{"report_id":"c413dc18-1746-4db0-a3a4-c69833539607","version":6,"status":"done","tags":[],"date":"2026-02-08T21:34:07Z","url":{"schema":"https","addr":"bi-cloudsync.live/","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bi-cloudsync.live/","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"title":"Encrypted-Server - We are unifying Web3 by providing best-in-class, self-custodial, and multichain support","dom":{"size":8016,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (323)","md5":"76870a37fef7d276d0da309abacb7309","sha1":"7259114d082a90fb2be4b9ffb00761ccf47c9f2c","sha256":"398318d95ba33220aa0519bb6c285c0ed1665c7bf9ff97fb0351b39f90202108","sha512":"bf1846fadbc4f0fdf0c5116d83580b121cd3448dd6c321b526825fee2b5e0fd4374b14f490bebf07836776afc46366d664c28eea667a299541031843544c1f73","ssdeep":"96:rhfVU94RZ/tgRzaCS8k45USz+45ga/6y0Nta89+RzydNA1t9+kex8KdRoZ8I7B17:r3UsevS8LUSZgaDib9wmII9o8IT","tlshash":"b4f183a462fa1e2b818386ec74d77509be01d293d39c28e6bf6d45f10fc7d91980f15a","dom_hash":"domhash5833762d13b646d6718afae55768490d","first_seen":"2025-11-14T03:31:09.405634Z","last_seen":"2026-02-08T21:34:08.970073Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bi-cloudsync.live/","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-15T21:34:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-01T22:14:44.580478Z","alert_count":0,"request_count":4,"received_data":128520,"sent_data":2272,"comment":"","tags":null,"fingerprints":null},{"fqdn":"userstat.net","ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"domain_registered":"2024-03-20","domain_rank":129019,"first_seen":"2024-03-22T18:32:27Z","last_seen":"2026-02-07T02:48:16.52746Z","alert_count":0,"request_count":1,"received_data":530,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"widget.coinlib.io","ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-05","domain_rank":0,"first_seen":"2018-10-03T18:45:45Z","last_seen":"2026-02-08T21:23:02.621213Z","alert_count":0,"request_count":1,"received_data":473,"sent_data":591,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":1,"received_data":13586,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-02-04T17:31:32.500998Z","alert_count":0,"request_count":1,"received_data":886,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bi-cloudsync.live","ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-08T21:23:02.097905Z","last_seen":"2026-02-08T21:23:02.097905Z","alert_count":36,"request_count":18,"received_data":613099,"sent_data":8135,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bi-cloudsync.live/js/bootstrap.min.js","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cebe211b8c8427e3585efadcdbdb6bea","sha1":"d9617da84f97a65b79bfd1d336534be20b2d3e4b","sha256":"6e941e16d9f77d7bc0b68c25887e5c280281b84ae1f266a0ed20cabde59ff3e4","sha512":"ec2a01847d3b4fefb6963c28a84fd054b993925ece93577a3f06f3bd7ade1ce5724d876e69e52a1a8c01bec9415696bd5efc472d859b20400e3e6260f56d08a2","ssdeep":"768:s1D1OYYUhTVvO1Nn6u7MTLOarIkSsBAiAH0FcQ2K8FXsb6mH/3bz5vhCV:sF1T145KVdsXc/hhCV","tlshash":"8e53750672a4f472059fa176803b0a0bb7362c9de506b16cbad998dd1f7cd443267f3a","size":63430,"data":"","first_seen":"2023-03-07T13:53:19Z","last_seen":"2026-06-27T13:55:16.132233Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/js/jquery.min.js","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"be27d32f3b8b8d92ad87bcec8865bdf4","sha1":"b711f0cad1f96908154caf29c064f3934a35c02c","sha256":"ad3fa27ce109b106867bdba33ba75ff73bc1a88df88c9e33722372de217e9039","sha512":"f77ec82c2fb4d10cf0fbeaadf7b686bcbe26ea155cf17e6f95414279e7ae0265842f81471da16a1eb2c7b95ff12320e99fa3f1b9f9f7e1d4cce721578676448c","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDP6gP3h8cAowEIOzVTB/UjPazMdLiX4mQ1vN:DIh8igP3hu4zwbhd3XvSiDQ47GKv","tlshash":"899309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89960,"data":"","first_seen":"2024-05-26T22:42:53Z","last_seen":"2026-07-05T03:28:00.582468Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/js/aos.js","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-02T05:57:17.075375Z","times_seen":22044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"userstat.net/get/script.js?referrer=https://bi-cloudsync.live/","fqdn":"userstat.net","domain":"userstat.net","tld":"net"},"ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b83abc09acc9db5bad34c9f8aeab76a","sha1":"6751abd42863800222b93ffb19582d10dcd64fe1","sha256":"15ce5c1c9ba32dcc6ad17bb12d61ead8aafba652147c3c51d0e200a16a992d67","sha512":"d6db5159ca1da9b58fb838ceb44b8b2181ad28035db2cd1a457917ef3750c9b84e6ba4223e719049708514cb484aba4265c346af030f8fdd7702e9fd8352ec8b","ssdeep":"","tlshash":"2db02b104f1d86b9203241df60e3c3c88870206670054046640f04b41189dd30e81d80","size":129,"data":"","first_seen":"2024-03-28T06:14:56Z","last_seen":"2026-07-31T12:54:56.244736Z","times_seen":3403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bi-cloudsync.live/WW2VZ8TCMzW6.js","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /WW2VZ8TCMzW6.js HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 264\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":264,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a41da1e46171ff794b81458fbbfe859c","sha1":"5b7e6dd9b3898fb4ef7241239f1e81387dc78eb7","sha256":"02e29ea78822070b490049a7de2eb1ab0b984a0e7527e0ea5b0b1cf56d416529","sha512":"69582789013a73d73171fa1fd8780d8bb360c22c66d02dae2db53ee3b9bc0b905ddd42b60d105f755be2a4f80231e9498359acc1c0d5268742934ba634cafc4d","ssdeep":"","tlshash":"32d02b9e504323970812259039c611c2268813fa647981a83e86d447525c53dcdd9189","first_seen":"2026-02-08T21:23:07.111765Z","last_seen":"2026-02-08T21:34:08.970698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/css/aos.css","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /css/aos.css HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:35 GMT\r\netag: \"65c5-61b18669d16c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2236\r\ncontent-type: text/css\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-02T05:58:47.752221Z","times_seen":42690,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/css/app.css","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /css/app.css HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:35 GMT\r\netag: \"1aa94-61b18669d16c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 16461\r\ncontent-type: text/css\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":109204,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"14868e58d5cc941f49af4f6d05502e91","sha1":"d19eb382ec638fff1885ab5b9cc2a65e4d01b021","sha256":"045f9f8ba38ad209d4bfc1b756e1ed04f00bc2fda40b0ac0d37e919d0108ade1","sha512":"c38645484745acaf44c0f91d6ff53ddc159048b2e3ec29804eeea2c9a73bba66c4d62257f8f827d49c82771903448b2a52c1ec3991cdc864c9c8416fd35ec5f8","ssdeep":"1536:/6unYcVC8abQVCIkdoncoO/4Jmg4xgrAQyz3GYRx+P2xy+1VItg6WtmWnu9rJVTX:/anLy+1qtg6Ln3tkO","tlshash":"eeb362d66fe20608722fc099acd29b25337da4c3924fcda9a7d1746cee892d54123f4d","first_seen":"2025-04-23T10:24:41.273688Z","last_seen":"2026-04-20T23:54:50.427694Z","times_seen":20,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/js/bootstrap.min.js","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:36 GMT\r\netag: \"f7c6-61b1866ac5900-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 14938\r\ncontent-type: text/javascript\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":63430,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (63188), with CRLF line terminators","md5":"cebe211b8c8427e3585efadcdbdb6bea","sha1":"d9617da84f97a65b79bfd1d336534be20b2d3e4b","sha256":"6e941e16d9f77d7bc0b68c25887e5c280281b84ae1f266a0ed20cabde59ff3e4","sha512":"ec2a01847d3b4fefb6963c28a84fd054b993925ece93577a3f06f3bd7ade1ce5724d876e69e52a1a8c01bec9415696bd5efc472d859b20400e3e6260f56d08a2","ssdeep":"768:s1D1OYYUhTVvO1Nn6u7MTLOarIkSsBAiAH0FcQ2K8FXsb6mH/3bz5vhCV:sF1T145KVdsXc/hhCV","tlshash":"8e53750672a4f472059fa176803b0a0bb7362c9de506b16cbad998dd1f7cd443267f3a","first_seen":"2023-03-07T13:53:19Z","last_seen":"2026-06-27T13:55:16.132233Z","times_seen":33,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEzegCB8U1U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEzegCB8U1U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bi-cloudsync.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31296\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 07 Feb 2026 18:32:06 GMT\r\nexpires: Sun, 07 Feb 2027 18:32:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97300\r\nlast-modified: Tue, 09 Sep 2025 18:32:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31296, version 1.0","md5":"70da5b5471301a5a4ea105fef5d91e1f","sha1":"2f19b906fb10d3ee22ad107bac1cc939a71a1335","sha256":"b85d38bf8d391f8d82261cdf9aeca9b4bc2fc7c6c3337ae8c47f869b6bd4d498","sha512":"61b0b0158960c088936f97c87cc0e4522b26d86578f410ad1127151738cb3fcf513b79a507ed357e528a10d9b788acc2a351d801b9437985590b5a48b3700df7","ssdeep":"768:tPafd7a1CM4FawP1OMxZ/aGEu/W0I43VXAzcVbj21IVvT:k5aMbhP1OMlT/W0nVIUbHRT","tlshash":"a8e2f1a9782c358cd332983eaccf1a13ede9f5931e479754653eea079d2b6387490830","first_seen":"2025-09-12T09:20:55.848552Z","last_seen":"2026-07-27T23:45:44.916378Z","times_seen":605,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":127,"dns":2,"connect":20,"send":0,"wait":10,"receive":4,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEzegCB8U1U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEzegCB8U1U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bi-cloudsync.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31296\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 07 Feb 2026 18:32:06 GMT\r\nexpires: Sun, 07 Feb 2027 18:32:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97300\r\nlast-modified: Tue, 09 Sep 2025 18:32:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31296, version 1.0","md5":"70da5b5471301a5a4ea105fef5d91e1f","sha1":"2f19b906fb10d3ee22ad107bac1cc939a71a1335","sha256":"b85d38bf8d391f8d82261cdf9aeca9b4bc2fc7c6c3337ae8c47f869b6bd4d498","sha512":"61b0b0158960c088936f97c87cc0e4522b26d86578f410ad1127151738cb3fcf513b79a507ed357e528a10d9b788acc2a351d801b9437985590b5a48b3700df7","ssdeep":"768:tPafd7a1CM4FawP1OMxZ/aGEu/W0I43VXAzcVbj21IVvT:k5aMbhP1OMlT/W0nVIUbHRT","tlshash":"a8e2f1a9782c358cd332983eaccf1a13ede9f5931e479754653eea079d2b6387490830","first_seen":"2025-09-12T09:20:55.848552Z","last_seen":"2026-07-27T23:45:44.916378Z","times_seen":605,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"userstat.net/get/script.js?referrer=https://bi-cloudsync.live/","fqdn":"userstat.net","domain":"userstat.net","tld":"net"},"ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:47.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"userstat.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 22:16:43 GMT","end":"Tue, 24 Mar 2026 22:16:42 GMT"},"fingerprint":{"sha1":"EF:7E:2D:55:BD:68:3D:15:E1:D6:20:BD:C1:EE:50:11:9A:9B:EB:B6","sha256":"0A:C3:01:F2:05:53:9D:22:90:75:8B:1F:C9:28:63:1B:76:EC:62:52:8E:7B:74:34:50:6E:4F:4F:08:11:99:20"}}},"request":{"raw":"GET /get/script.js?referrer=https://bi-cloudsync.live/ HTTP/1.1\r\nHost: userstat.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 08 Feb 2026 21:33:47 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 129\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.2.1\r\nAccess-Control-Allow-Origin: https://bi-cloudsync.live\r\nAccess-Control-Allow-Methods: GET, POST\r\nAccess-Control-Allow-Headers: X-Requested-With,content-type\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":129,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2b83abc09acc9db5bad34c9f8aeab76a","sha1":"6751abd42863800222b93ffb19582d10dcd64fe1","sha256":"15ce5c1c9ba32dcc6ad17bb12d61ead8aafba652147c3c51d0e200a16a992d67","sha512":"d6db5159ca1da9b58fb838ceb44b8b2181ad28035db2cd1a457917ef3750c9b84e6ba4223e719049708514cb484aba4265c346af030f8fdd7702e9fd8352ec8b","ssdeep":"","tlshash":"2db02b104f1d86b9203241df60e3c3c88870206670054046640f04b41189dd30e81d80","first_seen":"2024-03-28T06:14:56Z","last_seen":"2026-07-31T12:54:56.244736Z","times_seen":3403,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":83,"dns":4,"connect":34,"send":0,"wait":84,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/js/jquery.min.js","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:36 GMT\r\netag: \"15f68-61b1866ac5900-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 31186\r\ncontent-type: text/javascript\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":89960,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"be27d32f3b8b8d92ad87bcec8865bdf4","sha1":"b711f0cad1f96908154caf29c064f3934a35c02c","sha256":"ad3fa27ce109b106867bdba33ba75ff73bc1a88df88c9e33722372de217e9039","sha512":"f77ec82c2fb4d10cf0fbeaadf7b686bcbe26ea155cf17e6f95414279e7ae0265842f81471da16a1eb2c7b95ff12320e99fa3f1b9f9f7e1d4cce721578676448c","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDP6gP3h8cAowEIOzVTB/UjPazMdLiX4mQ1vN:DIh8igP3hu4zwbhd3XvSiDQ47GKv","tlshash":"899309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2024-05-26T22:42:53Z","last_seen":"2026-07-05T03:28:00.582468Z","times_seen":69,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/js/aos.js","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /js/aos.js HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:37 GMT\r\netag: \"379f-61b1866bb9b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4506\r\ncontent-type: text/javascript\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14239,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-02T05:57:17.075375Z","times_seen":22044,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.coinlib.io/widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no","fqdn":"widget.coinlib.io","domain":"coinlib.io","tld":"io"},"ip":{"addr":"172.67.152.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinlib.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 05:02:53 GMT","end":"Sun, 26 Apr 2026 06:01:25 GMT"},"fingerprint":{"sha1":"2D:F5:42:A8:9B:BF:19:A2:9F:5F:8D:77:CF:F3:2D:70:F5:E3:6C:05","sha256":"85:3B:0F:1E:20:38:5A:E7:66:10:92:1F:81:FE:8A:71:5A:E9:62:C7:F5:53:D2:AC:6A:FA:BD:6B:8A:EE:13:0D"}}},"request":{"raw":"GET /widget?type=horizontal_v2\u0026theme=dark\u0026pref_coin_id=1505\u0026invert_hover=no HTTP/1.1\r\nHost: widget.coinlib.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 521 No Reason Phrase\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6993\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nserver-timing: cfEdge;dur=57,cfOrigin;dur=0\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9cae3f4c7b8349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"521","status_text":"No Reason Phrase","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T05:58:26.561559Z","times_seen":17667797,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":19,"dns":5,"connect":1,"send":0,"wait":60,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/images/bg-banner-2.png","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /images/bg-banner-2.png HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/css/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:39 GMT\r\netag: \"1b7b-61b1866da1fc0\"\r\naccept-ranges: bytes\r\ncontent-length: 7035\r\ncontent-type: image/png\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7035,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1441 x 1111, 8-bit/color RGBA, non-interlaced","md5":"9687a5e9590cd21c59c8ac8cfc07bd3e","sha1":"6069274bf41db0455950ae36ed5dec9bc89017c7","sha256":"1e07e4908831d23b7fa18bf1284b82bd5634ff9f74e40094d8a33f8db758135e","sha512":"6379c32f0df66597d041b24d725fd6e2e4f6fd3d016c85d1b1782c91a3c38591f33657fbcfcfa60bd8cfa39cf045d4bfdcaec8f0096317364dfa8718b9a6b394","ssdeep":"24:v/6LaTFoCsexy54ZtV5nqViLhQmoQhENlQ1PXTmKRCANY4LB34:v/6mTFoC1wmx5M0vog1vTmKRCANY4LBI","tlshash":"0fe1b6d3dc854dddf29778be00220f4e7b5f426bf57411122b3db8b92828609279fa09","first_seen":"2025-04-23T10:24:41.246864Z","last_seen":"2026-05-07T17:49:51.869614Z","times_seen":28,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-08T21:33:45.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 03 Sep 2025 21:20:50 GMT\r\netag: \"5ed0-63dec2dc93080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4786\r\ncontent-type: text/html\r\ndate: Sun, 08 Feb 2026 21:33:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":24272,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1102)","md5":"34720707ee67a2ecc536cd3d95218217","sha1":"9f5c1a3c370d32b4c454b33c788fc6144ab85f07","sha256":"55ee16c448fae7a2c0d707d801a28365de3e6fbee9f034fbf14635649be1c99d","sha512":"a3246e268a8b8b05fa40fd2fb8cca33837eaaba1308f48407c4a7b25713de490a359ef1ad6473e4ace91beb3aa2ee1bf58120c0d2a7aa3ef24dd9b773b165233","ssdeep":"192:o8qK7lER3aJwbRpdPYeqaW8T2ysy+AyC1yeyp3yvFe8Rjq22y0gr:XL7wNEIW8T2ysy+AyMyeyhyde8Nq9gr","tlshash":"59b293b194f102571257869297635f6e7ea2b4a7ca5e45487bfc0ae08fc3ed2cc43394","first_seen":"2025-09-09T18:15:18.271919Z","last_seen":"2026-04-20T23:54:50.405965Z","times_seen":5,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":211,"dns":20,"connect":99,"send":0,"wait":98,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/images/333.72a030b0f365e19af3ecb5ebb06cf7be.svg","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /images/333.72a030b0f365e19af3ecb5ebb06cf7be.svg HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:36 GMT\r\netag: \"452-61b1866ac5900-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 511\r\ncontent-type: image/svg+xml\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1106,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04f51e6641dc3e5cd1a69a2b1fc7cd08","sha1":"c5a8bc088894effd24f00b238a24fec7fce276af","sha256":"d083d38d149d065be0a31560aeb8b2026b315e64f0558c6711ff3e35ed47c323","sha512":"786be9ca201d75904c887e5d46805226b05d5fc5209959ec851370b60c116944d82101d3d5e72159a7ac8e46d37200b3480bc36a20548402cd609d45e563b741","ssdeep":"","tlshash":"961120bd3364482cbb5093fcd76abada54a29cd306602044db502933209462e1cb7fcb","first_seen":"2024-09-03T15:50:34Z","last_seen":"2026-05-07T17:49:51.883904Z","times_seen":73,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/images/111.6356b02443423dec45faf35e09f30129.svg","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /images/111.6356b02443423dec45faf35e09f30129.svg HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:35 GMT\r\netag: \"44a-61b18669d16c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 446\r\ncontent-type: image/svg+xml\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1098,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03a7b3b6da1947bd1207fc5586fc2367","sha1":"f70e20da5357ff35ae5aaee46be94b9305bab50e","sha256":"b579c9b0df786a247f1cdf9099aaf64831816f4db413a50b02676048215beba8","sha512":"4a26e14543493c114eec3205a499787b34917c3b797f7927da1c4299b36544e626792612744a7d3edcc3dd58508fb20d0e224d354c2c35e6cfc61c09107a063a","ssdeep":"","tlshash":"d211adac334c98ecf5604b9cd772b06624ab36d25f2030588ea02874156175f7cbbdc9","first_seen":"2024-06-14T23:34:57Z","last_seen":"2026-06-10T12:45:57.535419Z","times_seen":75,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/js/app.js","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:37 GMT\r\netag: \"1bbc-61b1866bb9b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1896\r\ncontent-type: text/javascript\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7100,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d5c1871dce5b4ebd437ceb871c2cd27b","sha1":"47d380abe204a644a52892ad44921e6059d4c9ba","sha256":"99363b58232d41b1646349cc160dc35bb06ac0cf938d866c20d100ecde88e719","sha512":"8c14ae4596020cf09c09c0e7e322d80169a52ae4a8f7c68f5970c34def6ec43e6f35c8c74b94993eccbc9bfedc77b581b16150f1978ca03fb89906eb83c31ed2","ssdeep":"96:3ZTW8GJAyC6Lams7tuQARUzEx3vNEFHaMDiB6z:ojJ07IIlHaMmcz","tlshash":"36e10206b0656552687b73b99b7b9504ff3d052b8202c341bc8eda981f7035ca692eef","first_seen":"2025-04-23T10:24:41.299941Z","last_seen":"2026-04-20T23:54:50.419113Z","times_seen":20,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Readex+Pro:wght@200;300;400;500;600;700\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Readex+Pro:wght@200;300;400;500;600;700\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 08 Feb 2026 21:33:46 GMT\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12900,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"d44fbdac0799647a193bcbf4404d4eac","sha1":"a62fa0b7a3e4ff7f99f82e03b5d154bc3c132ee5","sha256":"07b34c783b2d3e08c0be4cd01a385e75b0723ce8ff9c2f825c84d0dd5bdd0917","sha512":"e89692816a450566ce75558f223bfa41526ca74e63dedea1571b01894378f24b9e35974469d4cb31f3119bdea0608ecc55ea9646d463605a5328a3c4c2beec83","ssdeep":"192:kfCl0c7bVKfCl0HQbS3fCl0a5b/MfCl09GbUxfCl04fbZ+fCl0D0bmi:5l08l0Ol0sl0Kl0Ul06","tlshash":"5942cfe1481f554877971dc262cd7933ae4ee1a420809468affe274bacdfe26376439c","first_seen":"2025-09-12T09:20:55.894509Z","last_seen":"2026-07-18T22:10:57.480883Z","times_seen":28,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":108,"dns":1,"connect":20,"send":0,"wait":33,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/conthrax","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 10:30:43 GMT","end":"Sun, 05 Apr 2026 11:28:02 GMT"},"fingerprint":{"sha1":"19:1C:B1:F3:D2:08:65:B6:9A:C1:B4:79:D3:ED:56:0D:86:BE:C1:C5","sha256":"D5:42:A7:E8:38:8B:14:DE:00:B4:7F:DE:0D:40:F9:71:1D:5A:5E:5F:69:37:DF:9D:89:C2:31:AD:C5:EA:46:22"}}},"request":{"raw":"GET /css/conthrax HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 11848898\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 24 Sep 2025 18:12:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ttc6Sr0V7yFVafSawsF8gE4vRwJNCZO6xd1UIEs8AVZPvXfrYHcJCmfFG%2FoV7yoGyGZ6Z7xths0GaW2gIAuDtEOJWslIF%2FOfkQa89eeD%2FdR%2Bxg%3D%3D\"}]}\r\ncf-ray: 9cae3f4dac724e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"2bffc366a83da409b901b132e557b9ad","sha1":"b94e0d06884b05d4ab8e204ad48b88d6d3414e54","sha256":"6f82d73cf1b8b4eddba6f61bb6adf11a0ec63b5a46ffef2bf498033d471ca140","sha512":"a8fb4dff2526c1d3588238f41e0d4898f00b013d0675ce8cef6533f38e03ba4121d462c6530119cce186049ba45fdc75ccbe792e1b1850dc38cdbc2b523e19e2","ssdeep":"","tlshash":"d7d0129504dfa856a7200d8a731b721c0d4b5007218bc9d57a792d459ee352912c579d","first_seen":"2025-04-23T10:24:41.28493Z","last_seen":"2026-05-17T23:34:39.426633Z","times_seen":46,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":17,"dns":7,"connect":1,"send":0,"wait":6,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/images/line.png","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /images/line.png HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/css/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:38 GMT\r\netag: \"10e5a-61b1866cadd80\"\r\naccept-ranges: bytes\r\ncontent-length: 69210\r\ncontent-type: image/png\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":69210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1294, 8-bit/color RGBA, non-interlaced","md5":"ad93247a711f78fe2f3fe00209438100","sha1":"773f3bb7d57967aa2b532a78d2720c71df7c269c","sha256":"afba5af5d72ca3fabfa70396b3f18ed7d3b6b45cdb4125faf48070f9d5224aaa","sha512":"754be5043ecfa8374e0f5c32cd9e759279c5f4f5f415710acb33354aca3511ec505c7bc2303966ee8ef1bd568fe8d833f0db54d10d0668e18a45769de835718c","ssdeep":"1536:J6mSR2cnL3S1E66gwELohsUktsETQa3krOCjImebVAouyze9WbR/R:J6R2cnCEDgwxucYQb0meGylBR","tlshash":"0463e08648236dc5ec6e1736e3ed0f69772183a8c43c439b0b78f0f96cab6a05c86556","first_seen":"2024-02-05T00:16:37Z","last_seen":"2026-06-28T00:17:10.620968Z","times_seen":207,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEzegCB8U1U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEzegCB8U1U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bi-cloudsync.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31296\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 07 Feb 2026 18:32:06 GMT\r\nexpires: Sun, 07 Feb 2027 18:32:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97300\r\nlast-modified: Tue, 09 Sep 2025 18:32:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31296, version 1.0","md5":"70da5b5471301a5a4ea105fef5d91e1f","sha1":"2f19b906fb10d3ee22ad107bac1cc939a71a1335","sha256":"b85d38bf8d391f8d82261cdf9aeca9b4bc2fc7c6c3337ae8c47f869b6bd4d498","sha512":"61b0b0158960c088936f97c87cc0e4522b26d86578f410ad1127151738cb3fcf513b79a507ed357e528a10d9b788acc2a351d801b9437985590b5a48b3700df7","ssdeep":"768:tPafd7a1CM4FawP1OMxZ/aGEu/W0I43VXAzcVbj21IVvT:k5aMbhP1OMlT/W0nVIUbHRT","tlshash":"a8e2f1a9782c358cd332983eaccf1a13ede9f5931e479754653eea079d2b6387490830","first_seen":"2025-09-12T09:20:55.848552Z","last_seen":"2026-07-27T23:45:44.916378Z","times_seen":605,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/images/222.009dd760cb90a9e2c9ff202afe5e0229.svg","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /images/222.009dd760cb90a9e2c9ff202afe5e0229.svg HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:35 GMT\r\netag: \"4a0-61b18669d16c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 590\r\ncontent-type: image/svg+xml\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1184,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"428e7f26fbcd24b1c39fe630a6616bcc","sha1":"0e1465a2d5aed3b07ff6b2885f54e4e21d6e8e39","sha256":"409687512c583494cf188114d7c8d3218818fa6fd8a35ad038e9d4e27409ee36","sha512":"8a1a01aa658f9078e767285b35571945dbd79fd334a2b9fc19ebdbe6c01cf030aa31a834369db91d43d09331b669447e9824ac2957ec2f986a00f686134e7f4b","ssdeep":"","tlshash":"7521419e33488c79f512cbfcdb2b607a302f1cf3205055c886b02831a5113ad6d368ea","first_seen":"2024-06-09T00:36:13Z","last_seen":"2026-06-10T12:45:57.562231Z","times_seen":79,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/images/444.df1998eb9e8665544f78a8e025564318.svg","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /images/444.df1998eb9e8665544f78a8e025564318.svg HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:36 GMT\r\netag: \"306-61b1866ac5900-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 378\r\ncontent-type: image/svg+xml\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3573598fba9a69399553b2df70c4bba4","sha1":"be6c56700919774c9fc0523eb1e05f203d86c9e7","sha256":"b8fa690788644fd53b4c02a96af3756b57a76dab2d71de80ef8cdd2b1d2f18db","sha512":"135455afba1172bbaedffa3b33c389de50300510aa8ee7751fdba00ee40685a91dde54fcb80bf22c5285672e639b35494520d3d365a5affbacd8ca7cecf8021f","ssdeep":"","tlshash":"ad01dcbe33d88828b420236c87ab713960bb21cc19b3a0084c9829347451dbf3eb7dd8","first_seen":"2024-06-09T00:36:13Z","last_seen":"2026-05-07T17:49:51.896028Z","times_seen":79,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/css/bootstrap.min.css","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/css/app.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:37 GMT\r\netag: \"28036-61b1866bb9b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 23962\r\ncontent-type: text/css\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":163894,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"3a348ab343c140c46294fbaae787a884","sha1":"7d590cf5051a1e68a549e2b9a2c5d7a9f7ec5c99","sha256":"2f25e0ed84bbed6874bfdd6c179431f734bf77c980a5f23ef39d967fc2025015","sha512":"32d602c43e801dac72f4dd17a808fc6c55f47fdb00128c62a6a11822245f45f72645076d7c7e60e6f73a637a0c9c2af05fe196a4ae74d49b9ff4fd35060d0e23","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJB72rIWE5e0VUpz600I4fM:4t04x0VUpz600I4fM","tlshash":"6ef3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2025-04-07T20:20:53.437025Z","last_seen":"2026-06-14T10:29:41.015291Z","times_seen":30,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/css/icon.css","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /css/icon.css HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/css/app.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:38 GMT\r\netag: \"1de3-61b1866cadd80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1189\r\ncontent-type: text/css\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7651,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9e212e1c0aaf5dac25d4540a4a0fce17","sha1":"6fbbfa8325b875c2a4a20112118092c83835bc66","sha256":"e6599da0ff2b62ce4531ed409775c9ba6e5f5ee6cf2a8ba35e570ad144578d9e","sha512":"00a2d629044dcce013278d1ad850585496d152da8d479c31f5ddb67241373f2cb4226e9244e158de244277a1607be1ddbc4f27149b512627128a200d969debfa","ssdeep":"48:QjKTnOrOx+OrMan/BMlpw7aHYx6LXxBKKz4/QPWFAXueHP7jUWieWEbeUzhXJGJk:QjKrOrOx+OrMYGz8AYyuHSHj","tlshash":"dff105e18eb915404bd2f2b425d1b13dbb5453508d5bce1aaba234bcefed611a8c33c9","first_seen":"2025-04-23T10:24:41.245544Z","last_seen":"2026-04-20T23:54:50.428835Z","times_seen":17,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEzegCB8U1U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEzegCB8U1U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bi-cloudsync.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31296\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 07 Feb 2026 18:32:06 GMT\r\nexpires: Sun, 07 Feb 2027 18:32:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97300\r\nlast-modified: Tue, 09 Sep 2025 18:32:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31296, version 1.0","md5":"70da5b5471301a5a4ea105fef5d91e1f","sha1":"2f19b906fb10d3ee22ad107bac1cc939a71a1335","sha256":"b85d38bf8d391f8d82261cdf9aeca9b4bc2fc7c6c3337ae8c47f869b6bd4d498","sha512":"61b0b0158960c088936f97c87cc0e4522b26d86578f410ad1127151738cb3fcf513b79a507ed357e528a10d9b788acc2a351d801b9437985590b5a48b3700df7","ssdeep":"768:tPafd7a1CM4FawP1OMxZ/aGEu/W0I43VXAzcVbj21IVvT:k5aMbhP1OMlT/W0nVIUbHRT","tlshash":"a8e2f1a9782c358cd332983eaccf1a13ede9f5931e479754653eea079d2b6387490830","first_seen":"2025-09-12T09:20:55.848552Z","last_seen":"2026-07-27T23:45:44.916378Z","times_seen":605,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":99,"dns":2,"connect":7,"send":0,"wait":9,"receive":7,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/images/favicon.png","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:33 GMT\r\netag: \"2a8d-61b18667e9240\"\r\naccept-ranges: bytes\r\ncontent-length: 10893\r\ncontent-type: image/png\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"217f59ca729763c7020762b35f3e5635","sha1":"c5d1d071640c95e6eb296bf880904749ed0104c2","sha256":"d600ab29d5a1227d58a1dffbc68af59cedc712c556862a6ba9f145725f435817","sha512":"ccd129002fb31da63c92ea51cfaa1487a5edbd7a8445bbc2d9cb78a0cdc9e709156f24d5e299eea874d6e53af29ade63df2726bc86311619dd86e1700e69dd3d","ssdeep":"192:RatXcnBAN8MHAL349Kf2+SNTisRUVxfOsC290suYgcNEf2HbJtj47qE2lG3NaBtd:UtXuBA6Ae3c6qFRgfrZD1Ef27Ja2Udej","tlshash":"8722bfb767dabae5db863f012b976e4497a0203594c34af3e343dc8a5c5318d21c60ad","first_seen":"2024-09-19T22:56:56.354479Z","last_seen":"2026-05-07T17:49:51.915731Z","times_seen":35,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bi-cloudsync.live/images/favicon.png","fqdn":"bi-cloudsync.live","domain":"bi-cloudsync.live","tld":"live"},"ip":{"addr":"104.168.69.100","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bi-cloudsync.live/","date":"2026-02-08T21:33:46.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bi-cloudsync.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 14:11:27 GMT","end":"Fri, 03 Apr 2026 14:11:26 GMT"},"fingerprint":{"sha1":"EB:8B:1D:BC:A5:52:74:80:68:45:AA:B5:D6:48:7F:3D:1B:CF:86:02","sha256":"A1:66:AA:70:FF:EA:B8:AF:E9:5E:E6:B6:C4:96:80:C6:ED:B8:13:38:8E:0F:73:65:1A:72:11:FA:55:96:2C:D0"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: bi-cloudsync.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bi-cloudsync.live/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 17 Jun 2024 16:24:33 GMT\r\netag: \"2a8d-61b18667e9240\"\r\naccept-ranges: bytes\r\ncontent-length: 10893\r\ncontent-type: image/png\r\ndate: Sun, 08 Feb 2026 21:33:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"217f59ca729763c7020762b35f3e5635","sha1":"c5d1d071640c95e6eb296bf880904749ed0104c2","sha256":"d600ab29d5a1227d58a1dffbc68af59cedc712c556862a6ba9f145725f435817","sha512":"ccd129002fb31da63c92ea51cfaa1487a5edbd7a8445bbc2d9cb78a0cdc9e709156f24d5e299eea874d6e53af29ade63df2726bc86311619dd86e1700e69dd3d","ssdeep":"192:RatXcnBAN8MHAL349Kf2+SNTisRUVxfOsC290suYgcNEf2HbJtj47qE2lG3NaBtd:UtXuBA6Ae3c6qFRgfrZD1Ef27Ja2Udej","tlshash":"8722bfb767dabae5db863f012b976e4497a0203594c34af3e343dc8a5c5318d21c60ad","first_seen":"2024-09-19T22:56:56.354479Z","last_seen":"2026-05-07T17:49:51.915731Z","times_seen":35,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"bi-cloudsync.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}