSK%2FxkCSFgOefJgFFYF877E%2BUq6frtK%2FrizUqI%2BGg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf600896135cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/AppAdvantageBox-TZOgZB7j.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:46.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/AppAdvantageBox-TZOgZB7j.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/assets/Home-JaR2e-XQ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-13fd\"\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F6MHwAYds4rpD2X918oidvFDsHyp3bWLvogp9qZnxY9Zl%2BTfi1w0mxd0VTp44DbWRThyV4WKi3ntUPBf67WTVnmTCjwGBoUh8UdV4g%3D%3D\"}]}\r\ncf-ray: 9ddcf5ecccdd1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5117,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5116)","md5":"878e2cb77e08af4ecad07256e7a8de60","sha1":"3ad0833ab38eaad66646c37728b3d528da7d5614","sha256":"64951042a7e8f263e31b103f3003e63425bcea00f792ea456a5f846f0150d89a","sha512":"dff9f21d1bf9eab52a1ca184d03f2d111d5f9043125b2a656927c46db3873af0d96359832ff7119b82452a61c2b89f8b1170ee9ebcaa75996d4327d1b9ec6374","ssdeep":"96:IrAMrcXah78hIrgJAJ8JO6JziJ8eJXEAGTUbptS5AAuuzUtrM:IRrcXIghI8JAJ8JnJziJ8eJ0AGTUbbmX","tlshash":"63b1638ceacb89baf53eca5f9a003d09903097dbef974441e2e51b245768571572e0f8","first_seen":"2025-03-01T05:35:43.230713Z","last_seen":"2026-07-27T06:32:38.442068Z","times_seen":8,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/banner-DoyH27Yk.svg","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:46.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/banner-DoyH27Yk.svg HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6741a29e-3499f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4A4JhbWDgcwaI%2F93lrWjSG1rXbDGilKE%2BixP0Tg9WxozhtPEXeJci0UgH0qdnZqK5WX9ZeIwJpImDsRQQr7BVgTr7jJT%2FEsFkEEVg%3D%3D\"}]}\r\ncf-ray: 9ddcf5f12d921ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215455,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"12786308ab803a5772b5b8e0ab57513c","sha1":"f8b39506d6eb389458b48d2c8b8b8d38aa109508","sha256":"144789767e14be58a67168c1cdab5dc62b0cdcda2da0f117989553c30dcc12ae","sha512":"de6d46a261a94f68c6e07f881e464047f6106e80b873fc4abc2a4f7250ad6b888b6b2571c1d96a7a8c74a2efabd9befb64bd6838a847c784d3c20bdd1e90147c","ssdeep":"1536:0yZrcUDVn1rjT3d3ERY+ikLElSkXvOr48uF2hctHNQsptn92Qx2G/G2IjS1xW+kY:nD","tlshash":"1924a6ee6f644af0e986d3e7ee1244b9361b94fedb818b70c3586e06344346cdc59d82","first_seen":"2025-03-01T05:35:43.160313Z","last_seen":"2026-07-27T06:32:38.433462Z","times_seen":8,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":519,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/index/getProductData","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"GET /index/getProductData HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nToken: \r\nAuthorization: Bearer\r\nLanguage: en-US\r\nX-Ca-Signature: \r\nX-Ca-Signature-Method: md5\r\nX-Ca-Timestamp: 1773760607300\r\nX-Ca-Nonce: 0.6898243557196799\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://bitgets.cyou\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With\r\naccess-control-max-age: 1800\r\nset-cookie: PHPSESSID=7ccfd0ba40cb66098c7747c08b75583a; expires=Tue, 17-Mar-2026 15:40:49 GMT; Max-Age=1440; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JkkeDar0q9bUZi%2BmQS%2Bvo8mV9nwSIBBhSYWAdXRHCQVqoHRUs9d9BeWZiRc0At3q75ZgRZMRRtsaNWNPyHnhk13OubUAByi5OEi0FhVxcbda3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf5fe892035cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c8e5c578d906e7dd2f81002dd1e2cf4","sha1":"cb59c9e9af0bd35a3d447329db9a551820a2d53d","sha256":"69599c9d14409d3b47365ceef5eb41292aaf0c9aef5f56f6a8e37715b3b95335","sha512":"49282318ea3cfdf3fba75610455144eb01eb3ea6e5c462cc741aa88cd8679e8ead447d5a981af9588e15b0c2750df3026ec3a28cd72bf4a5fa948bf4e16b8d76","ssdeep":"","tlshash":"a0a0021d260914472a122394911c2a18579d10936a515739d89e5738e9f54e47292459","first_seen":"2026-03-17T15:17:13.328568Z","last_seen":"2026-07-27T06:32:38.427031Z","times_seen":7,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/index/getConfigValue","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"GET /index/getConfigValue HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nToken: \r\nAuthorization: Bearer\r\nLanguage: en-US\r\nX-Ca-Signature: \r\nX-Ca-Signature-Method: md5\r\nX-Ca-Timestamp: 1773760607300\r\nX-Ca-Nonce: 0.17938973074080178\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://bitgets.cyou\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With\r\naccess-control-max-age: 1800\r\nset-cookie: PHPSESSID=ffb63dcde118940527c8ded54f9f1f98; expires=Tue, 17-Mar-2026 15:40:49 GMT; Max-Age=1440; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bkxl5yZ42AzHc59I8a2rwbEsWutZ4%2FyJq%2B2AaIXAvQINDhdIwHr5iaSgAl2IMW4CD%2F7zAZD5xaPPMakcwxA5NEq6xTi00XwooF4CiFaSqUIfjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf5fea92b35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":63,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c8e5c578d906e7dd2f81002dd1e2cf4","sha1":"cb59c9e9af0bd35a3d447329db9a551820a2d53d","sha256":"69599c9d14409d3b47365ceef5eb41292aaf0c9aef5f56f6a8e37715b3b95335","sha512":"49282318ea3cfdf3fba75610455144eb01eb3ea6e5c462cc741aa88cd8679e8ead447d5a981af9588e15b0c2750df3026ec3a28cd72bf4a5fa948bf4e16b8d76","ssdeep":"","tlshash":"a0a0021d260914472a122394911c2a18579d10936a515739d89e5738e9f54e47292459","first_seen":"2026-03-17T15:17:13.328568Z","last_seen":"2026-07-27T06:32:38.427031Z","times_seen":7,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/login/info","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"GET /login/info HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-request-show-loading: 0\r\nx-response-show-notify: 0\r\nToken: \r\nAuthorization: Bearer\r\nLanguage: en-US\r\nX-Ca-Signature: \r\nX-Ca-Signature-Method: md5\r\nX-Ca-Timestamp: 1773760609092\r\nX-Ca-Nonce: 0.48680582651325865\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://bitgets.cyou\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With\r\naccess-control-max-age: 1800\r\nset-cookie: PHPSESSID=00e90119b500595133f2c3a8269e7e2b; expires=Tue, 17-Mar-2026 15:40:49 GMT; Max-Age=1440; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbMS67AjIOqTVMnv88oKnaZeK36vtPbBXLs2pxygIs8VztcHe%2BKOaOC3DJYNCMh7duG0KyT9iRwtc1QKW9KF120WeAmJgPj5GrrYXXwO3A6lmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf600a96535cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"98f1a11ee98933a0a60bdce6d9dc21e7","sha1":"83f32d01cf1fa7fcaf7c66eac9d5e25e96fec8f0","sha256":"f676a2b8aa19a17079e58899095f44271759c1f5eeac1467bc2909643eb16ffd","sha512":"226d74b0ba8422708e599b35777c08c3d55a29a694a9d4c951b4ef8bb5a0a67d59cf6441bc843a4f7f2d0f2eb7fbe6421fc6e9b100b4faf40aed0dada2c8fcbb","ssdeep":"","tlshash":"cba002221d0c8893f80235c425ae5f0065fd3552d7581214dc9c5a38cb181a5b19795f","first_seen":"2026-03-17T15:17:13.298787Z","last_seen":"2026-07-27T06:32:38.420384Z","times_seen":7,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T15:16:41.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 15:16:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PT6C4fsPm8UOAGZeGImz0dKdcq1ESNF%2BgMsBdAj9NUxi55ko%2FUl9BgqVM931rn%2BzxGbAw9FF%2FbqXTQ8A0Qk0EFGGfGr5KiR7rhz1yg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ddcf5cedaa4bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":544,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"c3f9315d9dc0bb9aa9ff3f7c9030e28a","sha1":"dbdd2837f8ff59fa8168e343bb714cbd5c8eebf1","sha256":"a0a2d8303c800825eeb8b2d7d47c10398fff72fab1d69f1a357a263cdb93b98b","sha512":"974f78b64d9570ce6746fa3dea1273e6dd395c17c7cf5ce66cd0b1e2f71a2e48d345e081f897f8109b324ddd54795dabe35825b0f4b76d91c46d9dd4cd15722a","ssdeep":"","tlshash":"95f0c08258c08c05033047259dd2f10ce953d793474a9d0279de603b0fa1b91cedf4f4","first_seen":"2026-03-17T15:17:13.338254Z","last_seen":"2026-07-27T06:32:38.418105Z","times_seen":7,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":82,"dns":56,"connect":8,"send":0,"wait":521,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/login/info","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"OPTIONS /login/info HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language,token,x-ca-nonce,x-ca-signature,x-ca-signature-method,x-ca-timestamp,x-request-show-loading,x-response-show-notify\r\nReferer: https://bitgets.cyou/\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kbh5c0hI03T6FiGI6X9IAEExKOsx5cINGTPJEX5WafFGu9paSZu7hnWcOa693RkLewMY6WkjyHw2Ql%2FEIlsl%2FyDxU7uHEq8VIYxlUzbc8yYsVQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf600e96835cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/vite.svg","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:43.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /vite.svg HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 23 Nov 2024 09:38:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: \"6741a29d-5d9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2eoU8M5oUrRZ55ogJ9bN0wWwl097zAHS8545UaMZ96jLWGH8Ju20AFgSo5VQekvVIk0OBOhwc2qF%2Fd3PZgxzsEwUfRofGKrW3J3yUA%3D%3D\"}]}\r\ncf-ray: 9ddcf5ddca911ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e3a10e157f75ada21ab742c022d5430","sha1":"f7f39d7237b791a945d52a5cd7a8fb365f313366","sha256":"4a748afd443918bb16591c834c401dae33e87861ab5dbad0811c3a3b4a9214fb","sha512":"fbf065e26d907454cb432a17d831f448e1c3df0f33cd681ccc52b63e5bc26bc9e4de08591a2de579e5b05219fcffd3b4d4261ada6fa55299e731343df860488d","ssdeep":"","tlshash":"2031451fda7fd4fec0a6cb48e612b047962c30d95e41c5b4d9845f0e64a19f17c0aa64","first_seen":"2023-05-18T16:20:30Z","last_seen":"2026-08-09T19:31:11.444036Z","times_seen":6393,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/Graph1-lrYCxYhY.css","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:45.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/Graph1-lrYCxYhY.css HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZsPX0dKk0hJmllZwfeR7iSDpO5rRXKRjEQ4PbdngHeL18RQS3z84AT0l6y1utONds0PLsY9s2MM63XopLGqgMMy%2FnnW79GKPdjL4A%3D%3D\"}]}\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6741a29e-be\"\r\ncf-ray: 9ddcf5e7ebef1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f1da9f11836c58c6cdf8ab3a56cc9782","sha1":"b336ca177c8abb4af3c5035d4cad6f5c1a1a9976","sha256":"6bd2636d9cb7e5adbbf2328adbf5dbf284d03c1bc4ef9ee22ec42beae5a7a981","sha512":"0dcf13d7f58a0c3ed4b9ce9d86e836d3af353a3ad191bc63b3b55425d8da9df84f71e7a3bff013f66b84c0b22e69d51ca1e8ff6c43bf69f55d596c2e3cf03811","ssdeep":"","tlshash":"b2c012b7d542322d78b79c2b8b82c8893331b01e770929e29a40143d175934c3522dcc","first_seen":"2026-03-17T15:17:13.34013Z","last_seen":"2026-07-27T06:32:38.443573Z","times_seen":7,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/graph-2onBtVvV.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:45.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/graph-2onBtVvV.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitgets.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3AdtIjAIEVpP9Si5GbrUmg993JJI8b5hhEdxmXa3acH5EbgIhs9iihC352acMVn%2FLEDJd8Po%2BNccBc5UCn0kAw%2BkR%2BEGKz5TqWDm8Q%3D%3D\"}]}\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6741a29e-4e\"\r\ncf-ray: 9ddcf5e7fbf91ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"08ba14c7b4316a62a0e8ca3695556400","sha1":"ace9aae3626618c7981577f7dfcd3f14dbfc652e","sha256":"3c2c59fd797c74c9c79901547d8f433201cfadff485ee1dca4de661c427aea32","sha512":"b31664b3cdc04dbb4e2609849cee9289895a636f8a2ef778f910aa4d296fbbd0bec7edcd388a2c9446b16787d57e2067cce09ee9ac9c9fb597bca3d7fcc5cc1a","ssdeep":"","tlshash":"d1a0240304cc05fc4770003c0740551015df047c1d7d03575c4d0774070d5554d05501","first_seen":"2025-03-01T05:35:43.139014Z","last_seen":"2026-07-27T06:32:38.440491Z","times_seen":8,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/graph-6IgaK2AV.svg","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:46.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/graph-6IgaK2AV.svg HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6741a29e-1024\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMMDKFetPQkKxiqgvqf%2Fmv%2BS1gTMuG0r%2Bpbf%2Bj%2B8KT3TeSNwO%2F3hiFTbrOLQjiHhzobHMDNH0o6sX3FpStQdW1ydpHIbAnp3z5%2FTrw%3D%3D\"}]}\r\ncf-ray: 9ddcf5f19d9b1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4132,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4db16a7a55a808377b94140ccebc9c2","sha1":"745403bf0dc939e17731cba4176d5f5cb1e04301","sha256":"f4413bc2a1c23c497e89bbccdb2d405a580291fcc7f911711d78f81ee37b7b64","sha512":"7dc98acd33178c55baad845787dae5669921354c02aab32f221367b5eca075ab518949e079df4cbfdd5daa2496e0185936bd8aa1388bb946107e5c847d6f44df","ssdeep":"96:XKLrJP2vbmIMBpBQ3oPlhcY9SCmbL6tazBlM:ErJuaRmYthcYICanzw","tlshash":"d781d9de5bb5abf5dc84d1faef000454651b84e2bad38530c0659f0e78aac69e80dc81","first_seen":"2026-03-17T15:17:13.342674Z","last_seen":"2026-07-27T06:32:38.441248Z","times_seen":7,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/ConnectWallet-jzz4neVo.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:48.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/ConnectWallet-jzz4neVo.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitgets.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-113d\"\r\nexpires: Wed, 18 Mar 2026 03:16:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=duLh45bS1Kxw2NcW%2BRIaMo42%2BlsC5mI%2Ft6sZ%2FopbgMAl1CrdFxVE1acR5RWkDfLRqOI1s0CfW9eSnZkHREsf8JtAcL%2FZZro0BxslFA%3D%3D\"}]}\r\ncf-ray: 9ddcf5fb5ee91ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4413,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4412)","md5":"2cf4aa90fd4c36522493786dc6c6e889","sha1":"3558239776a59b21d4a0463f3fc4dfc0014bd695","sha256":"f064383b06c255771d32d58f089b72003835c2dd683196761922c34084e564b9","sha512":"bdc9f23a9dbfa71abd02b97b487c3d729c8c55c391151da0ea784f8777ee32481514494812471a6e56fee1f15b23c6ad6e56ce20925000cc8332bb03720be9bf","ssdeep":"96:mX1CNhL7mtEn2i451/sWcfoNrNifJFfe5Kdr6p12X2nK2WX6bXb:01CNhXBn2D1/TNifJFf2KINb","tlshash":"669197fd08407ad8713bca1248113a15f03736beef3d8e02a1d69a35aaf546465fc375","first_seen":"2025-03-01T05:35:43.24609Z","last_seen":"2026-07-27T06:32:38.436496Z","times_seen":8,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/login/info","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"OPTIONS /login/info HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,language,token,x-ca-nonce,x-ca-signature,x-ca-signature-method,x-ca-timestamp,x-request-show-loading,x-response-show-notify\r\nReferer: https://bitgets.cyou/\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iMuCSMoGnByqctFD85hl7LkuCJdY49U3CuosiGNt7fT8EkgcVYudnMkjabRAK96V5UsYNDUrxNDffFDM9fKSB3s7KZH%2BuXGTmRNVHFj8ClHOPg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf600695d35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bitgetlink.sbs/login/info","fqdn":"api.bitgetlink.sbs","domain":"bitgetlink.sbs","tld":"sbs"},"ip":{"addr":"104.21.26.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:49.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgetlink.sbs","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 10:23:20 GMT","end":"Wed, 27 May 2026 10:23:19 GMT"},"fingerprint":{"sha1":"F7:3B:11:B1:FE:BB:75:39:D4:EE:E8:42:03:3A:44:7A:9A:C2:95:23","sha256":"C2:9B:55:96:F5:59:2A:4F:51:C1:76:09:B0:A4:7C:0B:39:E1:77:32:FA:36:BE:C6:C8:9E:35:08:24:48:C5:B6"}}},"request":{"raw":"GET /login/info HTTP/1.1\r\nHost: api.bitgetlink.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-request-show-loading: 0\r\nx-response-show-notify: 0\r\nToken: \r\nAuthorization: Bearer\r\nLanguage: en-US\r\nX-Ca-Signature: \r\nX-Ca-Signature-Method: md5\r\nX-Ca-Timestamp: 1773760609387\r\nX-Ca-Nonce: 0.6655794917451661\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://bitgets.cyou\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With\r\naccess-control-max-age: 1800\r\nset-cookie: PHPSESSID=0062687c9b32bae9c5b421938360e3c3; expires=Tue, 17-Mar-2026 15:40:49 GMT; Max-Age=1440; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5RxhdJmCdWbRhv%2F9Qq%2BymCpwLfggaFKLHtsgkYbLDO75dO9MOSHo%2F9pU5VHrjURoVMuuR1GIATXNs0SeYgbpYlaPdvSFVL3cA4aysQJ%2F%2FXsTPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddcf602799735cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"98f1a11ee98933a0a60bdce6d9dc21e7","sha1":"83f32d01cf1fa7fcaf7c66eac9d5e25e96fec8f0","sha256":"f676a2b8aa19a17079e58899095f44271759c1f5eeac1467bc2909643eb16ffd","sha512":"226d74b0ba8422708e599b35777c08c3d55a29a694a9d4c951b4ef8bb5a0a67d59cf6441bc843a4f7f2d0f2eb7fbe6421fc6e9b100b4faf40aed0dada2c8fcbb","ssdeep":"","tlshash":"cba002221d0c8893f80235c425ae5f0065fd3552d7581214dc9c5a38cb181a5b19795f","first_seen":"2026-03-17T15:17:13.298787Z","last_seen":"2026-07-27T06:32:38.420384Z","times_seen":7,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/Graph1-NN3oHkeM.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:45.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/Graph1-NN3oHkeM.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitgets.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-8eda6\"\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxEJuc9ksVfu7QO5sxaAD6%2Fh8C25o5Ry3YvAP%2BKxFz52ONR%2BdT8V6Xt%2B%2FYocJusM9uPI%2Fy3snh4onk1tnAvBGOwj6ziHW7fyX1yT3Q%3D%3D\"}]}\r\ncf-ray: 9ddcf5e7fbf71ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585126,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54991)","md5":"9787502b2e07674745cd53c692ec5257","sha1":"6709cc5b41067133cb839d0e7fe2c59c0e05f647","sha256":"014b2ce1ae7eec27f3fbc8a28bbd68c62e4cd27ad9fdaf385e988c8fd4037145","sha512":"9205edef83bb88be9259d8ae420989665100cb48b1e0e5dab70a98cd364aa15eaae36f8224fc7e73f67e8e8a6b860e55847ad2c9dc1c5b69b3b6e40b04c1e76b","ssdeep":"6144:r7b7OYFZUXeT5JgaGOu0i1Mg2J/of7VvA4KrtoIoDqntxgz7lKV0bx3LMYx0Z:XnOYFeaGZ0iDVo41TqntcpJbGai","tlshash":"f7c409e87254746183a770b004bf050f933a691da84e85a8fa59e0de2cfd44e667bf7c","first_seen":"2025-03-01T05:35:43.190155Z","last_seen":"2026-07-27T06:32:38.421758Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":753,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/ConnectWallet-eY01wuGp.css","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:48.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/ConnectWallet-eY01wuGp.css HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6741a29e-7d2\"\r\nexpires: Wed, 18 Mar 2026 03:16:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hh1%2BRw5MFPSIe81kO0zsmH7tFR5FJ5AA8bjpYR%2BhXoSVOiq0e9U4VzEvuXHcDK9vX2i9omZxZ9%2Fbdv7ryH8HqtLuHueqmXEtTpY6qA%3D%3D\"}]}\r\ncf-ray: 9ddcf5fb5ee81ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2002,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2001)","md5":"46f79940574a13b15f29d29a3faa0a2f","sha1":"b2a444c00e32ce9c10cf0e9ffd95ec87110690fa","sha256":"84d062d91d10d1cf0d0999181a21ad4036dccba66f342203f5a1fd55c030f2b8","sha512":"172341943446ec1ab2e979af9507c0f84f30bd0a0c89ee749153308ff1343b9d14e71a15f93404a25434d98ac2a8f052265dfec42fc271154b4f9fa73f171c18","ssdeep":"","tlshash":"ad41af562f0ae205a1b3da0b648001f47520ab23c6a3d5fa4fc19635dfdb1933ad1b9b","first_seen":"2026-03-17T15:17:13.34397Z","last_seen":"2026-07-27T06:32:38.43108Z","times_seen":7,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/AppHeadProfile-ztdpR6-7.css","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:45.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/AppHeadProfile-ztdpR6-7.css HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-925\"\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aumQF98lDsYU34AsUYTaQtBdntg997OfwrqJBCyHMqfPbTRhq2XlQsyLDFEMrcWHnIfp9u9U20TMw53d4wzdqXq8nTed4%2Fmx3TR0Dg%3D%3D\"}]}\r\ncf-ray: 9ddcf5e7dbe91ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2341,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2340)","md5":"f750897908fa89821e6eec282d172afc","sha1":"a45aec55f8f869ee5218a61e6ef09443979c132c","sha256":"b06f0d4a7c2d2f077be8842348d3ecf2c4cbcf06c12d1be123ad193e2529a227","sha512":"0ee74412274f8452c122c0d6c44256000e7fb5ce1e75f36fdf5b19a9cd146f4739e4b727e27f4d301ff98f6b23f25a7104835427eaac9249b86c8f627fbe0a7d","ssdeep":"","tlshash":"f841d0a2394c211ef433ddf5d8710ae635beb113c163474d58b6267d8d8f9862bb6780","first_seen":"2026-03-17T15:17:13.345294Z","last_seen":"2026-07-27T06:32:38.431882Z","times_seen":7,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuI6fMZg.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:47.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuI6fMZg.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 161969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 06:01:09 GMT\r\nexpires: Mon, 15 Mar 2027 06:01:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 206138\r\nlast-modified: Mon, 29 Jul 2024 22:45:34 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":325304,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"eb0312411b133c48049ac630ab7f1fec","sha1":"78f01e4f13a7da5c283f4d0b5d36dc489eb5ab73","sha256":"8c883f63b2c4157d997319f2c8bc6995ed4357ef371940d31ca159004a4aae63","sha512":"d79527b4f0e7b43908d6ca69e104f9ec464023e9f5767f62decb532318f36a0a4b044cde66dd96a9f1eb0b2c4a1c82134dfc8d5c6f9b7ac1ef491454e63edf9b","ssdeep":"6144:LqBkGmW8XFE3q+DUe9MS3E+nr1kBCJWWUmQEEAwlokfVo7GiPKU3+OaT7Dfs:KkGmW0Fve9Rdk8WWU30KU0k","tlshash":"01646a27f723d35dd6462c38cbe2c3a033797ca1bc56a20b745a3a95ce9b1b419c45e4","first_seen":"2024-12-14T17:19:05.431584Z","last_seen":"2026-08-09T20:27:06.831676Z","times_seen":1177,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":58,"dns":0,"connect":7,"send":0,"wait":11,"receive":23,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/arrow-down-GBZF8giN.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:46.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/arrow-down-GBZF8giN.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/assets/Home-JaR2e-XQ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6741a29e-866\"\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VqE8y9t8z6GDPkcjaiKO7EWrhaFvGviw5DDZkJP1y2WE1PvnHnoG3XZ48ywcTXrGdtl9qSnxvsERpaVkjWKeqDNLUvH6wr%2BefZZ2Yg%3D%3D\"}]}\r\ncf-ray: 9ddcf5ecccdf1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2150,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2149)","md5":"bdc581f535f58d2217d6c46b45a5a507","sha1":"a700c3b81608366954f149fda1980d140b999487","sha256":"c6a62f8a8b0519e43f6f93ccee17266264dc1a0a69960deecb7ea9eaf5e488fb","sha512":"2a0f12fc0e78ab311947d3f865ab640e5423e2939b07b812e5f2bb0454255e0b55d625f97e061e9e0d0b80e3722f70e8180afce068440f93b08d83e974c2ddd8","ssdeep":"","tlshash":"5441d3fc894116cfe53cccdf7a227508a02257eaff552cc1d6e67614d0a64b516dd48c","first_seen":"2025-03-01T05:35:43.247674Z","last_seen":"2026-07-27T06:32:38.434974Z","times_seen":8,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuFuYMZg.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:47.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuFuYMZg.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bitgets.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 163032\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 17:51:39 GMT\r\nexpires: Fri, 12 Mar 2027 17:51:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 422708\r\nlast-modified: Mon, 29 Jul 2024 22:46:01 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":326464,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"e17b1812456640012b87db45d4aaaa31","sha1":"d56a1d25add604a532d2930d47e79a695882250e","sha256":"833022eeb4ac21bc1e7e2c5f1469c9fe77eb01f3efa398fe240a34ded214ef6f","sha512":"404108e5f33ba220d4b3a7a450c9e03606e0275eadee315440f18f5caa10e17b4a0bc95fbbce2b090fa228aa0c4ee87b03f9bcbf6532b6606f664bf7babef0ce","ssdeep":"6144:9LAT5MkGmW8XFu3q+DXiMD3E+nr1k/hEyjhuvFwlhk42KjOB:9/kGmW0Fyiodk/hEyjhWwlJiB","tlshash":"9b64491bf722935de6462c38cab2c7a437717ca1bd56e20b749b3ba4cd5b0b418c45e8","first_seen":"2024-08-15T00:58:32Z","last_seen":"2026-07-27T16:59:39.019079Z","times_seen":142,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":57,"dns":1,"connect":21,"send":0,"wait":22,"receive":6,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/Home-Rpjw0yyP.css","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:45.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/Home-Rpjw0yyP.css HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6741a29e-2ed5\"\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ubEvJVIbY6%2F8CSi5%2BfbVNIo1iy8XZ4w3ScZ%2BgK71552HJLJzwwQnpFtSys7yDX7ngkoqfxgxo8N0VcsM9vp0xrS23EG1dDZ7GXJ9Aw%3D%3D\"}]}\r\ncf-ray: 9ddcf5e7ebf01ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11989,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11988)","md5":"ddfdcd623ebb612ad50e7733d2ce92a2","sha1":"4972a220e2b84cefddbf4dbfab67a5b8c1a4d181","sha256":"09d7198dba17df5b1d17c2196678c2877cbed7423716b7cd52da26da83865a45","sha512":"0ea83ab515345e837795cebae26a7b5159991248558efd8bc6fbd737582e0392f0dcc04282aeba31f1f9bccbaab4451102cad9def80f29a6b49792771fe236e2","ssdeep":"96:1ZtAgt49++tJUpN36/BwJrfkR5DfhSn5tYvrQDMCitTU9RrtMbHmtVmZbXl:1Zh4g+HC/wfhQ5evrQ6T+STmtcZb1","tlshash":"3f3233b1321c6028b57fc477a41069c53029bb2ad3535a59da46b47e8df2bc32739be8","first_seen":"2025-03-01T05:35:43.178369Z","last_seen":"2026-07-27T06:32:38.442812Z","times_seen":8,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitgets.cyou/assets/graph-2onBtVvV.js","fqdn":"bitgets.cyou","domain":"bitgets.cyou","tld":"cyou"},"ip":{"addr":"104.21.39.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitgets.cyou/","date":"2026-03-17T15:16:46.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitgets.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:34:52 GMT","end":"Fri, 12 Jun 2026 19:34:51 GMT"},"fingerprint":{"sha1":"6D:A6:20:49:28:5A:FB:94:93:7C:0D:11:1E:B0:97:66:92:1D:63:E0","sha256":"40:F3:A4:F7:77:E8:F2:22:C2:24:22:60:35:67:43:87:D3:57:0F:D7:20:93:9A:9D:96:56:1B:FE:C9:FC:D0:1F"}}},"request":{"raw":"GET /assets/graph-2onBtVvV.js HTTP/1.1\r\nHost: bitgets.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitgets.cyou/assets/Home-JaR2e-XQ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 15:16:46 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DEzXs2UJafz%2FSFQCcSzna31TDZZXHSe%2Ba6om79DI6q9ntnBs%2Fk0vxylhj8kPk%2FyOoO4IuCQUjxxOwHFWK2sL%2BjBPYu6ZMdrsx0lkgg%3D%3D\"}]}\r\nlast-modified: Sat, 23 Nov 2024 09:38:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 03:16:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6741a29e-4e\"\r\ncf-ray: 9ddcf5ecdce01ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"08ba14c7b4316a62a0e8ca3695556400","sha1":"ace9aae3626618c7981577f7dfcd3f14dbfc652e","sha256":"3c2c59fd797c74c9c79901547d8f433201cfadff485ee1dca4de661c427aea32","sha512":"b31664b3cdc04dbb4e2609849cee9289895a636f8a2ef778f910aa4d296fbbd0bec7edcd388a2c9446b16787d57e2067cce09ee9ac9c9fb597bca3d7fcc5cc1a","ssdeep":"","tlshash":"d1a0240304cc05fc4770003c0740551015df047c1d7d03575c4d0774070d5554d05501","first_seen":"2025-03-01T05:35:43.139014Z","last_seen":"2026-07-27T06:32:38.440491Z","times_seen":8,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"bitgets.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}