{"report_id":"d461e3f0-4519-40e1-a1f1-378dda86808b","version":0,"status":"done","tags":[],"date":"2026-06-20T16:39:23Z","url":{"schema":"http","addr":"affiliates.bybit.kz/","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":0,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"affiliates.bybit.kz/","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"title":"Bybit серіктестік бағдарламасы: Әрбір мәміледе эксклюзивті комиссиялар алыңыз","dom":{"size":362552,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (55638)","md5":"12ab95c52e21cf314efacff14273f88a","sha1":"73bb765ff61f1de6576b1e98fc77252d18f5b5f1","sha256":"2768213a6485ef297106b65e0f3056eca32377dc005ccae6fef9e68b8cf648d7","sha512":"58fa79698f4613721dc398e3c7717c17925e81ee5a677f957b3e2f0eceb15093ab8bc7eb7c27a415a2bfc4cde1b228b634ad67c64039c4e0adbb00a853409db0","ssdeep":"6144:yaniamCtovAilvL78RzYZlCRtgTmWAFvdy4+ZEl8xCnZXOrSoYxSu9MrbFkz+lKd:yaniamQovAilvL78RzYZlCRtgTmWAFvR","tlshash":"cd745345624ad8ffa327ed521d343e1a2885587e7be763a13025fd2e39fa17002bd742","dom_hash":"domhash10a2b2c3463c128634e2a349ab1182ef","first_seen":"2026-06-20T16:39:29.630766Z","last_seen":"2026-06-20T16:39:29.630766Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"affiliates.bybit.kz/","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":0,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-25T16:39:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"affiliates.bybit.kz","ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2021-09-15","domain_rank":0,"first_seen":"2026-03-14T16:39:20.469208Z","last_seen":"2026-03-14T16:39:20.469208Z","alert_count":42,"request_count":42,"received_data":5509198,"sent_data":22220,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/by-vendors/by-vendors.latest.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc69cc6c6c6bbc632e3a23dc5683add8","sha1":"5a97e15bcb8b861b0d0cb0767d66f7bfeda26995","sha256":"e977572e0456eba201921b07f789ee9fbbc8f595a6946f21726ec7225c171298","sha512":"ba0167bd7680fbdaf4e6238797cc83a8545ef07cee93450362532fd4e440cbce80e990fcd61e4621cc2b05c2cc125b2d85efa259664727f6971b7a75eae865fa","ssdeep":"3072:s+w99Gwl7yGx205hs8quNlIEFHptwrNObnoyLpOKPoMyAwj1H:I5hs8qzKHpqQbnoy1OwoFJ","tlshash":"da046cd272a3f16652fa14e6a0670011f3397e19348c5094f21e6ed63856b8bb3b7f39","size":186905,"data":"","first_seen":"2026-06-10T19:40:47.006405Z","last_seen":"2026-07-14T17:48:51.123826Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/common-static/fhs/compliance-upload/low-cache/compliance-sdk/home-entry.js?t=20","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"af3170d8c2a63d029d996a9b3a92d446","sha1":"3400cbbd829f6b35d77b3da4add0733d4f371d62","sha256":"611ba1d884a3d82007da3169b533b47d2c72a01d645ee9488e6c3b6dd4918684","sha512":"52c1444cbb262c6eb4023e0ca33d2dd86c22710d535deb7a20d3957bdc6695d6b0f391ccb2523f7ecdf434ac96b90ba9b4ae95655e1957b2aaacf84cb218ccc2","ssdeep":"384:+f/nUGbjrby8O+OKOSqNI87I2ydC/A/Kx0wLhqRqascNZQyJnDF+1IPqazFgydT8:kvUojXWB9+VYascpDKYgMY/zR","tlshash":"f913db457555ad3b0097ee6f6c2f0d3e393ba448c118873adda5d06e0b7efe162223a4","size":41547,"data":"","first_seen":"2026-06-18T16:08:53.193654Z","last_seen":"2026-07-25T18:14:11.505839Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/home/loadingPage/worldwide_4.png","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.743Z","timestamp":1781973548743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/home/loadingPage/worldwide_4.png HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 05 Jun 2026 07:54:04 GMT\r\netag: \"1955802c2f4b14048ace83c68bce4db8\"\r\ncontent-type: image/png\r\nx-amz-id-2: nGy9QhGUevL6GuXGnMmRq8Xyu/YNOOuRxLBz16gDFdUALXDc/kDr0rwaAm2npeAy4zpUNPsXiuUg50OeVHD7rOa8utqG+FHe\r\nx-amz-request-id: 30MND5R8DVXY3KZH\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 942390\r\ncontent-length: 276155\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 5251461454311534857\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":276155,"size_decoded":276898,"mime_type":"image/png","magic":"PNG image data, 535 x 286, 8-bit/color RGBA, non-interlaced","md5":"1955802c2f4b14048ace83c68bce4db8","sha1":"0e6c707bb45a3a865b6bcbe6efa816931b5eca8a","sha256":"f4f21e41d034da2c16ae5108dee3a96d08541b31095ccdce436b8606236f9e09","sha512":"ebbc0f513c6d6740d03f0bfaebd067a252995a2415b2a5c92ae3cbea2fc2f7b6f8f7ee8ae9c62770f03e7c2313a66185826efb8e1219c0d02c6724cf63df8505","ssdeep":"6144:QxL1o+u0HV0Jzz0rKZAFOo0LLV2crLY4Jnex59N/0k8Ex4:QxSgozz0rOoRcw405DR8EG","tlshash":"b44423559bafd222b09be5889496fcbe0f0639b9d37b1c4c44ce670a4c16c78cbc1276","first_seen":"2025-08-21T17:30:09.643037Z","last_seen":"2026-07-25T18:14:11.492972Z","times_seen":189,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T16:38:50.423Z","timestamp":1781973530423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\nx-amz-id-2: Zd8YVJz5uXsSpsgKSTDAcjOTFvWagUQkVXvF3BIf6qhqELhH0oEMMHUA9jNU04hC+Sd0JkYrK4qoirXoU4KeaGJl3dJ3WF4/\r\nx-amz-request-id: DAJV2P938FBF5CCP\r\netag: \"3085cbdd769a68de4063a709c2f4586c\"\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-T\r\nserver: Openresty\r\nlast-modified: Thu, 11 Jun 2026 09:08:34 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=60\r\nage: 0\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:07 GMT\r\neo-log-uuid: 13697878559188733548\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":301411,"size_decoded":70017,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23076)","md5":"3085cbdd769a68de4063a709c2f4586c","sha1":"ce2c6176c1189b75069da6fe3da9e98b92bcf7ee","sha256":"27bd2bdfeb89410018c1d4b08b2df906c2d3aedf0efd5e89d67442dfdf320b53","sha512":"1e35030e9c35895724203daf1acd7ff599a8ef29bf4c36a87f51a4a5c0194df73ea595184c91b8863795acc7123e502099b6320ced3fbf7dc750f6955bc189a9","ssdeep":"6144:+jtovAilvL78RzYZlCRtgTmWAFvdy4+ZEl8xCnZXOrSoYxSu9MrbFkz+lKRxGpbh:oovAilvL78RzYZlCRtgTmWAFvdy4+ZE2","tlshash":"4554ef96650ad8ef9322ed962d343e1a28c5087e7f9733a12425fd2e34fa270477d742","first_seen":"2026-06-20T16:39:29.633744Z","last_seen":"2026-06-20T16:39:29.633744Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34796,"timings":{"blocked":-1,"dns":16994,"connect":16980,"send":0,"wait":787,"receive":-1,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/libs-a734989ff2580041.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.635Z","timestamp":1781973548635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/libs-a734989ff2580041.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 05 Jun 2026 07:54:01 GMT\r\ncontent-encoding: br\r\netag: \"173e8e8898bf45aa095cb9ba34717b9b\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: yXfsSW66iGBcywzk9zn4TNAdMc/6NjKmot7p1YUnLuD94WkMZE7lLUpP0hyastvRUpPBENJIF+hL4RXud2fWQTm/pIWMn7aI\r\nx-amz-request-id: WQ7PDDF05BNX7DAN\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 1292318\r\ncontent-length: 3067\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 5794174847360345995\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9578,"size_decoded":3859,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9578), with no line terminators","md5":"173e8e8898bf45aa095cb9ba34717b9b","sha1":"8da4ee89f11e9fdcda601e7721673a5ef04582f8","sha256":"54225296e4242bc15a608869c35d2ac8c241b1b77698ef60106d10ea8aa1e2a0","sha512":"f0441be00d7200deb4ba418a6d9a1c7f7d1a7a77776766b097d4b27fb244dd088da19e86da9e6be4d34ba65e84ba06a143426206fc51a1ec494c5b3cd38a4960","ssdeep":"192:kjYUvRnKl3A8hLzQaI4+ajZX/+Afjuv4hpBGlAR:kYwEQUvQaIgZdjKkpBtR","tlshash":"bf128578b5972fbde8a944c8df3f0008a11e3e588a1c58687e6e5845119cbcab153fde","first_seen":"2026-06-06T16:29:24.692461Z","last_seen":"2026-07-02T19:08:08.582871Z","times_seen":12,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/app/%5Blocale%5D/page-6739d9190fe746f5.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.646Z","timestamp":1781973548646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/app/%5Blocale%5D/page-6739d9190fe746f5.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 11 Jun 2026 09:08:31 GMT\r\ncontent-encoding: br\r\netag: \"84f99ebaf8c67ad5d08c227155675286\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: Jsw1b37wZZufWWTANOewX7YuLVO9Zfp7fG3yzeC8DvE2EGvvewEWyHPLsqgYwHyCMxb/8CpmMdGFNBc8b4y21RdszJX5Rtfe\r\nx-amz-request-id: 0KRR453MGS5J9C3V\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 592833\r\ncontent-length: 1671\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 13421272549510798996\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6029,"size_decoded":2463,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6029), with no line terminators","md5":"84f99ebaf8c67ad5d08c227155675286","sha1":"4389b277ba1e41b72987f8268e4060d44d4a7885","sha256":"0abaa2c94e7871be3ac80f311c8651349faf46c41499a0f2184317ca052b176d","sha512":"f76ad8560ce5ceaf32cd53cd110907f5506a63cfebb746a559838b0bd8197cc6da59bb94f9ee12f7b20f5f773dc3d1b33056c2320068188c3a53a63e31086193","ssdeep":"96:wTUTQ1dD8ipdpWKrcjkkOjakijiOkry9FrcjuOj8ij+kryCvS7eG1Vpg1AO6:wTUonmkxapiMiXxcGS7A6","tlshash":"44c11d2c850abfedf95508847b2e840db26f1e996e0c4cf43a7cb92241466d4726ffc9","first_seen":"2026-06-18T16:35:42.564757Z","last_seen":"2026-07-02T19:08:08.593983Z","times_seen":10,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/home/loadingPage/worldwide_2.png","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.745Z","timestamp":1781973548745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/home/loadingPage/worldwide_2.png HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 06 May 2026 09:10:23 GMT\r\netag: \"45190724ed91cc6aea7334381114995c\"\r\ncontent-type: image/png\r\nx-amz-id-2: 721ujV88HFZsmzdXl9ivB/ej3sKI6mDfBJ+Rcxr04lzngge7dZc89DR3FNR3ko2GqA8epaGGYDY=\r\nx-amz-request-id: KE5YXK561GASKE3E\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: max-age=31536000\r\nage: 3884429\r\ncontent-length: 485132\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 12222017700239232544\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":485132,"size_decoded":485830,"mime_type":"image/png","magic":"PNG image data, 755 x 400, 8-bit/color RGBA, non-interlaced","md5":"45190724ed91cc6aea7334381114995c","sha1":"6d061d318c34e0b70d2bbbdd0f821527592722f3","sha256":"fc33377570fd47ac44b90c813d435323a78d49976b79d41f4b7b16a62c24e2f7","sha512":"330961f032414caa3d08715ccb1655934197763ad8c65828a21374681e9aee1260917de20f102328eaa6d17e0cb054b321c2f684676edb25f4e97dab46a4ea7f","ssdeep":"12288:AJJMBgbr5g4XZ4547QKvW8XJISGOOWptiJK2Rhs7Qjwco:AddgMU47ok6SKRhS","tlshash":"f5a423c7e1bc2e958486dd59337e1a9699f1e060de3981ff08b58ab6da074f24cf4321","first_seen":"2025-08-21T17:30:09.64399Z","last_seen":"2026-07-25T18:14:11.508812Z","times_seen":189,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/home/loadingPage/worldwide_7.png","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.755Z","timestamp":1781973548755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/home/loadingPage/worldwide_7.png HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 12 May 2026 08:53:08 GMT\r\netag: \"9e876dc0beccd04c8fcd8f7ad73f23b8\"\r\ncontent-type: image/png\r\nx-amz-id-2: hMMH1bj2XJzBQ6iVlfclYH1sdtc399aM/44HEsnZJKkO6yyHB0LZlD2smHm0402SSZ98ydbHeYpLuiBbLfTRw8SpO91V0JG5\r\nx-amz-request-id: MEMKNAN93B5D32E0\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: max-age=31536000\r\nage: 1932149\r\ncontent-length: 324989\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 755241386096173797\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":324989,"size_decoded":325705,"mime_type":"image/png","magic":"PNG image data, 757 x 400, 8-bit/color RGBA, non-interlaced","md5":"9e876dc0beccd04c8fcd8f7ad73f23b8","sha1":"ee08446e989aee6bb1bd750a7a0ba3462e995d8c","sha256":"a70257b3f5fd68137341eef71fe69889322dc895de3d418f51eec4b558492983","sha512":"19d89a3dac9a175887b50ea143900778ed1564e8593361cb24d70071ed94b464f4a99c1d38a629a978dbb04445c0f803fb9620850c62e1df10eec7761c47e118","ssdeep":"6144:chkInWJ/6rJPaCTdXeVd3eGWWK+jxZo3q6mzRoDrxpg030fa5lF9W:chPGuSMdMDKW41mzRWpgq1w","tlshash":"c46423eb260d1f1dab84bde8ccb41bdea64768ccdb358f269984ca734bec185c570614","first_seen":"2025-10-08T18:56:34.775048Z","last_seen":"2026-07-25T18:14:11.493492Z","times_seen":32,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/x-api/compliance/v1/wall/regulation-info","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:09.553Z","timestamp":1781973549553,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /x-api/compliance/v1/wall/regulation-info HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://affiliates.bybit.kz/\r\nContent-Type: application/json\r\nplatform: pc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T01:07:07.99671Z","times_seen":17753107,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/home/loadingPage/benefitsBg.svg","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:09.594Z","timestamp":1781973549594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/home/loadingPage/benefitsBg.svg HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 30 Apr 2026 07:52:22 GMT\r\ncontent-encoding: br\r\netag: \"be0e095d8099e6e311838dff10ef72ec\"\r\ncontent-type: image/svg+xml\r\nx-amz-id-2: hrcwKJW4fZEk2DUsa22rFhbYHpM083y7w+5s0Y0Xk00/402XfXsXE0TxInRz0rFOFzdv7vOmiMM=\r\nx-amz-request-id: BYZGH42TR6T4Q9SK\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: max-age=31536000\r\nage: 3884438\r\ncontent-length: 550\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:09 GMT\r\neo-log-uuid: 17732971248333932375\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":884,"size_decoded":1271,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be0e095d8099e6e311838dff10ef72ec","sha1":"60055ed0613b9f8a3b289f90640fab58c5392a40","sha256":"5f98f402d2fe888334ccf1fd8dd9810d32478d1f93242f08377817ffa4a783c0","sha512":"f8ab498a75c562ccfb19a995c97c2f8566df5d130c61f6d517c70f78569b957273fcd3aed4701469b120b3cacb9bd1d23e9b3807285dd729a5b4735254323aa8","ssdeep":"","tlshash":"eb1140bda29d9921cb0843848a84b604e29db1a991859170f288ff3f312a0d17a07749","first_seen":"2025-08-21T17:30:09.649831Z","last_seen":"2026-07-25T18:14:11.502678Z","times_seen":197,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/images/commission-img-BY.png?v=2","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.587Z","timestamp":1781973548587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/images/commission-img-BY.png?v=2 HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 05 Jun 2026 07:54:04 GMT\r\netag: \"c361a9a98eaa47c4bcf8bf3fe791c3b3\"\r\ncontent-type: image/png\r\nx-amz-id-2: bgwdNAd825jj15s4lGvm18pZy9985zIbupph7oHTrgUwaHPtpwmwYv/5cWAGLh3tYhmGmZuJW/8=\r\nx-amz-request-id: CP2GTRF87KMA56VE\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 942392\r\ncontent-length: 31302\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 6674342939235136323\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":31302,"size_decoded":32024,"mime_type":"image/png","magic":"PNG image data, 2400 x 714, 8-bit colormap, non-interlaced","md5":"c361a9a98eaa47c4bcf8bf3fe791c3b3","sha1":"bcebb8c9156e9d9254e7a6af4239f9e3684d24be","sha256":"a60ebfd2c51adc374d05f9dc2ffd55cf9942e312f33d772cb94ad73e9e393a2c","sha512":"59cb7c8145bd6e79a59ab9f07c78840f7c65373617653e0aea957255e6631dde5d4419437559ccf5dd2f8ca198faff211884e30c1c15df9d6dad34cdc10aa07e","ssdeep":"768:rvgubRhEVwltJHRuoPtgodd5lOa9wK0vVE1hmL1WDFndXp:rvgubRhEMNRre+d5lOa2PvVEfmB4n","tlshash":"a6e2f1e8c98bf02441650eae96596f67a8e56800834e7cf10c523af47f61b854dac4ff","first_seen":"2026-06-06T16:29:24.720967Z","last_seen":"2026-07-25T18:14:11.497552Z","times_seen":19,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/home/loadingPage/cody.png","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.598Z","timestamp":1781973548598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/home/loadingPage/cody.png HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 05 Jun 2026 07:54:03 GMT\r\netag: \"9e9b4fb06569378b2fe4ff7d79102e2b\"\r\ncontent-type: image/png\r\nx-amz-id-2: jZSPZ42Er8l0oM8kXN8f3E39n+RLUBYhCkVkx+ZJ/DXO2rCrs6Dd2tXZKc5dEk+IFqde2RaTF8Y=\r\nx-amz-request-id: CP2T5QAW4117D54M\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 942392\r\ncontent-length: 38494\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 10903092511142248004\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38494,"size_decoded":39217,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"9e9b4fb06569378b2fe4ff7d79102e2b","sha1":"ae61f97d8c72b97cbf7421d75db6a0c5cb2101c5","sha256":"3d58e8f2afbc2ffc950f00f1099a90bdb4bdb9a034ebea75c8f3fb21d2f7f29e","sha512":"f94849f20a837707bfcf827fd83d52871b2865b913359be9be0cb78547df12b634b9868c035ecfbe286cbd3f4e6a6fb737d675654f88613a5579365b2e63a425","ssdeep":"768:hOVgjFDWSae6b/ACZ6kyUuAodm//hPG+2wY6cDLUj6CXpz/gbDrFnvPa:gVgjFDWSae6SZXI/RG+2wY6oLb+pzeFK","tlshash":"3a03f1e41ca814fb67805ea9fd3737aab560bc8bce505bd47cb006efd0af0796428410","first_seen":"2025-08-21T17:30:09.66734Z","last_seen":"2026-07-25T18:14:11.514704Z","times_seen":189,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/nextjs-6b358b06fc382fb1.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.628Z","timestamp":1781973548628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/nextjs-6b358b06fc382fb1.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 11 Jun 2026 09:08:31 GMT\r\ncontent-encoding: br\r\netag: \"2452d00ade55782fcf23b88fd0332ab5\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: 3E5ATfsyB6nzCN3wZMlrSUgrmHZ2kR+TEwpvIZOLdqfp9iH6r57nBfm7DyB9fwNvkvZwNBc6itWpdoocJhFy1e8IghVpEmpL\r\nx-amz-request-id: 0KRJ8BY7TRPFBT7K\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 592833\r\ncontent-length: 141468\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 15508916574883233187\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":536425,"size_decoded":142262,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2452d00ade55782fcf23b88fd0332ab5","sha1":"825fc0224e999b73c65423b92e2c8b725cfde6ed","sha256":"76852998696f6a56940231e64c77b624ce92582386f7b1a348cde9444b7f5c93","sha512":"45ce5122f8cb76e22b27c9d0ea9971a0dc86145603914bd66ee44e239639ab5eeaf6915de8a36b24c49c1fc04908e69c372ce42e5d6b65143f27860425471f11","ssdeep":"6144:QADV2rTLLmZx0gZjLkInyjYXpItAgw7nM7vuwypGWxsGIQ73jeg:srcjLkI0hjb6G+0g","tlshash":"1eb418b972d1f4a217e741e6403f1007f3392c3b145e6450b3a5ecdab56489ea0b7faa","first_seen":"2026-06-06T16:29:24.700828Z","last_seen":"2026-07-02T19:08:08.603842Z","times_seen":12,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/894.77cddcadf64d4af9.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.654Z","timestamp":1781973548654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/894.77cddcadf64d4af9.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 11 Jun 2026 09:08:31 GMT\r\ncontent-encoding: br\r\netag: \"587c212215803009b46e7df26382d213\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: f9AGdos0r7gG2EEsgCCHo5iyJMmN4dQukBVgZN1pReNwXfD00iJNiqbtKVVAzH8UmaRlwwhRPIY6bVcbtjblGkLVZlfmgbZ8\r\nx-amz-request-id: 3HFX3WR33ZR5YV9D\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 592836\r\ncontent-length: 3717\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 18130203366640197969\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10400,"size_decoded":4509,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10400), with no line terminators","md5":"587c212215803009b46e7df26382d213","sha1":"46ccfd364e498d7f2245e5c8e7a3dc8c296b7efd","sha256":"9fab163a91bbcc551409eef8c2f874817fb2d17a653fd0b44fa040eae7f4bd40","sha512":"152c8a9a1271ce3364e5dff41c06b71ce57b024d70705206eb2d04bff73fadbe52e03e14b53edfc91e757b16b44d69486cdc89fcd155378410a9f2e5589a1779","ssdeep":"192:3FbSu7OsNWZNQh9SFQcf3WMTkLGmrviZ85MTOtaVQmQ9X9+sn6aCR++mlN:Veu7O60W9SFQYpkbYqMTegQj066ashc","tlshash":"8222096aa3d4af6cf9ad0678d8bb024db22669d144408c94a65b7800d03efe63117fed","first_seen":"2026-06-18T16:35:42.589918Z","last_seen":"2026-07-02T19:08:08.592268Z","times_seen":10,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/data-core/data-core.latest.min.js?t=10","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.676Z","timestamp":1781973548676,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /static/data-core/data-core.latest.min.js?t=10 HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T01:07:07.99671Z","times_seen":17753107,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/home/loadingPage/worldwide_3.png","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.747Z","timestamp":1781973548747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/home/loadingPage/worldwide_3.png HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 09 Apr 2026 03:11:38 GMT\r\netag: \"a6d317e84e120a5452b47fc6482b3c06\"\r\ncontent-type: image/png\r\nx-amz-id-2: tTLCVo3hyaI7Nk8fLPNgaxNagKtV4UU8AB0UUma5dnRK7CmrsDqEcLBtu47lKkLGPcMWA4SRweY=\r\nx-amz-request-id: H9PTN2J078SZE99F\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: max-age=31536000\r\nage: 5820356\r\ncontent-length: 556829\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 18140720938657190781\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":556829,"size_decoded":557527,"mime_type":"image/png","magic":"PNG image data, 757 x 400, 8-bit/color RGBA, non-interlaced","md5":"a6d317e84e120a5452b47fc6482b3c06","sha1":"f7fc8a7d53cf85f25a98b86aeb835bd8e4265edb","sha256":"aac16808fb25256ed4cf16b6b0949ee6e92398573b151bce6644a73b5a5c203a","sha512":"7d4abe37a85489171570d4d6a7e20813537988407df4d3006f6a84ed0083caf261999f3e9635be95eb3155b5424c95f0a3895f2a1fe89376780ab28d5d4ca2de","ssdeep":"12288:Vl7rsIaKB8QvQvxN76SgLvOwtrLejkl/ou5N+fbGRlGqcyl4:VZrMKBJYn767Hqk1olfMYqcZ","tlshash":"69c423bece18452cdb2643b8a91d6ffcafe3b9398f25822ecdd1534088255426dda435","first_seen":"2025-08-21T17:30:09.658638Z","last_seen":"2026-07-25T18:14:11.520633Z","times_seen":189,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/images/commission-h5-BY.png?v=2","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.596Z","timestamp":1781973548596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/images/commission-h5-BY.png?v=2 HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 05 Jun 2026 07:54:04 GMT\r\netag: \"692b3bd68ebfd4ea8efd7945aaa7993d\"\r\ncontent-type: image/png\r\nx-amz-id-2: TNLnrEtw93TWAHTq3aoIVBgY7CWB5O17RvbQRFxoPRGKS9TFZ6AaOQEwUF59AYxiY7AphZ8bgGw=\r\nx-amz-request-id: CP2TKQFKB8HDJTZG\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 942392\r\ncontent-length: 25155\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 911339648501010485\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25155,"size_decoded":25876,"mime_type":"image/png","magic":"PNG image data, 766 x 880, 8-bit colormap, non-interlaced","md5":"692b3bd68ebfd4ea8efd7945aaa7993d","sha1":"c4a6b988e9cf15dcdd8c12aef2a9c132fac3b393","sha256":"6ccb182742aad99e1e25143dc399e56f0ea75cb45d7432308549b732f5099176","sha512":"86b95350e5282d5e826f49515faa92cc3963a049eb7baaf90d890a19e5d7e81d20163dba67f52c1011449e5bdb0333ce0069160a35fbc6bd446696981b32d3c4","ssdeep":"768:yjh+HO+sfnbiPnSL0KSf347zWt8tkKUaNf:y+HO+SoKSfI7qt8t7UaNf","tlshash":"e2b2e16c67f2563fe821c59f67784407851a620be9202b963f54afe507be812fa140f3","first_seen":"2026-06-06T16:29:24.703193Z","last_seen":"2026-07-25T18:14:11.494519Z","times_seen":19,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/webpack-6b8bc5dd648b6ef4.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.624Z","timestamp":1781973548624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/webpack-6b8bc5dd648b6ef4.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 11 Jun 2026 09:08:31 GMT\r\ncontent-encoding: br\r\netag: \"9f42120c8dcdf2f01fb08b7395c9999c\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: KnjdrCjDMcmuh7yRUZKvTbIaDHefQfrq76hWBtG4wGnqIHy7Lqo9+uj96oUi6toIgt5Yx6+BazjVttgJNPVxB8m9Bmly4M9d\r\nx-amz-request-id: 3HFQ6BDGXD4EKBWD\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 592836\r\ncontent-length: 2737\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 4838413195227465166\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":5448,"size_decoded":3528,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5448), with no line terminators","md5":"9f42120c8dcdf2f01fb08b7395c9999c","sha1":"83c1c85a580fa7ac994d05f6530714deaf0b09e7","sha256":"1978b480eb40e4a3e733bdc4e8b362a80a90084f9585ab167e1769ed6bdee9ef","sha512":"cf19d06337fcea3d81fd1a80ae6f2d83b712a09810f0e4eabde0908d508f659d25c53e2225b06b0af9788abb148825953d0e668734e594c580b7dac81cfa0b5e","ssdeep":"96:95BpjqAit4AJNf7NNT3IQ/FVE3Vl5SGFGwQMxhTOp5SjH1ylx8xZ9NBcA3P:jatXjNNnFoX5kxU2SjH1t/9H3P","tlshash":"61b1d7b53a10fa7929f21984883dc096f219213b641ee4f0a75fdd75a878ad10727eb3","first_seen":"2026-06-18T16:35:42.540772Z","last_seen":"2026-07-02T19:08:08.616953Z","times_seen":10,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/app/%5Blocale%5D/layout-28d81cce4be52128.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.647Z","timestamp":1781973548647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/app/%5Blocale%5D/layout-28d81cce4be52128.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 11 Jun 2026 09:08:31 GMT\r\ncontent-encoding: br\r\netag: \"77d6a39e90ba59d220c5698ed1fa5dca\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: z3uKO1ozrrjPjzftXi65OZLA0yaRpUav7DNVs6uEdxlT0Z/TYd5UVOCHYtYvjBBqsX5oe50H4LPreGneESJ1DV/NhPc5/GXl\r\nx-amz-request-id: 0KRQQ6YRBJND84TS\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 592833\r\ncontent-length: 2082\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 15700451478494240783\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4796,"size_decoded":2874,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4796), with no line terminators","md5":"77d6a39e90ba59d220c5698ed1fa5dca","sha1":"961c60081dacf1963ae2c174ba57613b80eaedb8","sha256":"7be9c05910ec002d7ca83c251091b66cc1e054f7abb4f57fd9bdf9c10cedad12","sha512":"32a527924acbde9c5577e6c35ae793a0d55ebdae47e724498ee4cd84207c89ae7bab6cf59a980574eb6272180b56c8047707de2d7719d776b0ffc205177e319b","ssdeep":"96:09Movvaau2P++YFfEJk/lAeFHVf1s+BT6CeEpLRJBtRY6:+Mha5AeeFHV6a6XQlRRY6","tlshash":"daa1d78a4f0fb54f4ec959e0fa564ec4792b0079150e0d242262ecb12126f5ce3e2bee","first_seen":"2026-06-18T16:35:42.57067Z","last_seen":"2026-07-02T19:08:08.591416Z","times_seen":10,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/home/loadingPage/mark.jpeg","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.660Z","timestamp":1781973548660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/home/loadingPage/mark.jpeg HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 05 Jun 2026 07:54:04 GMT\r\netag: \"b323db8f8633c13468d7250ef00f0966\"\r\ncontent-type: image/jpeg\r\nx-amz-id-2: L1I0ScUR/t9X/veIsqyk42jq3xvvmqalIjSn9L6/KXdGMQRk5h1kZAm1pWW7tMZV0P6OxlTEK1TJFnf3H01cFTaY8iPQrJWT\r\nx-amz-request-id: CP2JBE3RFFAGQWVK\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 942391\r\ncontent-length: 120909\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 7785648264925346613\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":120909,"size_decoded":121653,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 704x866, components 3","md5":"b323db8f8633c13468d7250ef00f0966","sha1":"cc450622452b03410f370adf229e48934c4d45ad","sha256":"734da3b360898fe675f335b1b3e016d79e2726aa8672cbfb19e0ec11ff851d5a","sha512":"69bb7b5b9ad9efbeecc8ca789277a66998adc67742b3bea7d3e6d5b96cfe014a8456d2397d02e78c349362a591e7879a7131c1d755f93f39e8b3ee1e58a1a381","ssdeep":"3072:r/nf6MksQ0UmuAZUA6WtucxEEaklGf+OGp1ywt:rX6PsJUmuAZUABuWEibvpQo","tlshash":"7cc31206f513f045f03212bdfbab0f29e811c65e1f7e2e9a04686fe71db5635176a188","first_seen":"2025-08-21T17:30:09.668569Z","last_seen":"2026-07-25T18:14:11.487794Z","times_seen":189,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/home/loadingPage/worldwide_6.png","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.751Z","timestamp":1781973548751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/home/loadingPage/worldwide_6.png HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 06 May 2026 09:10:23 GMT\r\netag: \"c1a0aba3bcc0ecda506cecdfbe880bb5\"\r\ncontent-type: image/png\r\nx-amz-id-2: e/NCmdNB8H8ttUpxx54UXn2zEqUjpHUL9mzdU+GOWFrmbGkjc8JsWpTpaHKDr7GOWK3AV9JddbMM12F4zSxrkam2MWSIkG+g\r\nx-amz-request-id: C090CN25H0JRS3RC\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: max-age=31536000\r\nage: 3806662\r\ncontent-length: 290225\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 3953746789052601631\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":290225,"size_decoded":290942,"mime_type":"image/png","magic":"PNG image data, 757 x 400, 8-bit/color RGBA, non-interlaced","md5":"c1a0aba3bcc0ecda506cecdfbe880bb5","sha1":"1bc097f0c80657d7a01b954a85b473b65f0eb5fb","sha256":"ee33afae2b734ed7cf86f94cae0ad345bff3d1e5d1cf5b01562488198833276d","sha512":"aa848cf6a21f5a5583e7352a0f6776a2969a8c7402fb8b7fed3de7592584bca05ce8f8639f0153bc8b18963cb00168a3069c51a632cba8c45f935734afb9739d","ssdeep":"6144:nEDa2NwjkAQW7wmsti28+ko8FvkQuSqm2axnODuVnyvR4RA/vgm:nEDa2Nwj5grk1LuS5xn0gyvR+Rm","tlshash":"77542356ec2bf760f02e992f75b64ac866758531af1ce8404ce104b7e4205a6c7a78ff","first_seen":"2025-10-08T18:56:34.793981Z","last_seen":"2026-07-25T18:14:11.496514Z","times_seen":32,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/common-static/fhs/fonts/Inter-cyrillic-02d32ce93d498312da4be52c119b3f26.woff2","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:09.608Z","timestamp":1781973549608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /common-static/fhs/fonts/Inter-cyrillic-02d32ce93d498312da4be52c119b3f26.woff2 HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/static/affiliate-portal-home/_next/static/css/79ae09a1bc679f56.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 08 Sep 2025 04:59:16 GMT\r\netag: \"21a1b5baabbbbe12be9c56979ab13779\"\r\ncontent-type: font/woff2\r\nx-amz-id-2: G7ZZaRkt7Ovma2IazuyCJ0h0TNLjRVn0HrMKFp7Cuxctj72o5JSwvZZxDBNXclq1jVrWSPqIgdX48FtwWpxebLUVK4mgwghK\r\nx-amz-request-id: 9K5DD29RKJJ36X72\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, HEAD\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: Openresty\r\ncache-control: max-age=31536000\r\nage: 942392\r\ncontent-length: 32676\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:09 GMT\r\neo-log-uuid: 4197215404636248254\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32676,"size_decoded":33656,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32676, version 4.66","md5":"21a1b5baabbbbe12be9c56979ab13779","sha1":"af3da1d770900054735a4adcb6375d4a34612aa0","sha256":"bf44a7ff62f93ad7798c39664b59cb0708aad663f98ad32596ffebf5d1147376","sha512":"93d22985c2583d406548b83b48df1d9805f39c0c06901d83f0e50ae81956c0463cbfdd04f1c7c00b36f56b9189869ebc2c56c6c0ab86efc90d7c702731c0fb02","ssdeep":"768:n99YC2/oBGjyTQShrl/2wnHPTBFLiLFQsJFK8KpoELIW1/YGr2:MogXq2OHPTrGLesj2LLfr2","tlshash":"4fe2e046875c1c4bc87bfcbb82d15ac379901e872b6199511917f939cb23cffad1a208","first_seen":"2025-10-25T17:10:00.828571Z","last_seen":"2026-06-20T16:39:29.651067Z","times_seen":10,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/css/ab11b8a456818c16.css","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.599Z","timestamp":1781973548599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/css/ab11b8a456818c16.css HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 09 Apr 2026 03:11:34 GMT\r\ncontent-encoding: br\r\netag: \"4bfb74daaff903e18f77af66a0a0ac95\"\r\ncontent-type: text/css\r\nx-amz-id-2: 08iEUOPW2LMYroLKyX/riOA0GYycinCvxo5HInaVeyczk1ECCqq3uQScLg5VXJxpxyhbQzucAgg=\r\nx-amz-request-id: 5AF0PA0CNYHABMM0\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: max-age=31536000\r\nage: 1932164\r\ncontent-length: 9297\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 7266000230366193448\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":52053,"size_decoded":10013,"mime_type":"text/css","magic":"ASCII text, with very long lines (52053), with no line terminators","md5":"4bfb74daaff903e18f77af66a0a0ac95","sha1":"7c69d74d1e4730a98ccaf3c169f806a0387ce838","sha256":"d431330fce5e5ed02c3e7d3967ca042297275a00b52517583b9d7c0dea15c81d","sha512":"a863f790685c78948c5a36092b67f615afca11ef86674711664c7ab2bd8acf1c3df18ce0a4fa59c9dd3794ccc8d5fc6a989eb48df035a36cec6b45939be5e15a","ssdeep":"1536:GHrhnmIhqv1Sgo0C8U4RKPbY+inuieF17v/7T:GHrhnmIYb5+inuieF17v/P","tlshash":"3833866c9b15643f3d1790fac2e8a8dd6217b5c0ee369ae2ff01911196d3af61a73700","first_seen":"2026-03-05T16:35:17.220552Z","last_seen":"2026-07-25T18:14:11.501766Z","times_seen":70,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/vendor-17ab828213dd2f6c.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.631Z","timestamp":1781973548631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/vendor-17ab828213dd2f6c.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 11 Jun 2026 09:08:31 GMT\r\ncontent-encoding: br\r\netag: \"16a04385acb6b8889dd321feef851540\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: ToYxDIUS8PYlXGYXVxrBa7IJiLaFaKspV7dXDJWjpcn84FEEFpUDyu3FUODNt7uvOgMWP8IYCVerBez9V9VNd416B16dn/VB\r\nx-amz-request-id: 0KRMEAR9RK57SFHH\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 592833\r\ncontent-length: 116291\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 13060227170199402219\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":378749,"size_decoded":117085,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"16a04385acb6b8889dd321feef851540","sha1":"45e36b67a2253b631ee293f268e815b6055310e5","sha256":"352382fb7db6a6907d79ce795fe842361be476c08b7d621c8a443f56dbe8db0e","sha512":"acd2fc382e53bb889d29c1955f9350858d1edb425d4e9f41e8b92c1d9c437bbfc52bfbd515d1888be46e8dfc97a8d1554c19e687b48aa37ca5eb89a09eff4a56","ssdeep":"6144:zrgz2zUV0oa7Rw0PMGqunwSreRJAsg7RnLtbPIIsVr88lU/Xd:wW3nwSreRJACXZtm/Xd","tlshash":"eb843bc83291f06517a342e580bf050af23e7925284d8c64f35ad9f67db898dd23bf69","first_seen":"2026-06-18T16:35:42.574383Z","last_seen":"2026-07-02T19:08:08.57361Z","times_seen":10,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/moly-43a042a35e9c3e10.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.639Z","timestamp":1781973548639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/moly-43a042a35e9c3e10.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 11 Jun 2026 09:08:31 GMT\r\ncontent-encoding: br\r\netag: \"ca10e2bfeb721c17aac324a6824bf2d9\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: CujejsWTNz7++moEQ7cW4RNLIkzMcoRjdomncIcc+Fn63t6d2epGJnGBMJgXU/L7Z8U/yxrUXScEiVJSt6P+aCVP8McuTC/H\r\nx-amz-request-id: 0KRWKRZJBXQK2CJB\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 592833\r\ncontent-length: 22522\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 5172341865584813653\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":97126,"size_decoded":23314,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"ca10e2bfeb721c17aac324a6824bf2d9","sha1":"2c5a00eab48e5fc65a926af024d32b54f49c5ade","sha256":"e11763bfb8671045e623660773c69a9ab280e2791b8f5935646797b0efdd137a","sha512":"5c8ad3391b801593e78747f44132b6798028edc54ee743da2339d5a66e6aa8c00a5df7e80875acea0ecf4ce11cb7d09d801cd9f4949df647ad1b0adb5c6a8c64","ssdeep":"768:mYNjZYC/OLkYe6YBoQYst+rGKNI+910CSn0OcC6YQa0YicC/CKYA4CIN+Zzu+MMS:mWjLbmQnBN0Le0DvphK/Egfv0QU+R","tlshash":"e693298cf581b4b0676356e582ff450bf22a3605942fd420f72d88e16b6a0e95273f7e","first_seen":"2026-06-18T16:35:42.571472Z","last_seen":"2026-07-02T19:08:08.593136Z","times_seen":10,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/604.edb746dbec00b634.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.651Z","timestamp":1781973548651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/604.edb746dbec00b634.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 05 Jun 2026 07:54:01 GMT\r\ncontent-encoding: br\r\netag: \"7b24953986638edb37771ea54bfd177e\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: 2HsUfDgal0vcJaVIKJsako7fqJy/a8aMltVStxFbXDaOmzjKQ3qzXL2CzegnDdWTPrK777ZOucg=\r\nx-amz-request-id: WQ7K37RZVNPWJ4CB\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 1292318\r\ncontent-length: 1359\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 12645615648540495673\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":5942,"size_decoded":2132,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5942), with no line terminators","md5":"7b24953986638edb37771ea54bfd177e","sha1":"c6f43eb4adb3a8c5e70903160d50a6b780e1da57","sha256":"74fdb60a10fda72a796501eb05a24ad30cf0563d57f94f84761bb381a333e5b0","sha512":"3a44cd653e29627be3e8b7a8a19daf189ccf240aad34a78ceb5cc981d2d9183bf679bef5bf0ef5fda6fe1fa78f2c1b232466644a502be6264f5884a1569ce5d5","ssdeep":"96:0vTun4EZV58AVP1A2zZ6VokN4FVkN4FhDOr953mHTYewRD6posC1RAEuBA:0vTucKdX6u7DOJXRD6posC1RAEuBA","tlshash":"3bc180298155eaecfa2f08c4a51a500db52f1f59c31d08f479ba7c39170a4f87627fda","first_seen":"2026-06-06T16:29:24.706793Z","last_seen":"2026-07-02T19:08:08.545724Z","times_seen":12,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/common-static/fhs/fonts/Inter-latin-e2cd30fdbc318a1d7777d73399f88ba1.woff2","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.656Z","timestamp":1781973548656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /common-static/fhs/fonts/Inter-latin-e2cd30fdbc318a1d7777d73399f88ba1.woff2 HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://affiliates.bybit.kz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 08 Sep 2025 04:59:16 GMT\r\netag: \"f479b30ff86227f257a894e04d329668\"\r\ncontent-type: font/woff2\r\nx-amz-id-2: wO8ShzaRXNOw0nZ/Dn+QHkRDyAoK6H89xWRdM0irC2mQdNO+ithwRAj3D2BwAN5Xzehky/lH6a4=\r\nx-amz-request-id: B18BT690A4AMD8ZC\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, HEAD\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: Openresty\r\ncache-control: max-age=31536000\r\nage: 1378510\r\ncontent-length: 37684\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 14416819700064857197\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37684,"size_decoded":38646,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37684, version 4.66","md5":"f479b30ff86227f257a894e04d329668","sha1":"8eb4d701979e2021e5f3ffdca99ee0e110c90283","sha256":"827208f5649133463b7282407c61b28bff902d6409b971dfc1b510d5decb8299","sha512":"7fac31e9b942c3e3fbad29619a4feb21942209878fb9c9dd45453c69e99363de5f1d0061021f1bb5928575dcd7fecd95fde94ed2024f48d169c40117b60b9cfe","ssdeep":"768:vNJyPyzuG14VemiZjijw2YuXGV1dFAlKEmqtwB1KBsXolx1k:vDyPNGE0VicXuWtBqaOBsXolx1k","tlshash":"2d03f13661c1321ca4362c427857b697368c12aacbcd74b4e5e782935723df198cefb9","first_seen":"2025-09-30T04:58:46.760496Z","last_seen":"2026-08-03T18:01:21.996287Z","times_seen":842,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/images/dashboard-kv.png","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.585Z","timestamp":1781973548585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/images/dashboard-kv.png HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 30 Apr 2026 07:52:23 GMT\r\netag: \"27b1c8047d2fa08fbbc54993398ed8c8\"\r\ncontent-type: image/png\r\nx-amz-id-2: o5poamm3yqo+d2F8AtAPmjagnbhKcja09Z1CzPsXAUa3Klu3velvBpvue+BTj4r9wMhy1YVUdDdBJ8vu9WSPhUpCV5SYTsSI\r\nx-amz-request-id: HW629VAH1XSDDEH4\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: max-age=31536000\r\nage: 4013787\r\ncontent-length: 28031\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 11405300724167726859\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":28031,"size_decoded":28748,"mime_type":"image/png","magic":"PNG image data, 1091 x 664, 8-bit colormap, non-interlaced","md5":"27b1c8047d2fa08fbbc54993398ed8c8","sha1":"35758ca5c1e7ed7300ca5cd1e408a28f268edeef","sha256":"dec71fd2926bd1f0d4087437969988010995088e31df34ee0404caa018256f24","sha512":"2c76f6ecbf6d73c9131b50bbe19b685838814cd43d9242ecfbbe48392ca5ec0f3791492ca0182260dd1a926c68045ff871db3d046dd75bf0549abc68d788def4","ssdeep":"768:FrW24Emy9KpM6p9d76uB+/A++zS6FNVjIrWfWs:FhDoMqJ+/A3z9bVjI6f","tlshash":"eac2e00f01256c53827de52d1a6a5a3cde723f286213c2cb781caec4a13716b51fa5eb","first_seen":"2025-08-21T17:30:09.675151Z","last_seen":"2026-07-25T18:14:11.49605Z","times_seen":197,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/css/1be3e2587a18f2c2.css","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.611Z","timestamp":1781973548611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/css/1be3e2587a18f2c2.css HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 06 May 2026 09:10:18 GMT\r\netag: \"4bbe0fe6a408a434d390f37524231776\"\r\ncontent-type: text/css\r\nx-amz-id-2: tQ+OwEHkwI4VXBAmS8EQtDgUah/EI/7BlR7koe0n+Y91kx4Q0JLN/pGBjJ2Xv6QU4R4whReJFJuW0pzI3VJydcflL7VwSVZr\r\nx-amz-request-id: PM0R2NTSNR2K1A9B\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: max-age=31536000\r\nage: 3806665\r\ncontent-length: 177\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 6364312265663937270\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":177,"size_decoded":890,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"4bbe0fe6a408a434d390f37524231776","sha1":"47bd5b8c6a6b63cec426279580d8b9a357b6a217","sha256":"b8de0c52c6de9fad4ac02160a23ba0097936d39cbeefdf5b15463393b87d2373","sha512":"b2922ba916c4260470c3080a385c75b08bdbadac949e859f7b4abc34d8f509e009b8de0b95af3719e6403fb57ca7a270735b02de07180d64b0bf12d36d8afaab","ssdeep":"","tlshash":"d6c080b7fb653f5d01b8510ec2895c7c4e1a3581c1050535b61d015f47c0570d3b1f67","first_seen":"2026-05-07T19:33:39.057019Z","last_seen":"2026-07-25T18:14:11.495577Z","times_seen":26,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/css/e80ff8c8bcdab80b.css","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.618Z","timestamp":1781973548618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/css/e80ff8c8bcdab80b.css HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 05 Jun 2026 07:54:01 GMT\r\ncontent-encoding: br\r\netag: \"0aaf4e8c79432a70140382a2fa1b3d3b\"\r\ncontent-type: text/css\r\nx-amz-id-2: 1UnsjKb9UhQ/1OPkZS+N+mbYOfdKJ9bpv7HizNwMyDSV/bHqOuMwuNn9kkjoqCrce+6exj2O/3h9y5KWX0OjdheiCS/jmbek\r\nx-amz-request-id: CP2Z1YD2EGFDV24K\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 942392\r\ncontent-length: 2514\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 1500795677210938224\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16975,"size_decoded":3276,"mime_type":"text/css","magic":"ASCII text, with very long lines (16975), with no line terminators","md5":"0aaf4e8c79432a70140382a2fa1b3d3b","sha1":"f5042dac625973dcda20b7d369fe5fe8ac11ffd6","sha256":"1837ad8be01871d7e129dc63d221c87b1de82fe8e5bcf6e458dbce3423927ba5","sha512":"e38b8352eb0dc602ae4fb4a89a515de05432c0671ad652ba286e24e35136d150983bb35fbf0baa63dcf04e4b08788fbeb882bb1b838bf7e01f6f272e18b64f7a","ssdeep":"192:RmMae6rhXDCDx79kuDZQi8FW9t5t4lX43WF6CyysugIrqfrlrPVrCvxy:UeipyTIFW9tOwfysFMqzVPFmy","tlshash":"1072df190b321179f9a68dabbd507e2d2681d417c20f82f9e513f529d2cb1a326b274f","first_seen":"2026-06-06T16:29:24.728497Z","last_seen":"2026-07-25T18:14:11.510328Z","times_seen":19,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/common-static/infra-static/fe-lib-meta/global-common.css","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.621Z","timestamp":1781973548621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /common-static/infra-static/fe-lib-meta/global-common.css HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 09 Jun 2026 07:51:38 GMT\r\ncontent-encoding: gzip\r\netag: W/\"bacc99f7f7b4aad5672c79a51f5fd976\"\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nx-amz-id-2: hi+AMyW6qYzizd+I/teVakqJBSu6I8hLAJUqWJOmAOHDCct2CwgyRbSfOCXfOjoJSHBPDaVG/VFkVGSEzrEiIohFoPTiQoNW\r\nx-amz-request-id: 2AH9Y2M54B271F6D\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: max-age=86400\r\nage: 39480\r\ncontent-length: 3485\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 6783949468874408893\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14700,"size_decoded":4243,"mime_type":"text/css","magic":"ASCII text, with very long lines (14606)","md5":"bacc99f7f7b4aad5672c79a51f5fd976","sha1":"d301c2ee2bdf8b1d54e57816d756314a83cf510b","sha256":"8645728b51c7c554997e9094c55d7d18c7adc1a4837cf7a73afc033e07b779c4","sha512":"af9c5350bc2f5161a822abadcdb87c37d1f27257554743bb9e7a536b28f6ab0294034d45dbb9794061ee2474c181294032756fc5c8abab1e57c8c776d5e5018e","ssdeep":"192:CU89Dk1L4CRYFKO3ISERL8Aj3wJ3BX8ZLZX2RATVVS+:3nXYvISUjgJ36FX2RA7L","tlshash":"1562513de7037824736698eae3d065396f457892f51eeca0f346b074f5580ea82bbb50","first_seen":"2026-06-09T16:19:38.771147Z","last_seen":"2026-07-19T19:35:31.70962Z","times_seen":110,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/images/commission-bg.png","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:09.593Z","timestamp":1781973549593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/images/commission-bg.png HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 05 Jun 2026 07:54:04 GMT\r\netag: \"e17ff9d59322b881c9623eeaf7160540\"\r\ncontent-type: image/png\r\nx-amz-id-2: WBQiRu9DaXUXaWC4zygNxI749giEEwt8bMm48WCaLqGDTkqw+qsO/Kt5/vpBRW6LYl4c8BxaaNs=\r\nx-amz-request-id: WQ7TCBRHW5AWP52X\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 1292319\r\ncontent-length: 7997\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:09 GMT\r\neo-log-uuid: 12932484320589177509\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7997,"size_decoded":8720,"mime_type":"image/png","magic":"PNG image data, 428 x 741, 4-bit colormap, non-interlaced","md5":"e17ff9d59322b881c9623eeaf7160540","sha1":"b0087fab348c1d9d8edcdab12bc233b8ffc7003f","sha256":"7284538f9fe5db6576a8bc90aea6fa7e38258356abeea827c4553c3f8af4def5","sha512":"a486db0ab9e022663f310f48b74b9a38f8b0a6a4888e651cdc04cddc8a03e2e18f9681b7204e36fa04deccde4caed8d4988e056b5282500ae3049959203f4e78","ssdeep":"192:ZqxaM1x8LXx8JNhYM2WRqsijCF2r+AiCAzSs3/K:Z60z4Nt2AqsijFtiBzX3/K","tlshash":"93f1af6956b9f1514334e0168b1801099eb9d0fe7d92cf1caf732d7c2d588a2acbec76","first_seen":"2025-08-21T17:30:09.659814Z","last_seen":"2026-07-25T18:14:11.489909Z","times_seen":189,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/988.9521c36e5c1d0712.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.649Z","timestamp":1781973548649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/988.9521c36e5c1d0712.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 05 Jun 2026 07:54:01 GMT\r\ncontent-encoding: br\r\netag: \"1de3b4456626d0d3610902140695063b\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: 4fVgm2LHXZUKoGvdrO1DKW+rg9/agivxdWJV2N+HqZ6D4bYpjtXtzU6DWyGxGHHijr6ssajBOnn2Lmg37b/2P8OD4tKiSk3A\r\nx-amz-request-id: WQ7M8M70MVYW0ZVT\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 1292318\r\ncontent-length: 603\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 7307383251837926917\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1593,"size_decoded":1394,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1593), with no line terminators","md5":"1de3b4456626d0d3610902140695063b","sha1":"7e3ea058426954ac582a94e0c8c759d76c1014cc","sha256":"463a8e001f714a005f1f6d7f06a47c729b45909c41ccaa948786bb2d730d6709","sha512":"01e03b3311099c7122340fb756077ebbccddd8729b06e2e1c5eac4b8397b9ea9fc3737c89a87c799eeb83391fe4c016d367ebe5d9f116f4529b06def9420fb3a","ssdeep":"","tlshash":"ab316e4e905abef8b8254cc57b35900cb27f6b99eb1688b87c9d7831211c4d9731bbd8","first_seen":"2026-06-06T16:29:24.736326Z","last_seen":"2026-07-02T19:08:08.572249Z","times_seen":12,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/by-vendors/by-vendors.latest.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.657Z","timestamp":1781973548657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/by-vendors/by-vendors.latest.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 10 Jun 2026 02:42:48 GMT\r\ncontent-encoding: br\r\netag: \"dc69cc6c6c6bbc632e3a23dc5683add8\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: ilxgkSiIcu9MLoYckWnJ0JMke1+wjAJTongTnGep5/dv6APgep0zbC0WWIPFpLvuapCTm5xgGXVxfmCw8Hm0KwY4W6mUxZuy\r\nx-amz-request-id: 7SRMR115FMHSR922\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: max-age=60\r\nage: 0\r\ncontent-length: 62678\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 48829675890596704\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":186905,"size_decoded":63600,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51459)","md5":"dc69cc6c6c6bbc632e3a23dc5683add8","sha1":"5a97e15bcb8b861b0d0cb0767d66f7bfeda26995","sha256":"e977572e0456eba201921b07f789ee9fbbc8f595a6946f21726ec7225c171298","sha512":"ba0167bd7680fbdaf4e6238797cc83a8545ef07cee93450362532fd4e440cbce80e990fcd61e4621cc2b05c2cc125b2d85efa259664727f6971b7a75eae865fa","ssdeep":"3072:s+w99Gwl7yGx205hs8quNlIEFHptwrNObnoyLpOKPoMyAwj1H:I5hs8qzKHpqQbnoy1OwoFJ","tlshash":"da046cd272a3f16652fa14e6a0670011f3397e19348c5094f21e6ed63856b8bb3b7f39","first_seen":"2026-06-10T19:40:47.006405Z","last_seen":"2026-07-14T17:48:51.123826Z","times_seen":85,"resource_available":true,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/home/loadingPage/worldwide_5.png","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.749Z","timestamp":1781973548749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/home/loadingPage/worldwide_5.png HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 11 Jun 2026 09:08:34 GMT\r\netag: \"36294f4a9f737cc937d6e2cee042461d\"\r\ncontent-type: image/png\r\nx-amz-id-2: HJNPrHu673DTmIg7485fGFj7kxNZF4RAzrG3anUMVhgpHqOz4ig/FhOFkYP8kz1ccTJ9ArzIMv4=\r\nx-amz-request-id: JX2QBFZZY8QYGE2M\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 592831\r\ncontent-length: 375176\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 13210716676124032855\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":375176,"size_decoded":375900,"mime_type":"image/png","magic":"PNG image data, 757 x 400, 8-bit/color RGBA, non-interlaced","md5":"36294f4a9f737cc937d6e2cee042461d","sha1":"90de91da1095f2c11da70e3697d687531bc650ee","sha256":"88d6e85ea18f7f9dcf025703ed97cb540f8b01db661ea19ab07c9fa1ef860580","sha512":"643939406f786e0be6521e41269c5afa7424f13860e423461cf750e39218aad976e045d0d75f20bbf4bc041ef39509249943dafad9cb9f5a2459082221f52f02","ssdeep":"6144:WAdjE3TamHb89OR0H6cI93ahFLlcsxQN5lB5Svhqs+wzcuAXcM1:WAJIN89gU67o5pqrhi6w9AXca","tlshash":"18842314d7ea3f03dde851eb9016ba0923bcfd4d4a07a8e15ffe645fa090c6a0627794","first_seen":"2025-10-08T18:56:34.798608Z","last_seen":"2026-07-25T18:14:11.518078Z","times_seen":32,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/images/audience/audience.png","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:09.627Z","timestamp":1781973549627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/images/audience/audience.png HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 05 Jun 2026 07:54:04 GMT\r\netag: \"2dd015baac63feec4693f56fc895e626\"\r\ncontent-type: image/png\r\nx-amz-id-2: N7ckis9zKIibsqZesZPLUhk6i71EqwzYLkmMGUAYv4S3a8LE+ovPnOZivUzuQ6hAt2wpsX7xxes=\r\nx-amz-request-id: P0ZFKYVPDCVF5A0Y\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 942390\r\ncontent-length: 165979\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:09 GMT\r\neo-log-uuid: 9679193177179531013\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":165979,"size_decoded":166702,"mime_type":"image/png","magic":"PNG image data, 2642 x 1569, 8-bit colormap, non-interlaced","md5":"2dd015baac63feec4693f56fc895e626","sha1":"805e1666d1d065d247feeaaf8598bd06c013195e","sha256":"485fc0f3a5484a380348e84572a001b51cbf0aeda3abf1e3028bd4479d60130b","sha512":"81928a415e6b52e2fdd4c8e9a071a6ffdcba92b3ef2bbf2a4df581205feeee0b7f7a53e8c30afdcea45146145280dca187d65992d32690290bdbbb4bc5fad7cd","ssdeep":"3072:MUNRif73kKhd+y2rQf23Ju0ivLtNopCARVa9WvzK2xtTQjMGw7XL15MIInMW1TG6:PjC73kKhw1Z78L0RV2W7K2xtTQ+b1u7X","tlshash":"74f312e465be9f0bc895fdfc50070cf847154a460608966672baf9a3b0ed13d93db82d","first_seen":"2025-08-21T17:30:09.650847Z","last_seen":"2026-07-25T18:14:11.514218Z","times_seen":197,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/css/79ae09a1bc679f56.css","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.601Z","timestamp":1781973548601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/css/79ae09a1bc679f56.css HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 12 May 2026 08:53:05 GMT\r\ncontent-encoding: br\r\netag: \"286236cf46af589d716156fb24819daf\"\r\ncontent-type: text/css\r\nx-amz-id-2: YBAdjW66EEjAy+oYl9C+nvZ7Y+jL49NmsnXxt8MIqwiKC90hgrbr8hdAOLOnjK99brFlzbZ4wiPamHRM5amhfxZTxoY77qWX\r\nx-amz-request-id: ZSYKFR1MEW0SXQEB\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: max-age=31536000\r\nage: 3267671\r\ncontent-length: 2419\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 9897981768927541763\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9718,"size_decoded":3155,"mime_type":"text/css","magic":"ASCII text, with very long lines (9718), with no line terminators","md5":"286236cf46af589d716156fb24819daf","sha1":"2681ca1747802f16aeb60dd02dc6428650237a04","sha256":"5af36c185621957659ed2cd3aa51be3700502d2f19aa88ad9104b1532069beaa","sha512":"be524f2e91a6fd65b524ffcbb1a811d966ee7f0f6590df06bf732bee060ce02cc8a4548163615f6945c396c61cb7aaa438c0676bf05470cb3e9e70406cdd9df5","ssdeep":"192:dqxATsnupPmvt9lg6Cd21FxtvFsRsT2BTyTLSNSFzFSCiSXAjc:yATsupPetfgPd2Lxt2+BPL","tlshash":"3a12933b7f793f1a4162ca9fd9c83a9e4e3978c152a24166fd0a612883cf1621275f1c","first_seen":"2026-05-16T16:01:00.659371Z","last_seen":"2026-07-20T17:47:50.386853Z","times_seen":22,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/antd-8afed87200950a32.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.637Z","timestamp":1781973548637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/antd-8afed87200950a32.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 11 Jun 2026 09:08:31 GMT\r\ncontent-encoding: br\r\netag: \"1e6a952411e853a91801a9cdf547a87e\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: YbCzgTkXvOi52p8OJLge/gWG7ajInqDtxBJiZgFGcmqELsWC6fYSBwLAQ1R+1svY3DbtPNmZZ3WRLZM1Prtd0H9lbIefwunm\r\nx-amz-request-id: 0KRJTXF8EGY61PM9\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 592833\r\ncontent-length: 205044\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 11125851705258247070\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":849690,"size_decoded":205838,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1e6a952411e853a91801a9cdf547a87e","sha1":"af52a230a87040a2800a60d1653f483dc515ab49","sha256":"2582bdc685902d89ae74c94943a5bca993cb370acd089e11f852118ce5dfcafa","sha512":"160a787025a1bb10aa5dce78ad4280d6c0d74b9e97058560f3cbf503ee423d4f0401b9d347bc02afc600751b49b93b19d8ae1e39259e6217f8ec3946242e62c8","ssdeep":"6144:9suEs0R2zrsZg5bN4wncMlKzaYDIfGzg3lux1ms36+kQnJ2dsB6K+Ulw8ONDYEfA:mu70W3uwncDI1luxvJZolnvQUC","tlshash":"85054da97642b47452af80d9807f0705f33a392569198e50f3b7c9ce7298ec9e532f36","first_seen":"2026-06-18T16:35:42.567306Z","last_seen":"2026-07-02T19:08:08.616154Z","times_seen":10,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/195-05a183aec08ec796.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.644Z","timestamp":1781973548644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/195-05a183aec08ec796.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 05 Jun 2026 07:54:01 GMT\r\ncontent-encoding: br\r\netag: \"cb964ec81708237760a164f7b4e0229e\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: J1RneK3KNB9G5GiaN2Lfmw+C1F+zlbqxIPS5vjhX+nWo+HDf5DjtdGk6hOknOvlSGr/UfhlkNeY=\r\nx-amz-request-id: WQ7J1X3KWRJTGA7B\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 1292318\r\ncontent-length: 8844\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 3692866807060846977\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19678,"size_decoded":9616,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19678), with no line terminators","md5":"cb964ec81708237760a164f7b4e0229e","sha1":"8459ae0f805f836516a91184a6bec96da4b313cf","sha256":"5d5771a5ca0bb637526870dac8e5724fc90f49d3f4038521bc3f13d6a08535ac","sha512":"164be7bdd1fbf704ebb10c9976434b1c50f7e1754c331f168f8b609936197f1d4c1efee26d841064d3c9e8e5a9bd16676ed4ec48554c2805eba4ddff26c1f9eb","ssdeep":"384:ri8qSaiYM++HeG00zRJk133I1aqaR0Qe+Gb+XOyf1JIex/+q:Pj++g+2c6bGgL/F","tlshash":"df92a99b1a0f67a218153ea7558a2dcde114f0e2ae838bc8f0b25d9cd1dff1945c927c","first_seen":"2026-06-06T16:29:24.752326Z","last_seen":"2026-07-02T19:08:08.541972Z","times_seen":12,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/common-static/fhs/compliance-upload/low-cache/compliance-sdk/home-entry.js?t=20","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.658Z","timestamp":1781973548658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /common-static/fhs/compliance-upload/low-cache/compliance-sdk/home-entry.js?t=20 HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 18 Jun 2026 07:50:57 GMT\r\ncontent-encoding: br\r\netag: \"af3170d8c2a63d029d996a9b3a92d446\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: CXmHNEegB3j7POa9YX9ZbFeIYoBcqZudX//4t6OnejHMk/ndPyqIhg3kvylm0oB7RiDNui+DPsSSlbKw8V1gZ0qUUKushqRn\r\nx-amz-request-id: 2AH5352TB123W3WZ\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, HEAD\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: Openresty\r\ncache-control: max-age=60\r\nage: 0\r\ncontent-length: 6222\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 9702848458963764532\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41547,"size_decoded":7246,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40553)","md5":"af3170d8c2a63d029d996a9b3a92d446","sha1":"3400cbbd829f6b35d77b3da4add0733d4f371d62","sha256":"611ba1d884a3d82007da3169b533b47d2c72a01d645ee9488e6c3b6dd4918684","sha512":"52c1444cbb262c6eb4023e0ca33d2dd86c22710d535deb7a20d3957bdc6695d6b0f391ccb2523f7ecdf434ac96b90ba9b4ae95655e1957b2aaacf84cb218ccc2","ssdeep":"384:+f/nUGbjrby8O+OKOSqNI87I2ydC/A/Kx0wLhqRqascNZQyJnDF+1IPqazFgydT8:kvUojXWB9+VYascpDKYgMY/zR","tlshash":"f913db457555ad3b0097ee6f6c2f0d3e393ba448c118873adda5d06e0b7efe162223a4","first_seen":"2026-06-18T16:08:53.193654Z","last_seen":"2026-07-25T18:14:11.505839Z","times_seen":21,"resource_available":true,"data":null}},"time_used":837,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/monitor/monitor.latest.js?id=68\u0026t=10","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.675Z","timestamp":1781973548675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/monitor/monitor.latest.js?id=68\u0026t=10 HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 20 May 2026 07:02:37 GMT\r\ncontent-encoding: br\r\netag: \"3ea535dcd821b44baead1c3fb6298d49\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: 5DyYMxzEz0Se7rRVnNJnyolo8SsopXpO5zFBdBUy+vPcmGx8IZJQMD1xRDmQAuG0H46v39TCYfvX0SUb5HRqpFpWUoagzDFj\r\nx-amz-request-id: 2AH09AZ2R7XP1Q8D\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: max-age=60\r\nage: 0\r\ncontent-length: 29063\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 18155394110116066514\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":84161,"size_decoded":29988,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61386)","md5":"3ea535dcd821b44baead1c3fb6298d49","sha1":"5c65a36b12d6e1e3fc6dfcf89cc6d925aded697a","sha256":"a74496faaa3a98b84b7d67c2c7f35516e6c0fcd46b0978b97afb59886c41d19a","sha512":"0a585bddaf0f727b96686c175fa38b28cb21ee0ee6bdc5cd7c1334bf0771ebd77eee3178c7a2bff820d72c4a9cbe8aa398d3bf1d305ead2d91ff56dfe7fa47d4","ssdeep":"768:d3CtDMuobJqHWNHh8FHYQ2sFaj7NRhmBXFEDSY3PRuhOiNoYL97pfXoRKDh4k14H:dcMfq2NHhfQ2z/4df4keYxh556v/","tlshash":"b483f8cdb586b03103b3a9b5903f111af23e2a46644dc064f62ae9d57cb958e9323f3d","first_seen":"2026-05-20T16:33:42.24462Z","last_seen":"2026-08-03T18:01:22.058454Z","times_seen":202,"resource_available":true,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/main-app-26602f2784c27c15.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.632Z","timestamp":1781973548632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/main-app-26602f2784c27c15.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 11 Jun 2026 09:08:31 GMT\r\ncontent-encoding: br\r\netag: \"52f66b136159017e888f082f1f821c52\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: KUtggaaH+xqh0JIC5E/3WaB7uB/Bw/6hWlCx1capHKh1aKcPdJ2RZ2FnJrjmMUjYXb2d1Nqtkb0RhYHTa8yEmmhNYnLphQhq\r\nx-amz-request-id: 0KRP5E3CGJV3QVDD\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 592833\r\ncontent-length: 198\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 2321183922091293280\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":471,"size_decoded":988,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (471), with no line terminators","md5":"52f66b136159017e888f082f1f821c52","sha1":"efedf0649a495a3a4be1bde9a790aa58af22a129","sha256":"0f7357abe6a654e5cb70600baa1f8d04f57ca41e876e3e567cb3bee546a1ed59","sha512":"a255e5d93c900c0b9c8730cadcf23c56d751e7f69af513917c2ca1a66f0782037067d427abb8076992e1279e572ab2672ca10a03212068a58bfd58ab116aa869","ssdeep":"","tlshash":"48f037964f0cf42f5d26ae65fda39ce2285f4135202b4e657c50eda12c23bacd2a0449","first_seen":"2026-06-18T16:35:42.535602Z","last_seen":"2026-07-02T19:08:08.612431Z","times_seen":10,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/home/loadingPage/melanie.png","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.641Z","timestamp":1781973548641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/home/loadingPage/melanie.png HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 09 Apr 2026 03:11:38 GMT\r\netag: \"34c51c7d0a73c540e0abbb2d3c9c238c\"\r\ncontent-type: image/png\r\nx-amz-id-2: 3zgTPIrmU/MSZnAiNMC+NnxsmI10SifXuHmTu3ojlSwsqvnG8hI4NPJE4+hHF5EPivgu3yuiBpq2zXWlik7eIl4pz59O2OeB\r\nx-amz-request-id: HJZ938DS733TE07B\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: max-age=31536000\r\nage: 4589419\r\ncontent-length: 42661\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 2445301057327703359\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":42661,"size_decoded":43377,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"34c51c7d0a73c540e0abbb2d3c9c238c","sha1":"af4d2404946dd7eb972ea312ce005b6402b45960","sha256":"d2f9356970d353e2a309e4a93dfaacc3cbe354f1dae5dc0ef88644b976d68260","sha512":"fbbbcc6e0d1a3e27bb4cbbeba57ff2b35431550fea37a3cc0c8a205745630bf10adabd1bac6ff279e35b81f7542f6d6b33228c66439c920695a6c9dec98c2364","ssdeep":"768:SaI8lMFDnvQfo8kyGPKy3gVMa2OcjE9sHf96sqV+McMSPPu1gAra:bwJQc5Na21g9sHIs1+17ra","tlshash":"741302653fbd7a4780e59b28f2240e355086b05980919f70e8ccf58338d972af4bef55","first_seen":"2025-08-21T17:30:09.648801Z","last_seen":"2026-07-25T18:14:11.515197Z","times_seen":189,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiliates.bybit.kz/static/affiliate-portal-home/_next/static/chunks/77.117d5ee76fb5dab7.js","fqdn":"affiliates.bybit.kz","domain":"bybit.kz","tld":"kz"},"ip":{"addr":"43.174.196.245","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiliates.bybit.kz/","date":"2026-06-20T16:39:08.653Z","timestamp":1781973548653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.kz","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:27:E4:1D:0C:6E:09:B1:D8:62:D6:9B:50:D3:66:0D:37:45:D0:9C","sha256":"D2:47:E2:0A:3E:26:47:AC:13:49:38:AA:E5:F9:9F:23:97:80:62:0F:A5:D0:C9:CA:86:1A:87:CF:CF:F0:66:38"}}},"request":{"raw":"GET /static/affiliate-portal-home/_next/static/chunks/77.117d5ee76fb5dab7.js HTTP/1.1\r\nHost: affiliates.bybit.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiliates.bybit.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 05 Jun 2026 07:54:01 GMT\r\ncontent-encoding: br\r\netag: \"196d625d9d140204728a7a93f3762514\"\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: 4NMDcmx7R8Un0rPbvmv+1NfgXWUpryjvW8v+x/y1osQFpPkA52HXUc/WJzHREQO//fsZ+bXuoPQ=\r\nx-amz-request-id: WQ7HV2SD5FPY7DTC\r\nx-amz-server-side-encryption: AES256\r\nx-cld-src: Loc-A\r\nserver: Openresty\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\nage: 1292318\r\ncontent-length: 675\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Sat, 20 Jun 2026 16:39:08 GMT\r\neo-log-uuid: 4220532373520178482\r\neo-cache-status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4272,"size_decoded":1446,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4272), with no line terminators","md5":"196d625d9d140204728a7a93f3762514","sha1":"2cf8d403fb700f00927ab359cdb45d42f06125c0","sha256":"8e91e0a03ecbe4a0d482a356492510c7ef42d4abdbe394edeee508a83eeeae71","sha512":"a1c4569b593d187f15d7f5480c9c97edf8cd2cc5a37abd773d155ad2d311adfc447a06bca129b397c5d70a94962251c04e6727322dc1c75ce47a799fcdb813a4","ssdeep":"48:ibIZlWPPHhtrIjRujCAITIn9IjBHcITIn9IjKRyHP1t+6RujCQId6yBH0Id6yKRc:b2PZtrqpAIYNIYK1t+IpQbjbw","tlshash":"2491bb78c289e7fdf71608d4a40b400df52f1f64e21d08f8a5aabe2953429ec72677d5","first_seen":"2026-06-06T16:29:24.750781Z","last_seen":"2026-07-02T19:08:08.594825Z","times_seen":12,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"affiliates.bybit.kz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}