{"report_id":"cf0efc4d-a44e-4a12-83ea-e983f8987267","version":6,"status":"done","tags":[],"date":"2026-03-25T18:04:26Z","url":{"schema":"https","addr":"bitnestloopreturn.xyz/","fqdn":"bitnestloopreturn.xyz","domain":"bitnestloopreturn.xyz","tld":"xyz"},"ip":{"addr":"172.67.199.58","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bitnestloopreturn.xyz/","fqdn":"bitnestloopreturn.xyz","domain":"bitnestloopreturn.xyz","tld":"xyz"},"title":"BITNEST","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bitnestloopreturn.xyz/","fqdn":"bitnestloopreturn.xyz","domain":"bitnestloopreturn.xyz","tld":"xyz"},"ip":{"addr":"172.67.199.58","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-29T18:04:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"bitnestloopreturn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bitnestloopreturn.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-22","domain_rank":0,"first_seen":"2026-03-25T18:04:27.681483Z","last_seen":"2026-03-25T18:04:27.681483Z","alert_count":6,"request_count":6,"received_data":22714473,"sent_data":2942,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitnestloopreturn.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"bitnestloopreturn.xyz","domain":"bitnestloopreturn.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e62dd9fd15ba859ff4b334377ced00a3","sha1":"0bc21d33064b8fd64aae08427c30fa10882ae0f7","sha256":"147d2c4d9c789ec91e6451eb9a957448175be4494bd3ccb220f6233930b45ecd","sha512":"82c74e4f873f7a326ec8a4c253de18d6b501a6ef82496cc63cb9c16ef6aa6239ddd7ba10a710765759bd67e2decdfcb3239cf7735d926ae748717f7f7b7fa042","ssdeep":"384:tgQ7j9+XyL+bHKwlyWqxLAkvVgSbRBlWta6Sj/h08ZpopbfIJzjQBstzfG/6a:tgQ7jUXayqwgWqVP5yaX5ZpHJdtCt","tlshash":"cfc2b5cf79c7787bd3756079207ba8cfe269ec81e044bd08c130d9a87da63889957e58","size":26522,"data":"","first_seen":"2026-03-25T08:28:30.031196Z","last_seen":"2026-04-02T14:41:46.402308Z","times_seen":608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitnestloopreturn.xyz/","fqdn":"bitnestloopreturn.xyz","domain":"bitnestloopreturn.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7fea48437240c7d470f7639f3ac29da4","sha1":"0493949ade894bc83b96dc8b65eefe87ac31fcf3","sha256":"0d7b810e421bd95ab1140f42cf85e2fa8dfd693068e03ac9c70dcb7795df3089","sha512":"ab1507085d4656a44de4ac388c68a812e3dee1e55518d5cf928fdb936dd505fdf80d3a00827ac416a86518733df7d6d57d92e64470278893e68ae1360a143453","ssdeep":"768:adco6CLjHH7nbxT3SmWQRvNBHJYvHMG+C5KFn9p0NcWc8tcYlFtVfZDV7gcqnXCO:C7ygNBCvMGw9qjNidJIg","tlshash":"88738fd8590bd4e98e6512ded477e814e4684e23cdacf1a7e62dddc0782df22848723b","size":73451,"data":"","first_seen":"2026-03-25T18:04:31.568984Z","last_seen":"2026-03-26T01:05:22.141755Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitnestloopreturn.xyz/7b0cb263-a7bb-41fb-ab1b-0510f70c4716","fqdn":"bitnestloopreturn.xyz","domain":"bitnestloopreturn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-07T23:31:49.839519Z","times_seen":5106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitnestloopreturn.xyz/sinon-15.2.0.min.js","fqdn":"bitnestloopreturn.xyz","domain":"bitnestloopreturn.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d8e44fcd73f489564b5d93322b84ee5","sha1":"e22c8f98fad17dc1db835034dc61fc71d16bf19e","sha256":"6a3bbadd263fdbab034f9928030a172e7895168224059bcf2cf0f7dc9f9ee15d","sha512":"be57576b408d2c3a67cb2a37cb1343038e5ad6d4bdaa86ff8ff79cfe6c910f9e9d4e55e16fb225252d53fdd3f0c03a2fd0cd6d4c744f607d787a1ae17bba6a3c","ssdeep":"768:7BcMWCrj9bnj7x42ChDfMeyQ6t22z8+X3L2Ep0Va8hcWcw9cYlJtH/ttV7Mcqn5O:Vnu2ChweCY2zRnL2kcbhHidJKX","tlshash":"4573d8da5806d4d98e6502dec477f818e0684e63cdacf097e62ddcc2b52df26848723b","size":76510,"data":"","first_seen":"2026-03-25T18:04:31.56561Z","last_seen":"2026-03-26T01:05:22.141007Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"487e2183bc2b4bee4aa80c3373a5a570","sha1":"0349d7ff5525a6938768174caba3202ab0ed12d1","sha256":"e3438bd0efdd3e3f628be09d6f8d7ae8692f39a7796b6bb7f9ef154683c1bcaa","sha512":"96b4cdc33df04efb5a25e2a344bdcff55ead1d02c07dcca416600878ecd86de8de8ca55a69682655de1ae10cad98d206a451f5859aa55dcc6f8cffc92863a562","ssdeep":"","tlshash":"28d0237918b58d315594014670f5d394257135a07712e54081cecd3b7f21ed314f155c","size":217,"data":"","first_seen":"2026-03-25T18:04:31.57703Z","last_seen":"2026-03-25T18:04:31.57703Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bitnestloopreturn.xyz/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.36707159097325237:1774424211:9_pSV23kWGmNtldQToc5YDBzJFUfKD8QS_h75YB-Zx0/9e1fd5f19d2bdd81","fqdn":"bitnestloopreturn.xyz","domain":"bitnestloopreturn.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitnestloopreturn.xyz/","date":"2026-03-25T18:04:05.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitnestloopreturn.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:30:03 GMT","end":"Sat, 20 Jun 2026 20:30:02 GMT"},"fingerprint":{"sha1":"8A:7C:68:95:8D:67:58:47:9D:0F:C2:63:00:23:A5:01:38:C6:C0:BA","sha256":"2A:12:64:F2:E5:96:6F:66:72:17:36:AB:17:2E:EE:00:C4:53:7A:3E:01:61:88:D9:AA:9E:30:78:FB:74:4F:F2"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.36707159097325237:1774424211:9_pSV23kWGmNtldQToc5YDBzJFUfKD8QS_h75YB-Zx0/9e1fd5f19d2bdd81 HTTP/1.1\r\nHost: bitnestloopreturn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12158\r\nOrigin: https://bitnestloopreturn.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitnestloopreturn.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12158,"data":"y6B0QdM7VrkNNMYfkSHu6fVYujBuGuU0fh30Vmun0eYV8YsUWSu-0yYdhsutu55umSsEuSoVP8urYV$YpUcBMeeU4Bu4++uurauyvhncutS0VAfkGxynnutHzTlNC2OfufglRmVf9rB5fgekouk4yh3LU00A5wq1fqfkEuHBMyrQBB5ld6j3Ksj3rumTUweeEVh0uT+d6cqBy3pp+kyyouDJHuQoMlKGNuSDxPnXutivRd32B+LN4F3QouD4BukCms$WDTGWYut1xTRXHlu0uU+0NoYnuu9TCH9nMTa3upA05nah6Tj4oul4BYM6Tkrg5GlC6WUauUfE+BG0YouM$D1rMl0RmU2mQ2futaguAL7TfuVQ3jmbf5nlfuTnCwBlXJdFDR5DRaTCMllp9RKBh8t$KrgjllOLoPfWYBu0XT+iz80u$miVHPsEP6rUaGijo5r55N1PrZRVs9-9fu74UBuuclQ-NQ0H4dDKv30badK4+X34wH+kSciWgiX4g9KExvP2cGSJumln3gU+BGrGD860uVN-ZkvlKMtyrW$COCKt$gX-2W3DqCtxQhQ4NkOXcwLt$FnSUHlSZR7XX381O2O2A-aaDtHAmXkGZk1r1FHlqeCagbTHuiAxPUniXaUUCnMKODmmYmv-MOluzlv3Ge+d54g91GiHuzcEmkGtYpEXW2CoFb$+9GVC+Tk+F2FdujVT0MsRA$mwvz08oUPd+MB+Ps2xDZwUb3DtWXnH2pKQ+7DBRdM$vzAWKQ-kmpnBgR36ZiNMMsf3g0utbr2B+QrMByMfyrpf+VWPdYmRQRjmuL18l6p0iX02MiiH6iDAYkdPmP8+eMBJ$dAaYuLmYFMakCLJ6BoZUPkaM$PfBL0lMBTkreoeMfmjY3Mmj9ulUonV9mfTkVmudJdrBo0SA8s17muZmdyVQJBdSBk4AVSMdQUETPMfYkzQEH0KfVksSxs+BW93HdgejYM+tUHJud73DgkoSMPMj79TrLTMC3g0P6yro0EljH$O4Lo9z2B9TLer3347sWMk9rrp1x0PasdaSujA0JlaVTfi5ST7Q43N9DUMYoaAaf9DimUVTz3yLn7nl2lPk39VgBViUx37cVgu545q2VyuW9a8nFVyiKaeOojuB6jrUYk-+H7lBsBWuam3f1NMUpmFekdeBR1RyPyrjtoL+cuEu7w9rkmnMsudS0KVoAC6+4htuNVTrjp4oL7U3nM0yVqmEGYUMRaLiMRn33y0lahtdtlzela3rNBZQZdhQjf5fVE30+RBcf2zYGO6mYCro6NboMmu+aYJuhnZ-jMonugeM0u7OKwmunkAUUjJgfdJ$DuS83iySg0oiU2QA3UM1DB4EB-4Uf-0UAkGCCgekVeBYuim51G6ugTVMAvcMPVKxLPQduramiBuT4hn$PVk$13dNbN0uQu3sQ0MOfro30-jQ8MKHY$14BYxjkLpb-mhe17NMfNw6VkFkDuYAJQb9V$HgNmFxv8mEjZ+mzKiCd0+13N3LCv2uic4pa0kK5opRqzE2CMOw+mY1zH8FQzPMvmfebpGFPu3Mqz7uCPaBVrM-EcV3lamuSuVu0UqJqZbDP8hTuHecX6kDKkNf0m-HYfMwkomfyo9ifuXou0vAZ1YeDvM5$OGJ0sr8TNuMgeMnVN4rejM3xngkmLoe3N0vuDUPmHTOktLaYoDVfeLyPksP6Sjzi3$$JEikVUCm3kK8urRJQl$l-BnuCkorMrYN3mNckM3Sv8lRT0Fk7mgNEWJcCkb-mN-C47H$pm05JO6zCCaWSDfHDZulEH0stanmYTo5nUdUU7+beuNl64nyoQfwllBa6XBnl3wg1ay6Sr+ejW3cu75XlufaFlSMJPaeRtoEjFnDB8CciV9lV3dPTUfVNrulEz2LBKyseuljX3ju253Bl7l+2hoKrfWldKoM7MMN4u+rK6PUMlrh9+Wsdu+umDYKHyyPkVfrdht8WO9+6UtyYyHm7wHt3K$T+gF3VuUm4dHOSPKWuZAGWszSrSWSOUwKulfxYa3jknure2H0F1vDgOa0ujgBM3Vads+$K1UyXU40d9nrVpxJoTbs5J8-Yahije$nuHmBQDy7dP8myUdJ$zV+kPs+e-xXFrshPMS$4-PrJcMB5zHdngB$bXsMt5eWX1471u8RVKMa5+uMDGJ+gEGgir6XL0nD1KigVONj+95ZrxNUYltsFiCr8XcYU$zy9rntl2GPVagKfDYOK0TkJvSHiRQ3B0AC74Wy63ji5xL-vLjrBmCXiNQVmM4XE1SBggkyjS3s+TBrEvu8T1VwWXj$h1tMeRh6fxBs$t5s7shL0Yo3vJiJhyp+oVWosW+OfJJY2vyot2DPH$hVgAeZD0g8MTajodMmE65CYpPHGxs7TB$09rOST+2O7TWdmDh9Pg0y$W2NVP3DRgWguTHs85rdKbV$VOO$nkfuqC+0W1uVB3hQMrREC43jG-H0DDUAYxSxX3V59xB1W2tDVlTAugZad2hL08lDmvqGG8yun2BLGShffTJ20T3i5J0-32JYaLfBN+0jc2G6kp3hrurYzYwLfVWZuSR6TPMNm3t+QJiUfMp3+1dYMc$zaX$mZ$u1u1uZp2nOmLaXT-lRSC5GbyHpu8g3unn$vNE-BMSUo16-ABU2l-iFXX0LnfoQMdZyaAVgWHbBTfAhS$EjMYKi6Wt56qP$An$-Uuz5f+brTXlM6lh-PMcvxzfEApBnO7msUdVs3VBtb0a2XlfSumUKtjBPbSCRguAu$maa7oV4pA7VB8nD$g+o0PfToYh63f0E3TOs8$f7zLT9ugyhZqnY7v81ikhimRPi2DUn-C33fmo$LHXgmQoiSYaQr0m--aT0n3eshx+HLxLZfe$jxq2JEw5zlayrgVa50wi7gEn-0H76oJlu+f6YfkQYGdiR2oRcA2M7d6NUQdtUONrBpQmf+oq4TN03KuMfYDvRcpMgms6hsXM34$EQn+EZggQLPFZ4Yh8TVHsKEDfQctol0groJW6NyyYu3SgVdroeuzzvs848WcqQyMAs$xT3UwAkia5LB291iAEPLkFongBU22$$PMjNoDKl9ArTr6KUnwoMpE8bgYijeul4$iL8N+CH1Aj+5KHQugtf9LSDtCfhO15oQni1eS4jj8Dz2xZmfffpg2tDrMOcWr$L5JgmsNMYca3Ga2T+plOmdnb5Xf0GT-MNXmA+iv+Rnhl0f5vZqPY5yEc1PgsmMH+wzzYP+yPUKEHMP5rNOENU5e2XuJ1qu0DbRj3J83VhYamXdKx3UjqMV$BR1$0QuftgDPpPcCcrUbmc8X4+Pe7HvvcYAJTOmVdfAw7GPfx0jb9Z77N5uFB3dx0b7c5U4FSWWHrC-38MiTLG1aXNiSQpW9a8rv9p8MjFpZnd1j3KPsxrmLNBfm9jOTmMyGu4uHHlLnmEoEddffyN1hZZvU8jiZkBdZv9ZVrO8wZlOYeqlj8kkV53+CkA1QQWdQ8jPY+CmwgoVbk20+PGkTsX0Z5CiJgA5aX8kliyP3f1eBM3lVllNUr8N$$TZjkTg9+EtEQ$Z$X3nasLOJlMdu3hmyiLgylKOKiUlr+yM9y6OjlvmT5e+MOjMEfF0L+zfY$uOu7eZV+6VoUc$m8i8JPdQ+Z+PoX3Md$BgbdhtbNNf3kxUfA6lVUAvcl9igsd0HeolcrUUontZlZ$O0YBxQluWpi330YXdHPy5eiHDjlNOrA5uL0YTzMW5i85X4VdUpiB$lQkZfsUUxkA0DlDOCt2kAvVrr5o+5Bh1q14AqO1$tvGiXmaH1Z+XwdY8cfdkQ0Z+AOaOeNb56S-8Ad07VXYW3KZf3BHqVfXsaZmyfYi8AiaSz0Nn2NCMsk4Uou3+rTNssTXsnPGU646SGZ6Kutov+rH1M5+1Kya2Q1Y4hl8tEeniUQo1R$EmO$rqFQvNb+byomFOpOm5F07$JdO+65VOrkeXSiePTyVroAU14y5PAZf0guJv7ntZjrHBc1045i3M5XpdC+8HbPNDjfTXV-$dmX9uBOYBFOXBimvdUOVub+yHhNNVYefNVN0neO5rA8JqE5o5VULHhitHal0AEnFHYBVxy0Lm3U6aUVU+ygAie8c+7fouHe1lzgAig5CuLl4V79gsEiVV7aaP98ZB+KONa5ZUBmu4CMuxQAcOTf+2+a3M3MqME3QOVVanBU+rVXoZLsBloOo1cmLX+YLuaDHBVmQrU5Sd+MiUofoMEtjsoNVH+18AXr3-GmDXl1M5Z5okZdCmy5+5V4Jqf5+fffu9VrAvov8Q5u3lkdYVyrBto$7fONmD3ejK953MhsVApl4l9saXoNEU3eXgEDyVRTK4yXmWrYVPPYg4MvjUoA3eP4-vJPBY+S819mnHVyUf-8E+-NVUA8cVkBmDuu9+HeqtGn8H6TrvePKnlltKhkAgg5o+igJZjM0iVMO5mSNvfy40FOlUGaPgdYdYaUEA5yUuw-V0lvHWX0s-N0L04OpPPnpvnNBgEvEmy8dPBtGn+aMS09V+rWuYdMLHYUdT3HVu3kFimXaV03o3nHMWs4iguaM4KmoM8+CVjYMaFdF1n-UAjSbM7XDWk1DTZAD4kH8W2+4BYMW5+N-UYrCt2kX5oPY4a-xe-kyt8TM991MxN9NXXZqrRgcZNqjelx3QofYB2WNHJ3Z+kXyrctVWB9v+zMe5LMlej2X3Nk9MB3yUBYxk9kt7KduU+y3Acmh7uxgdoVFZl7k$avr93etSdnadqPb51krXq0pfZuhK0qjDP-H0dlirld7TTHyMP-r53WNHPYhgMsdQSkofhkiOTf1vjrEVNmYy9ghsK8RNFHfkBxG9kXhrS7zrV055G$csZyWPLWh1Y1huuqhY70aeni0eAiu$XqVBe1V2HPYB7x6-VlqA5AmXY-sHhihSPi2nm0DVKufUofCgHm0nPvQmysy-G5+VNMiA$iUfrqfHal3m$2ks8Km0xMfUerR0bQm2Q$5sV2xv0k5DTk8dK3FAEBakfd5u3Uj-PPyOsearolCK5VLYKPU+L0sQCWVDjQq8g-UWN1l7NYMaa8GKM$5SJ9Cx4+$Ufrd3h49+edbl53cqf2Ouy8cSvu7PDPKZjKOBBuydUWw2-SVlv+rKtBqsYQkT+5rUhZU9sNLv+2Ukjna0gVamgNCTu8AMad4DlKJ4hrLanP1+EHtPUtkYUQskhMBu5VzPGdbs3+q51yhTbPOTf7bT6xP3xS30VtrZp8ta+T-49U+vdXvtCKnT+XUSNSx1As-0HBYV8T47rnesu4lv3mBUruNtzYaUnUO4zW2+SNw82MK-9Uef2nMYhHaMsYCxaD1+okrWNdW9NHhPr+M8Ms3VBnDqZ8mWr-YUr7bNRdpMEyyxosCQbMWYOSSdRidNJ93qjDy0r1pBUisYalPdMOWXYK1xQ11T+9d3$45NL5fQU93mCd7Av5m4QA$22WwXBgeMVKbDbnE+5WmOpe+ZF0Ye+sbnjPT7Cr4rfS3dOVgS9O9$ZfQXPKA054arzlvsSUyZb3sMRURUJ3dWVPdu043ymi9mzBYeqQfWXHedsaYDRauxcVx-EfaWRTDddKna+nL0drRWOimHF4x1lNL0pHKiOWm7Vi9W1rNApuk2-x3zCugBiDn4A5V2Hy3NUkhT+liyN0Ve5BpyWiEBNO5tF5em7-W0jWpQpvj4dS4Mb4BDYkd5Bjxk3rHKL7Lit93QkY+PTr+1vmd45u1HMWi1V2VTeyjyjAEVXXvl9Hp34k0OkmHBfjvZxsM-VlK4VBhigXz3HUVPztjd72MdKAf1mUHEqKu+AaCypiBCBMitcuViY3s+7AMN-56a6EEmdV+1xKV-65etGWE3rrtWub1SvS3sa09x4Dmq4a4acKcKNP97afYVYfXXS-c8m2BFu13nTDy-zgF5GswXiXGOGZPTDnkNl-k$ilemys1d1dY8TigNkawd73D4WDTtrEY+YBSqg-cv5foeVYCaa1Ku-YMnT+ZU3l-MrM6TeD1lvlY9uHVXYqi9BjDYaBlHxP8XG4sWcl9Xp-WPHSCBYqYt9VG3oS3roaVkPH3NHlQfefUT5uUg6hmTR79-Sv8kCVEpSO6VkHMaBWJtqYUyorYYQYVdpqfZFvnKnY59YT1fUV5yUmHj+fNDl2UvclND503zBz7RHQ7hrwtT17BlA-YehqMSca4KQDOMOeMnh-WOpxpS4+dGyijYKHCa11mfVoLPYu0C3VZair2q2D27C4TTJF94MvJ6C7R53Gx3UD8dikAVjG8XBHpiLfYmyNRg99nPeOgC7vgGQKnPXT9Yk0h-2Ojmy$g0NsNgB+rJ57Cl5+8iDqacivcALg25u322cY9i3KOmEMEmo2BhaQCrRTvd2DiqfPaGjVUTx8h9pSmDa794BC9DcD29WDjmnPTmg4CdwgjKrRGdPONjlTkZD4KBvs7NGSm4l7uo4qDcoYpi72Fn9dT8el4tF721-+B+YzYUba0W42BMfyvHhNg43+pZhWvOVMGO4iLVolvvCk3LCVEULx$HV+x-ZadMHpPCEyE8AqK29qKJvnaJoV6QGxD6EsrUfkhBdmk3tZ6rvWm6K86-fEh3F0YA7z0b0hbe0Fq+l$J1LsP4Q5YfNyYukS98o6KZiaop8E20rRX5caPCOtQqMw9T9mt7bT+dQ7BfP-4iXfVNPNH0UANWy0eYQxh93+EPDEHT+Bv0UQdK20EOqagF7jMDD2BqhWqNGZPj8jX$G$Yl98ds3lBPpBNrYoBaJP2YR3VKn$JgBhNZXhAAwaPDGA$XjkUO2YdV77JFYRoHWcWc$zZVTnaOrzEDbkx-6EjL5YSD+$+8swH6N83xMGYhSsi924Qx1ONsXic3PEFTnnzO3NVme0HAZ-josrJOR81QsyWx-PTuS7XPVbrRynRUszaUY+LbKS3ig7zfW2FN$WydteRFMa4d4P+bZ7CG$3g4W9J1OxrZrZDiPRrcKQmKHAZPSwUK5kAOrEV0+wK1UQX9mg4V7QcUVLnnixErsN9YAK+XUxXsXYMYU7XjVpzNt0t0aG09EB9usuVNSml4BClnW8GDYuBcxV10UUOt2Rf48eTq+83aV6CTxnffBGUQ6GSPBrAvWGPFsxsAWFq3ddbAgZREyNEg$nabY9-zHPEtWo4ojgmTH4aN9nh$Bk3w14+5KzdmCbCzpm4CSh4FWRVGdk2CEVoi9DHmladrhUXUQL9OiSyosuzDHuY-hXR2M4YFZdt+97OE4PWYUdd5f6D1H9VfXs9OCB$1Ol+6+UOrfHdBe3i$CDGl0VhzTqdw-nsmyZG9QrgYHmgWc0vZqugufmHucuUAZKCJDLXcz1XJUyTaHHSE7v8PbL3U6KtvLuHjHp5VHEVrWj5nEALNtSWEBX85WKGDGD8dRh98G3SPTAV8TMjzfc8XfRmwrPjLefrdrP8O$KkzTQ3T+qjK4SpppobJut1ar+gzhhFvhcj$nntvUwY3gU6TeCmZRW0KNYaAj0QjJjZTcK4DPYlsvcVZyzaiSCNGHfjDB2TqfsvShQ39+nf+ibEfDsg+r-Ar-FY4tBsrXlyvuVk-mV7DVkzMyRnAf+tTd8+mlBVVanuSmjrVzM5tpNui86onBWsfKkt2CfxkrVUOoNp9YnMYm8HElB2j4VQiU$RxvBmMlUmSl0J8uOTGDl+TG19GiR$6z0xoV0eVDg$bMUakmmXApuiCi7z0PaupOzkrMbudYKbS5OoJxJ6uz0Youkmum8QDMgsV0pYmBVw12jjYrmn34SL$dOa6dg0$+kByJV1BzBNSn3y8ntcRVC6+d2olB1j1G3EuXkVD8HyGMDCQ0rlUuP-cMVS3Mso0QgUnarM3j+363hylfBaknVH28BqHAfQURdhf$RVf+QfBikCkn79aWmMKkO1nhArYBfH98LKAUkoKfsU0YnKA3sTJ$y3o2MJsvCykJrbjyHBjeMkyVrMj2xuSbUofoYo3hrBEPjyGMgu20Yu7YnaQmcOVpH$FV7Malpn4U6KhDWYxWDPVdMhgNzYrMay3xunjm1UkY2BUjhnXiKG$eY7jQtfw3Q$UWyB9sBJAOlf$836rlSAEv5V2KUBTdmeP7Kbuq$QN96MEyGMrn$ure2iMKmRKhndHijaBxNmldbBYn$$YBTBBXuBdD8Aj3oHLnX683jnVPkfTjrrlK6EndMlfTzARuc7ijSafsYdrCUq3N7qoX+Avkfk7TX0UBrYVoP8h5ko3dNYHSUkuXlofHYBlsnd$PnV1-0pKUGlDdVuYLGn93lFfcm5UJ6$Nf6KanC08MPYaWsBJ33lCShZBonZr7u9NeYCh6ABLrQ2QmoikH1NHhSASkKlvc6kWYlSBQmfyJuGdQtUBafY4LtfKuBGUBl3xkmzADkBnJ27jDjfOAM07HcoNrnmy-mzlO8kJ-B7WKHuvMG7E0XY3hMsl0ujCYYPYSPyN$6h7Cj47HqPQhd5jdCKFrfuK5pMF3lopumN9VtPVtkLVMuKf+HA61TVt$w+mpr7lRf-ka$-qeuVTj1UDyrDoY4+lkpoc1k3n9nyN48iUfDMgaChADPJQvU7umCN6gfeR+bnC5tBvYv7ntmPuO3zCxYdsM8kNQkBMHC30tM9PQmbur6vhMftreGx$rEuWY1JMCkgfAXFBjkYHKndx4d15uTuT0rzksSt3uGYBBVKM+6M3jEgAo9CMtuc$V-X$i2tV9EQakBy0GQ0x77WlPnYK26YBMgA5Dc$xf8a2YffVwkfM6MwuS0TNW1Cabmnhtf3Noyi0JJHoX68KtkrCkVkDuj70D-dD-Mnd8X-BPhY3ulyoMRnu06ssuf7TJvmB+sNsb9ipVhhPzxYoJnfmo9+2ratamv75v+QskNzp7S0y6QR4okAE1Jzr3ZiaM92LszPVaTd9Q$mJ0zcubwA6+HA54joQ2wQeoBSPrCuoprksxjx0DHUHU33MUK$+CBnBtVrH$QB3lakH5PuuuaZjuhV7kAujZDzr2i6VGdRjadMGiuaaSduMfgp3JZ4uWnUoUM83nCAYiEmb$J7ua6heHy83B0jMw0Gr8wj9UyKRVGQl00vd63Gkz0MbnOZdcGk5uRP3Bm3eH+j1x6Tuwlqo3dUiRDO4M8oxe+oumij4v2f6K+xGymAlHEtoY2RXUpwb-kguXh4j3h3XVNoB06Hwfy9A4AM$GXAb3VnYkDsa0Ja6HcclhAUAeMn2mjYF$KfS0fMWY6HwNTr0wsmXDWQVkR4SaSx-V03VBfRiDr942Eo3uaeaTTQWssSCnfB+fMGBiMt34fJA479V+YuM3MsCr6Hq8yakcdpXcsUe54BXVscs3krOrkmfj0jsc8Eof+y$jEuDM802t+eyKeEU6f+ubY8k5ekMkEMLHB0Ua7mkmM+dX0U34jqYkgSD02u1oT6Ma0$3FK4HR0yrrL4f0Ld26ksS6ryBRuBs4SE99PBXDwJrTQSojRGx$jXdauMSXaVJlBQD26uABSs+Wuhfr1mnpS2jUYyyyVY0MZS+61orokdv8JmYa75a1AlYVtVUul0uBtwLr6t340G2mt7-$O0SJZ$9NvClV$RK7KYhy3WwMil$dScFNr7dw09yaVru3h87vRfti-iOdoHOYNt7pexiEjRh3RS+rETbsSuf6ZNv8YYAjhM5thbYFKA9y60SYghcsglMhkCSi7HsbwUWYhfM4EzpSU02t39BNMmCbubNgxuHMHAwaABCE05mHrbiAciHbNFDiqyth53OhM7FDPTVuC$svYkEO3teBKut3t0ehawWbeF5dMf3CNh0ruXJ0rSgHqEp9NW+uDRzTYi7dM7ee0aF5xhM7Ld+$KVotnhuj7-GqBMFQ6Q6hM7XtTqsbiWnfjy8-G7Beii3QPuXq9wq3OM$j+y0aju82ogLcvcJWwGKgkcmto+up0hGVGqiLfMBypSBV00P5ab5aKFjbV1fv3ZfTDC0V9VOqVbAf9a6mCbNwm2BmW$2fRUBA21uduaaYQCaFh7nq0lFiPQxnbrYCSpQj01oQjtV1aSvU15rCEUcdRoBuXBaW+ZYx7lCS7M83lCpUuKLtYoXh0$+aUpdsl2uXAi$+crF78$KiaD3wQxfmWUwqhmKa$Qa5Hvu8DrV5sJd$0OdPMSjAJaJJO$Q048BAB4A7np7GVZ8yaHrkvJDuOG+4fHDf9yQ5JCJ+GMel4YeXHmvd0u39lHbAlHm1Kvn7T9S$WochPPeXS4fNaYQEVAyMXnpB70dJVVigUX3hfMmZrYrgJCSnNNR9cQth2J5GrrHH+vcLhL0KX39QBV5Mvups9Ju9tvdiB8jz7n$7EvT33XbhM7jf33V+9fhh6L1VBeEOJH2jRUH+N+U7Z+ot3guN3nmSpB71og7UYaTNaZGn99K0SOuE$4aAjR9VABjoBel4M5C768U4s8$nVPlTo$GCH0359xy$Qfh48bNEWB5d46t3Hrtjl5KFck0SCbBq3e+fQBt5mnWUqoFU3hDACZnxUYB7tKENwsK3q0efK6T+vb$p+4fMA4JUVBTTFVWBqfnfUFpnu4VGUxoCJyQBCgKv-0qNsLarV$aKccTa7iC2OQy9wQ65dk2LnKfcf5yWXMGrLacrW2mHpn5u6rufAocuHgCed5AdmOGV5+r2f2wD-QrTsmuBLksK0lb+yawJpTmE0tntV4ajM0ht7zynE8Pubc2hngGtaie4D5gTK+7G0U6AQ9-fnTpfeyTPHx9wnRLZ+8T2bm4c5gJhh2J89DXb9Rg4Sk7COa2vxsqjnL3RrSaGOAaCQjLHR$lxtgAKnQCLm3Bhaggi5OoLLNEJPBRgNMQJ8f7Bdh3+gTTsXihngHO3tvl1ehhfMRO0rddETmgQhTVXO4qBpDGvZ5ngLwDAVm6qvAhg0-w2WgT9RLTLOgdMqWgTa3+SL42dMqtg0Go+05NmiEH0ZujBQ$CJmOM2wODTYQjL8VCTx2HBTPH1TS2XO23gsT+g+UHEA$sGXHTzggyE1VzxLkslygtUR21$Stgy97QP8qVi7HBZpQkkxTfdHzqCH+VK+CLKgPnxOKYpJ+2ybmXnTKXYGg+QLFDln$p+T92Q-UY6XT3YvdobvGBsPa1alOOAu21tLd1t-lOaGlXl+z28lK6Og9Y2qUYmZk46Z3Df2qU7V6146g3Gt2B5gmvcDSs0j8235rmHLas8NpDMN5g6iz3UUVGwXwnfDhkKaNO95+-LWKCQnaU-Tygt57EGcn58DapvrO5rxSqO+T9hxGYnPPSKr8p9S21TSJjSKXOOaLx+YaJzy3LO+p-+QLlJ0hn51YL+gtOlDvSDjObUb++uRJZvTj8Y1Oxz5QDdhWPZKLZVG+L0QEqgZskEnX$-6hx9XPhffXMULtqcBokBT00vueK9x9c5fGbuyocoMsnKAxDPfBu2YKHBEU+9CvF+k6ZxyrmoXbu9HFuYFiWCLfVvnX$7u0Z-CVARVAB8byR25H4DF26nN2HBfzXnUJxflFxe5nJv4kWMUso0KuuuAXr-4Mruu65ZKUoVaeNeYQ3sRVeMvSAb+jtKMquHlLBtdn6yH0j$X$5jU0ubBEMSGmlMB2YmK1PHuuf+oyur0ulMBlA0WoqJMBAilD0o8v$lguCuPAvda3coDBWXVgPGBzo78wN7vOokX$-0P09i3uuX0046uulKdbh-9u-H8L44MGMPumfrpY6QuMsHX-93m9S1XLLRbz-y8P07BUhp6$W-X6993umhW-y8XMrAXDM$bW-DNmuy2u3VRb1-Zt0kt1VHVYbruP0aEtiZ4GEbSfjo3JVNfCp3MYz88Np4wKBkkCHs2Yle2ouH5RueOu3BcQO44umuuuOkKkKUJRPun0BU98VxprMDzF3xuUSubGugvHTHSy93uYV-bGuafB0$tftPrkOMEH+jtd1ZCWzcfafWJMwrV0MHjoJHmrrpZH$Ynrh-n4Df2e+U4L605jgt38KE3y3m62Y-OS18EMOM1YmwpcPdf0lD$7-wtHVa4O60sRUuStgVy-3tuDuv3LoyF7M+6nD$yuLHTeWPU4pVnsuF8OulufjuBujkPY+VfcQooy3iBLBOrMV5Sj44QCLBgVtVTeQf1JlN3tjrEkRdmMPu8MiZx0MrsEulE-HT0hRNg$aA7u-HKYWgOG1HJtM2Yuur4cR7Vaf7b2WcXdHRk8mtbA-FO$dFbX0CtpY+4NCLG$aYY09Ck7uuVw8$Huu"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 18:04:05 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: pbLTOnj8mg//zEufXiZ2qA==$+mUipOMQiZN0RlXdM9sF8w==\r\nset-cookie: cf_clearance=YPf9IAfHRzga0UaQlSVEup.PvHrvcQgg7ASKptadN00-1774461845-1.2.1.1-vwM3rRy0T5aDQhIX461TD50P5qwfKb0tqI6bQRZ915243U_RuP7WRhmKq0sHWYmqlC090TbRg6aC4jJv.ftF4USLVn960Vs5M.nlDkqIeuroR17FCumYDYgW3eshMMqbCUJ2SGR8IdBb9Np4AfsLBdAY6kelfFYUpEOPejgW6sdIM5sB5_Or4TAIvMtEDaykMXqzhn9MwQ8fsDNl2dhO7M47NVQFpiiReKCjhVPdGSM; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=bitnestloopreturn.xyz; Expires=Thu, 25 Mar 2027 18:04:05 GMT\r\ntiming-allow-origin: https://bitnestloopreturn.xyz\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e1fd607ea5e767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"bitnestloopreturn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitnestloopreturn.xyz/","fqdn":"bitnestloopreturn.xyz","domain":"bitnestloopreturn.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T18:04:02.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitnestloopreturn.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:30:03 GMT","end":"Sat, 20 Jun 2026 20:30:02 GMT"},"fingerprint":{"sha1":"8A:7C:68:95:8D:67:58:47:9D:0F:C2:63:00:23:A5:01:38:C6:C0:BA","sha256":"2A:12:64:F2:E5:96:6F:66:72:17:36:AB:17:2E:EE:00:C4:53:7A:3E:01:61:88:D9:AA:9E:30:78:FB:74:4F:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitnestloopreturn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 18:04:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 23 Mar 2026 20:11:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJm0rXK56xtcYjdDp9LwSeFdSkUQhFWRFGcFIv3t19XpobdcoDjRTnOl%2Bs2L3wfNwSfhHGWGtz%2BAE1IvoVDhjq%2B1B7UpleLy0krXeRNsRDixN5dugg%3D%3D\"}]}\r\nage: 101550\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e1fd5f19d2bdd81-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":18540503,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (44341), with CRLF line terminators","md5":"c734cc0b94f6defb2db40bb094970dc9","sha1":"d5372779af2a5cbd1e9bd49ca0786cbc266b09b7","sha256":"ab2f05f40388c762e7b58f07ac955113995aa161b085ed2608dedb412cb41b23","sha512":"d80c0f01c1b97283a586afc655fb0f3a8c175456fb8a04f44ce3c7d65707221fe167d188e7e2ba31eb68abad007b24cbe96ade2c8f35dd738ad9a28ba5b5108f","ssdeep":"24576:QnCFwniOQaeFniOQaeZ8U76ZbnHin+Wnn9pGzsRcZyL7Y:lDaHaFXEn/zQ","tlshash":"1b25f1745e9cbd0f17761d8a5b523d2a0d7488cf6114c0eefec8b1ead58e9299e38c90","first_seen":"2026-03-25T18:04:31.564052Z","last_seen":"2026-03-26T01:05:22.140122Z","times_seen":2,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":99,"dns":73,"connect":8,"send":0,"wait":64,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"bitnestloopreturn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitnestloopreturn.xyz/sinon-15.2.0.min.js","fqdn":"bitnestloopreturn.xyz","domain":"bitnestloopreturn.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitnestloopreturn.xyz/","date":"2026-03-25T18:04:02.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitnestloopreturn.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:30:03 GMT","end":"Sat, 20 Jun 2026 20:30:02 GMT"},"fingerprint":{"sha1":"8A:7C:68:95:8D:67:58:47:9D:0F:C2:63:00:23:A5:01:38:C6:C0:BA","sha256":"2A:12:64:F2:E5:96:6F:66:72:17:36:AB:17:2E:EE:00:C4:53:7A:3E:01:61:88:D9:AA:9E:30:78:FB:74:4F:F2"}}},"request":{"raw":"GET /sinon-15.2.0.min.js HTTP/1.1\r\nHost: bitnestloopreturn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitnestloopreturn.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 18:04:02 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 23 Mar 2026 20:11:02 GMT\r\netag: W/\"12ade-19d1c528358\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtylwrQIvutZNKkd2EKsRqMEOsf0xxI4li4FGWPugbfJHnPQkress%2BrogdbXpHdiOFUBEtdsauejgp9f%2FXaNLVArLjYVIuc6rAsYNIF4cVILNKO2Jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1fd5f33fbc767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76510,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6d8e44fcd73f489564b5d93322b84ee5","sha1":"e22c8f98fad17dc1db835034dc61fc71d16bf19e","sha256":"6a3bbadd263fdbab034f9928030a172e7895168224059bcf2cf0f7dc9f9ee15d","sha512":"be57576b408d2c3a67cb2a37cb1343038e5ad6d4bdaa86ff8ff79cfe6c910f9e9d4e55e16fb225252d53fdd3f0c03a2fd0cd6d4c744f607d787a1ae17bba6a3c","ssdeep":"768:7BcMWCrj9bnj7x42ChDfMeyQ6t22z8+X3L2Ep0Va8hcWcw9cYlJtH/ttV7Mcqn5O:Vnu2ChweCY2zRnL2kcbhHidJKX","tlshash":"4573d8da5806d4d98e6502dec477f818e0684e63cdacf097e62ddcc2b52df26848723b","first_seen":"2026-03-25T18:04:31.56561Z","last_seen":"2026-03-26T01:05:22.141007Z","times_seen":2,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"bitnestloopreturn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitnestloopreturn.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"bitnestloopreturn.xyz","domain":"bitnestloopreturn.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitnestloopreturn.xyz/","date":"2026-03-25T18:04:04.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitnestloopreturn.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:30:03 GMT","end":"Sat, 20 Jun 2026 20:30:02 GMT"},"fingerprint":{"sha1":"8A:7C:68:95:8D:67:58:47:9D:0F:C2:63:00:23:A5:01:38:C6:C0:BA","sha256":"2A:12:64:F2:E5:96:6F:66:72:17:36:AB:17:2E:EE:00:C4:53:7A:3E:01:61:88:D9:AA:9E:30:78:FB:74:4F:F2"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: bitnestloopreturn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 25 Mar 2026 18:04:04 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e1fd5ff8d68767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26522,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"bitnestloopreturn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitnestloopreturn.xyz/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"bitnestloopreturn.xyz","domain":"bitnestloopreturn.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitnestloopreturn.xyz/","date":"2026-03-25T18:04:05.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitnestloopreturn.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:30:03 GMT","end":"Sat, 20 Jun 2026 20:30:02 GMT"},"fingerprint":{"sha1":"8A:7C:68:95:8D:67:58:47:9D:0F:C2:63:00:23:A5:01:38:C6:C0:BA","sha256":"2A:12:64:F2:E5:96:6F:66:72:17:36:AB:17:2E:EE:00:C4:53:7A:3E:01:61:88:D9:AA:9E:30:78:FB:74:4F:F2"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: bitnestloopreturn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 18:04:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e1fd607084d767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26522,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (26522), with no line terminators","md5":"e62dd9fd15ba859ff4b334377ced00a3","sha1":"0bc21d33064b8fd64aae08427c30fa10882ae0f7","sha256":"147d2c4d9c789ec91e6451eb9a957448175be4494bd3ccb220f6233930b45ecd","sha512":"82c74e4f873f7a326ec8a4c253de18d6b501a6ef82496cc63cb9c16ef6aa6239ddd7ba10a710765759bd67e2decdfcb3239cf7735d926ae748717f7f7b7fa042","ssdeep":"384:tgQ7j9+XyL+bHKwlyWqxLAkvVgSbRBlWta6Sj/h08ZpopbfIJzjQBstzfG/6a:tgQ7jUXayqwgWqVP5yaX5ZpHJdtCt","tlshash":"cfc2b5cf79c7787bd3756079207ba8cfe269ec81e044bd08c130d9a87da63889957e58","first_seen":"2026-03-25T08:28:30.031196Z","last_seen":"2026-04-02T14:41:46.402308Z","times_seen":608,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"bitnestloopreturn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitnestloopreturn.xyz/secureproxy?e=jscdn/getFile","fqdn":"bitnestloopreturn.xyz","domain":"bitnestloopreturn.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitnestloopreturn.xyz/","date":"2026-03-25T18:04:05.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitnestloopreturn.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:30:03 GMT","end":"Sat, 20 Jun 2026 20:30:02 GMT"},"fingerprint":{"sha1":"8A:7C:68:95:8D:67:58:47:9D:0F:C2:63:00:23:A5:01:38:C6:C0:BA","sha256":"2A:12:64:F2:E5:96:6F:66:72:17:36:AB:17:2E:EE:00:C4:53:7A:3E:01:61:88:D9:AA:9E:30:78:FB:74:4F:F2"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: bitnestloopreturn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://bitnestloopreturn.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"gsde9g64widyjxk2nfev\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 18:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zojer3B8DasMzQ9ZoC4E7EzBGccueK%2B6gT5w3jmn2FNaOCXaeTU2kSN1aNsVRC316%2BbpHZ4hwypLNVCu%2Bwma2QNLX2jbVvmc2d%2Bjk2Je43PE4qTEPCvNfjHkeQ3ngVfHN4fOnus%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-ray: 9e1fd6071874767a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4039670,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"16b6be6639af9ccf60b5a8f598a95189","sha1":"fdb4994a2044f3dc13331f034f88dccea23ec70d","sha256":"781e2a10ca6d4b4b451bfcd7d5491124e17d29e01338abf003a637da6b7d4cae","sha512":"105c34974dfe27cd7d219551058f374913cc740f942af60a6e98cf6843069de84eaf9e9c4e61be48e358871b1a887a98885749d24891e0df345637d94df1e541","ssdeep":"24576:h7M0RNhFyaDbWvrb8X8dvsAXdt5WweDcdQRaYRIek18:h5tOLdKwYs/C","tlshash":"1a2523909e93a426cf8c56a690e76d9e91600ea358cda1ced844fc5535fcff082ef41b","first_seen":"2026-03-25T18:04:31.567657Z","last_seen":"2026-03-25T18:04:31.567657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"bitnestloopreturn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}