{"report_id":"da432b1a-d87a-41f0-a2b8-dba042ea83b5","version":0,"status":"done","tags":[],"date":"2026-09-09T19:19:34Z","url":{"schema":"http","addr":"bitapp-24.org/","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":0,"asn":201064,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"bitapp-24.org/","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"title":"BitApp24 ™ | BTC Pro Air 24 \u0026 The XBT 24 2025 🥇","dom":{"size":71552,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3842)","md5":"2ea352b6c9c9f37acb469d487161abfc","sha1":"c7a24b8712931e64869f1f435b445233e377e1a6","sha256":"300475d346cf14b8afbfff63088bca6c0c5021caa7cee5c7da5b96bfe7d104ee","sha512":"4cc6214aebe0559409b14678b2d2f981fe59b84ac9506ba107cf51d28e1313e2f1c933924a0255be04d34d979066cda1e0d1442c995f6ec6d66dccb98658554d","ssdeep":"768:azB1YbdLhKmYZMCnZgf5ZsWXlFqqBbeyXWfKb5NK7vky/:kCnKmYZMCnZgf5ZsWX7qqteyXWwL+ky/","tlshash":"3963e63268e4d667824301623711284dffe19547a3b20958baec46177fb2db6c933f9d","dom_hash":"domhasha78d6bd7380bfd23023859f6491b24bb","first_seen":"2026-09-09T19:19:39.339909Z","last_seen":"2026-09-09T19:19:39.339909Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bitapp-24.org/","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":0,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T19:19:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"bitapp-24.org","ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"domain_registered":"2023-09-18","domain_rank":0,"first_seen":"2026-09-09T19:19:36.100288Z","last_seen":"2026-09-09T19:19:36.100288Z","alert_count":335,"request_count":67,"received_data":859326,"sent_data":36152,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":2,"received_data":98264,"sent_data":1146,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":30754,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitapp-24.org/","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"2184ad5e801bc276de7363a10fb1dc52","sha1":"60554dd9efcbae5824db8f73169333508ca695aa","sha256":"9d8515778e529a9e63cb04f4218399a10def4892dd7e6ea5b9a504ea859fd1c1","sha512":"3a24f88eb094d278127472fa97f407fe47cbbcae7b8edf310cd55c500836e97cfdbf7cfa2e40c243c24aec712c1ab35813dfc2034f8a025d9a3a8e6cf6133e45","ssdeep":"","tlshash":"f5f0e53400b44036c113579739cebec0611118bba18cac99775f8a0eafba8b00d792d2","size":504,"data":"","first_seen":"2026-05-26T00:02:24.477437Z","last_seen":"2026-09-09T19:28:33.709724Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0da5d9353c2cc7939173530cf009920","sha1":"59126b6d6c41f3557b0b089b8d012271d29ca375","sha256":"b5e28bcf7ba444ebcb6c7a44e194eadacd48564fb25d4c71ad1ac0fa6ed6cb49","sha512":"d9eb2ba3ac97c833a778260db1f62d693cb44f4a9338a82491b8a15d36078a0b1c2bb7b07a70efdaec7022b281fcdbbd5e6b815157a5c84dba286a1171609819","ssdeep":"","tlshash":"05f0e94446fd10e0034fb27faaab5f863130408f60040e0a3e2c4fa47f65c755ac56a8","size":553,"data":"","first_seen":"2026-05-26T00:02:24.478642Z","last_seen":"2026-09-09T19:28:33.71152Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ce8bafd70a61e353aeae83952923dd6","sha1":"deb4a82e18ca9413987a46e7b123a7486eba939f","sha256":"48b2f74e37f759c08cd0552a80f7062e7f7408b51d92ca6f859c1200cc4115ea","sha512":"c69b6e513cc169353352cebfa5a4ee1426e84d47abb7b10e8152ec6340b89d9f09b0e0047dc66dad1254123c65aa6cbacc39c25de0455770fbf0e289426cbb35","ssdeep":"","tlshash":"03e07d54103808b003178aaea6d76e867330b097e0449d8ebb0cc74e2fe89f869637d3","size":357,"data":"","first_seen":"2026-06-28T11:33:48.196102Z","last_seen":"2026-09-09T19:19:39.446187Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"eventHandler","is_inline":false,"md5":"d340024e4734e72c0555fc2a541e74a1","sha1":"995e53f4089e42f677947a6f48e5ff2a25ed9ab0","sha256":"8a04e32acd55cec723824bb94592371f3dc9ab66e579560075bd3c8e54efb9a6","sha512":"86a412db921513f86162b7864a0002032b11a6e4514b079ea5a81bc8299c46b5d1a1feaf8199b976b9a8b24257322822fed38cdffbc32c1575a242bcc39854a3","ssdeep":"","tlshash":"537000cc003c000000330300c03f00300c000c3f000cf30cfc0cc0c000cc0000030c00","size":19,"data":"","first_seen":"2023-07-02T07:28:12Z","last_seen":"2026-09-09T19:28:33.708164Z","times_seen":723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/form.js","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"57222cd559e3a912092239fcdb6706de","sha1":"d65d9e06d224a9a7e22916dc04eae83d1f26d6c7","sha256":"81a17cfaf5731292df919a903727b86550d2a57e1ad29893dc693ef9c2013113","sha512":"2960f1e3b8cf8e96b65fb4875f6241db594a7862c5fe1cad5e5d859df03b780c49293e4f4bca9b89db0070bb6ad7556674ec1b8bb3672c23619cd10c1cf5c232","ssdeep":"3072:CtjnGnbliOU03o4PwjRSBZTLqstc3ikgKc0Njv1BfEQ3j:C56bliXR4ZT1toJgK5jv1BcQT","tlshash":"f1542cb7b5407b2b33b53a98aa27914fab8c4c52dc8dd09ca9efdcdf585041160bdb18","size":279475,"data":"","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:28:33.701854Z","times_seen":448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/static/assets/app-1858208c.js","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"464a45511005c2aab58d174e1e118de1","sha1":"b17021ccaf6a768352a9f1c314776a8187c33cc9","sha256":"290dcbcacfefaa906522d379d214817d17e9273f5c6a5c80d9439e56b2a89ee6","sha512":"37cfad281200e9f096b9ad5e34fd0c43692d3d1d582d505c453eaedf39b29ba064d3e2d030605d80b27c38d101c7949b617c4755f70e9465066e63836d16e326","ssdeep":"768:r3XvoHfcZg3Sou3FZ+tZAMwQEjz83Wb+chsZkXehg9xzgos:8jiou3FZ+tZAMwQX3Wb+clXehg9xc","tlshash":"19e2b4cd7681b02867a711b6e1ef184fb37a2484980e8514a4aef4d43c7d4bd436bded","size":31567,"data":"","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.392519Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bitapp-24.org/flags/hr.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.858Z","timestamp":1788981543858,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/hr.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 982\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-3d6\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":982,"size_decoded":1300,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"41a7b90f600ed32eefb5e620a4f653fc","sha1":"7a6ab7cfc55a1239de75e073430c9634d5c18746","sha256":"63e36970eea32e52849d7b4d3a15d1da36be12ad3078df8c2b848aa7e9baa19b","sha512":"004bddcda655838947c0922be1f74ac3833ca444f3c872c9432232e5660f7ca9288c87acf2d1df19a21a768ae8a04e3f67278f7b6be4998a5e0355f279ba92dd","ssdeep":"","tlshash":"261165dec411043c410b39e6ae9b0bd989b767ac43520a45906db49abc795043ee49a5","first_seen":"2023-06-13T00:33:19Z","last_seen":"2026-09-09T19:28:33.7067Z","times_seen":5317,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":443,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/et.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.863Z","timestamp":1788981543863,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/et.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 522\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-20a\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":522,"size_decoded":840,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"3dc9c2f215da1556d324e0f48ca7f0a4","sha1":"3576caa6334d061fc86b4f3140968a989e07e189","sha256":"9d6e5b81b5b11a75fe5f89ca592837df3070467960556e6f0aa27d561c6c9a96","sha512":"2dc9f8514da837ac73bd675ff15ac67f29f90ef4140a0cd3267087cba295e3078c8c815fb4ca2df81c90351a2ec3b47b03061c7b10f93ccb6725f47d57387dd5","ssdeep":"","tlshash":"99f07cdd0308385c887b0c01c3970323d4d75c55671f2d05253c59ff5446dff4564551","first_seen":"2023-08-05T11:28:13Z","last_seen":"2026-09-09T19:28:33.654531Z","times_seen":473,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":431,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.998Z","timestamp":1788981543998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bitapp-24.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:22 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 31662\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-10T02:26:00.312504Z","times_seen":339796,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/action/click","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:04.107Z","timestamp":1788981544107,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"POST /action/click HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://bitapp-24.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: application/json\r\nContent-Length: 66\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66,"size_decoded":252,"mime_type":"application/json","magic":"JSON text data","md5":"6f8c873c1292a8d174a1b93439ca95b7","sha1":"e44b89e08cff0dd8e2e02205a21f056ef73f62b0","sha256":"46fd76c098deccbe49acbd82b05a2036b8377c578f873ccd551f9c640673886a","sha512":"26db742c77d44e551e9e707ddaacbbf06e1ccdb6a5ab57ed4f22d8a7ea5baada737eafead7d2328bd96ec25aba5c67c9d8f033eadb509445424014db94873f1a","ssdeep":"","tlshash":"d7a022832828000c0c8c00820f2283300a200be2ea32200322a0c832202e0ea0300e3a","first_seen":"2026-09-09T19:19:39.349959Z","last_seen":"2026-09-09T19:19:39.349959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:04.111Z","timestamp":1788981544111,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 55926\r\nLast-Modified: Fri, 10 Jan 2025 16:04:59 GMT\r\nConnection: keep-alive\r\nETag: \"6781452b-da76\"\r\nSet-Cookie: lang_fx=;Path=/;Max-Age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":[{"name":"lang_fx","value":"","quoted":false,"path":"/","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lang_fx=;Path=/;Max-Age=2592000"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55926,"size_decoded":56212,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3842)","md5":"567432d4265197603de750a51bbd02ce","sha1":"34e3d7f33d1684acad49656056e6cfe6f1ede6c8","sha256":"8662e4e2b7c901e6d9779a273b0f3ccadf9b6f696a4229e63ce30f52a5f44311","sha512":"9801ef5e28e95db56ef717b27c108f2a3df3ef276d8e4a071b52693a6deeab66d6bcd7c6e1cca20780f0258f429469e442f4096ec684be2da394e8848aa89b83","ssdeep":"1536:oy/KmYZu2nZkr5ZCM/bqqteyBWaLEzkye:oyBLte4WaLEzkye","tlshash":"3043fa3240f05567434241622b261d5effa1a48bd3a3490cbaec462bbf92e75cdb778d","first_seen":"2026-09-09T19:19:39.353054Z","last_seen":"2026-09-09T19:19:39.353054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/ko.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.870Z","timestamp":1788981543870,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/ko.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 1361\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-551\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1361,"size_decoded":1680,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ed87e4c8a4dd16c9c3f8499a0aaa28bd","sha1":"f818a0782047c159ed8e5cd041ad7f09e8fe52fb","sha256":"eb59eb7dcf155a7b38c8f4c9db869ed942bf55a4457e3f4ff0791be4f2c736d5","sha512":"bcf1992bfb1d0ed92e4393e0b85fe5c768ed29285d38a259d0cfb60827537b74d39a925cfc4df58ed8b478d5015fad047a211ec2ddffa5a69b0d08f5abcdab6e","ssdeep":"","tlshash":"05210bad1b7c302cd6f9c5799909fb01ddfb04040c9fa1c59129d6cc28c588b70d5436","first_seen":"2023-05-07T21:05:59Z","last_seen":"2026-09-09T19:28:33.661818Z","times_seen":5485,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":321,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/action/click","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:04.116Z","timestamp":1788981544116,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"POST /action/click HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://bitapp-24.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: application/json\r\nContent-Length: 66\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66,"size_decoded":252,"mime_type":"application/json","magic":"JSON text data","md5":"37387b669866abd9d50e8fb06c354eb8","sha1":"55d669168cdcd07b8f5ead0fbbbc61e3ec8568c9","sha256":"d3c205b11dcd3386c8dd03356dc96b730236141a49e23da5598b66ad833f7b27","sha512":"af9c40bbb6fc695bbc8a0420a2af6f06784a9b6c8540ac424d6aab5de13414aacf45d065eb200abe716434e239e0b06ec89b063b0c0ab85e9838acf20403a648","ssdeep":"","tlshash":"eaa0026b1471c5540a5c68c714541138c6a477575b74795742d5a44044aecaa3162b3e","first_seen":"2026-09-09T19:19:39.357838Z","last_seen":"2026-09-09T19:19:39.357838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/form.js","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.824Z","timestamp":1788981543824,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /form.js HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0, must-revalidate\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U0X115tae7E1nDwKaoSOb0MR%2BOs4qSLG%2BwQfJlodn%2BJPNzxzgQDGJzpUTboK5fUovvlqfK6KG3E%2FMCohoiEQIn7%2FC%2BKdUC36RUcG0U8mz3%2F%2BsZr0n4iBJO6O%2BT6k1euM3X3LGBesqe8DiiKi\"}]}\r\nETag: W/\"2706931c9edd6c7804715d81a4fd3a4a\"\r\nContent-Encoding: br\r\nCF-RAY: a3888ad96caa0358-CDG\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":279475,"size_decoded":90898,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"57222cd559e3a912092239fcdb6706de","sha1":"d65d9e06d224a9a7e22916dc04eae83d1f26d6c7","sha256":"81a17cfaf5731292df919a903727b86550d2a57e1ad29893dc693ef9c2013113","sha512":"2960f1e3b8cf8e96b65fb4875f6241db594a7862c5fe1cad5e5d859df03b780c49293e4f4bca9b89db0070bb6ad7556674ec1b8bb3672c23619cd10c1cf5c232","ssdeep":"3072:CtjnGnbliOU03o4PwjRSBZTLqstc3ikgKc0Njv1BfEQ3j:C56bliXR4ZT1toJgK5jv1BcQT","tlshash":"f1542cb7b5407b2b33b53a98aa27914fab8c4c52dc8dd09ca9efdcdf585041160bdb18","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:28:33.701854Z","times_seen":448,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":130,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/sl.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.879Z","timestamp":1788981543879,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/sl.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 730\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-2da\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":730,"size_decoded":1048,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b578df2953e85fcf5d265ed486a6fe61","sha1":"975e2ec9592cba08ce67a8d5296b78b77e4c28d7","sha256":"bc8eca69c4ee13e933dbbc783c5bb22a10cb1dd70db91e987c77adf19e4ff9f8","sha512":"df303892e7fcb0e940a02a05efce934c61731ee406a3a25739fa240040b89f87b7c5cb49968f3a69183f29a09356473f147d4ab2962b279a2c24cba3d1e8ac46","ssdeep":"","tlshash":"8b0199ec050c59684d6045f224479116d3c7dca14d2b3d5e75de5ad352cb58e61dc702","first_seen":"2023-06-15T00:19:25Z","last_seen":"2026-09-09T19:28:33.669148Z","times_seen":503,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":383,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:04.119Z","timestamp":1788981544119,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 55926\r\nLast-Modified: Fri, 10 Jan 2025 16:04:59 GMT\r\nConnection: keep-alive\r\nETag: \"6781452b-da76\"\r\nSet-Cookie: lang_fx=;Path=/;Max-Age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":[{"name":"lang_fx","value":"","quoted":false,"path":"/","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lang_fx=;Path=/;Max-Age=2592000"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55926,"size_decoded":56212,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3842)","md5":"567432d4265197603de750a51bbd02ce","sha1":"34e3d7f33d1684acad49656056e6cfe6f1ede6c8","sha256":"8662e4e2b7c901e6d9779a273b0f3ccadf9b6f696a4229e63ce30f52a5f44311","sha512":"9801ef5e28e95db56ef717b27c108f2a3df3ef276d8e4a071b52693a6deeab66d6bcd7c6e1cca20780f0258f429469e442f4096ec684be2da394e8848aa89b83","ssdeep":"1536:oy/KmYZu2nZkr5ZCM/bqqteyBWaLEzkye:oyBLte4WaLEzkye","tlshash":"3043fa3240f05567434241622b261d5effa1a48bd3a3490cbaec462bbf92e75cdb778d","first_seen":"2026-09-09T19:19:39.353054Z","last_seen":"2026-09-09T19:19:39.353054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":58,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/149/conversions/91_107__107_64da4ec5effe5_feature-img-2.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.831Z","timestamp":1788981543831,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/149/conversions/91_107__107_64da4ec5effe5_feature-img-2.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2100\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-834\"\r\nExpires: Sun, 08 Nov 2026 19:19:03 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2100,"size_decoded":2420,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 107x91, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1465965d7fec4f06d3adcf7ed2ad85a9","sha1":"2a1de564cad87f4b237e48feb80ebeface0704de","sha256":"0bc6b1f9d6c0a5bd559f6323f094cbb25ba573ffec28d4669ea5229ee7336574","sha512":"48938d44b388be2a688f46d80dfc143667a9ccd3e851c1e860acc9dcde34029d8f4d693820acff6f0bc1f912ac05a600a17cc9417b8fc60e52ea0e07669ce970","ssdeep":"","tlshash":"b141092c8703e1cac72b409d78564eb068876812ba9d7de7bd02321bcb117bdaf45356","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.363107Z","times_seen":11,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/151/conversions/40_40__40_64da5058014e6_bc_asset_13.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.834Z","timestamp":1788981543834,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/151/conversions/40_40__40_64da5058014e6_bc_asset_13.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1002\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-3ea\"\r\nExpires: Sun, 08 Nov 2026 19:19:03 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1002,"size_decoded":1322,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff3e8da1791d2cea44df225cc02eb995","sha1":"360ceacf7383e53475ce6b15da16d192b15b9a0c","sha256":"6be2e24900b4b56e9789ba0287a59d6f7c411f0fda6fc86e27dc31cc9139de7b","sha512":"0c21e932e2992e70dff426905ec2c8fc091df9914e6b30de127075ef02e663411ad70fc63998b1b5d1bb151e853624dbbe54d70d3146c6186e88594405b123a0","ssdeep":"","tlshash":"4911c83d4dd7c132c8847aeb1e20341c189acd4ec128f4b0bc11ecc8a665d30aa24e79","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.366764Z","times_seen":10,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/152/conversions/40_40__40_64da505c7846d_bc_asset_6.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.838Z","timestamp":1788981543838,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/152/conversions/40_40__40_64da505c7846d_bc_asset_6.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 634\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-27a\"\r\nExpires: Sun, 08 Nov 2026 19:19:03 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":634,"size_decoded":953,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"543781848b21e47b74486163ebe4e62c","sha1":"4343224d3d343a23298596e3020318fc5fa1f5a4","sha256":"6e51badf6ac1d946758d6cb2ef065cc9f6a7012ceb2fd645731f928e9407eb0c","sha512":"0ea2fdfdd4adc1a992c9ebbe0b9f5fc76b9bc85ff99045572a181011c4fac60663bece331367dfc487e537d910c6384d4aee7bc7142509eda57940989c30d315","ssdeep":"","tlshash":"daf0025a7f6fe80cd84a03a13a2e1fab8ba7742140ad9f983cf4f0d774141d9ae5551c","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.368817Z","times_seen":10,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/156/conversions/143_383__383_64da50d8de156_bc_graph_blu3.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.841Z","timestamp":1788981543841,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/156/conversions/143_383__383_64da50d8de156_bc_graph_blu3.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10190\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-27ce\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10190,"size_decoded":10512,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ab099fc77023f6bdcfae71ac4623e4c","sha1":"592b3e2a502b029232553aaa43f1e8c7c9c0fe79","sha256":"2780a10701ba5a48a634077d30e4fde6d434668ff57f21ceb46c4fadd8fe1195","sha512":"9704d1fd8d8c9b551d2006c6aa30f551ec6cbe52d48b3afdc52e6d0a317ea83a34b3e5deedd59c0832a4c34d5335ffed6e8019aedf059daec43470015a371483","ssdeep":"192:HyQ0grZCNp/0Mo1WFAQKN25eXYRqrVc1+2sdJ/sSNIbBZw8phltrUZ4Ef:Hy/3p/NozJpXlCdsdS6Ibrwchl2CO","tlshash":"0c22c0c546dc5e7a5018d76389b72419ba1dacc694c03df1e12a31737631392389daf6","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.370648Z","times_seen":10,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/162/conversions/113_100__100_64da518670635_currency_426.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.847Z","timestamp":1788981543847,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/162/conversions/113_100__100_64da518670635_currency_426.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1974\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-7b6\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1974,"size_decoded":2294,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f07c36481ac5fcbdcfa630e5fc04280","sha1":"35c750aa15751ab82855b83a9927f11c66bddc90","sha256":"87e2984234be0348e5a1b9448db015520776bc863df2983225b020bde8decad7","sha512":"8d1001ea07456ea8d09ace8682aa673fd3a7b6d03eeb8a65e5d59f7d4d697049c34c909383eb81aa344fd82634469fac4a094ddda4e884e057c7851c4c648b95","ssdeep":"","tlshash":"4b412c6898e532bde84bc4a5028cdc731608a852c4679b64081e8b11f332dbf5729a0d","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.372583Z","times_seen":11,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/pt.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.875Z","timestamp":1788981543875,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/pt.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 1076\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-434\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1076,"size_decoded":1395,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"bb3cb490b63a8f51283c686b916cf4ff","sha1":"f325c9d27acb1d3e03a3481eb2c240368ae8460f","sha256":"f06d3def1549dd1b0a108ddc645d2e8906fb631e5812df19cdcbd887f3700bd8","sha512":"0bd183107bfbc19ad5ccb7458cdacbc089eb7335c3eabf4b47433c0ecff5fbabacb9beabfc026170c38cb7c71847ca274c3105c93fcc042c393cc53106fff3c7","ssdeep":"","tlshash":"3a11e9f94630fb9c8960f713b423ca2a988e0b250ba3381d50fcbe9a04135fb835c710","first_seen":"2023-05-07T21:05:59Z","last_seen":"2026-09-09T19:28:33.686593Z","times_seen":1081,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":411,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/tr.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.882Z","timestamp":1788981543882,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/tr.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 923\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-39b\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":923,"size_decoded":1241,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f9619dd9adc7fbb5244483ca00cace60","sha1":"4970f612a0e86100cf07629da3b9ea12af8891e5","sha256":"d11d2b8956d975cff1ea2a49763f6eec736506498be297be7ac1c4363cc95ee5","sha512":"a7517b1bc260669d644b2c61a533abc00cedfdb859254047ef6b41af111b9a09141c4cbb5871b13014a86978cd1730ae77f8dfc7cf6a27a2bbf46b69f0b70d81","ssdeep":"","tlshash":"de11c4d8f640b028237946efd102c9aee92fa5e65c8323c89109b08d738720d2292ba0","first_seen":"2023-05-06T09:49:14Z","last_seen":"2026-09-09T19:28:33.676808Z","times_seen":807,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/159/conversions/78_70__70_64da50f3a0675_payout.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.844Z","timestamp":1788981543844,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/159/conversions/78_70__70_64da50f3a0675_payout.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1318\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-526\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1318,"size_decoded":1638,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fe1f18a391f26b9a76cf7ddb76ad81eb","sha1":"9f68b50191d573609ded1aa9d9c9010ea6d3712c","sha256":"5f7f9cb79ffc0c62a814749678c4f6d08587309a4b8ce66fb82773ce2de5045f","sha512":"c7a25de805af35b436c36e2733ae46a12da669d8e26f79782e3f2f0b8fd6ab831f2f13672c1c30bfbe6ae3c51c21db7b97c02ea0caa2890341c4e70356d0894e","ssdeep":"","tlshash":"1d21a2b8e13606cf4c140e2f1f027b49a0164b392af8d8a2269a047e4a4e4222ab251e","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.375445Z","times_seen":11,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/el.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.865Z","timestamp":1788981543865,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/el.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 775\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-307\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":775,"size_decoded":1093,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2a53590607a148f0533ed4748d8aa209","sha1":"bac5251024524bb9f5c39535cb99be24d10c92f7","sha256":"aa9fcea0dd91bdb0749763eff1466b252e00096d762946f1eb6f5330834d9161","sha512":"782b8ae9eb9cf9de06ec3ad5e53fc0bb43d8a6e8e5d5125bc2f8efe6c0c1ff99adbb0f8d473ebad385a95f3b8fb6839d2c6f2cba70ad8361293054b8adb45aab","ssdeep":"","tlshash":"450175de265c68f74d1c4607816b0e3cec470ea206759a11d338bddc57e38126040207","first_seen":"2023-05-02T00:49:29Z","last_seen":"2026-09-09T19:28:33.682632Z","times_seen":788,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":375,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/sk.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.878Z","timestamp":1788981543878,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/sk.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 942\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-3ae\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":942,"size_decoded":1260,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f505130ed0303fde84806046537f1af0","sha1":"2571608ca84fa979a602373536380578ed7f3e53","sha256":"f264c92b7384498c50a373a441de7963aa8d20225884b59affadbb0e04de2a70","sha512":"5613b8520e3ae0e3a640493711e960803e2122d8d35675917639e69aa9e849b7a089f160de53c6f308c1d338b8d80c7ab5bc3b29d80224acbffc5f61f1742ed2","ssdeep":"","tlshash":"3911c8ef651c4a0e3d2b436249da098c0c8b0d109f06d85cd69bd1e63631a8e117ce84","first_seen":"2023-05-27T18:45:41Z","last_seen":"2026-09-09T19:28:33.685346Z","times_seen":724,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":348,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/it.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.868Z","timestamp":1788981543868,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/it.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 642\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-282\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":642,"size_decoded":960,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"922efc02f080135a63137dde4ffea287","sha1":"a4583be3e579a69a03a0d1f09995fdb6d1244f7d","sha256":"510116996dc4979a225c07962d84bb76e2b6340234c2c5e4280596ad08a632cb","sha512":"5d5cf4ee23afce714be0555318fbfabd0461aeae4530bd5f12d8fac947045438f97cf4a045751698514ace1465d6ae70c3f7d62cbc68437009d40553ffd7ff2b","ssdeep":"","tlshash":"bbf023a9016071eec83e2bf201410af955170da89b720008c04ff8d53c6e428c394686","first_seen":"2023-05-02T00:49:29Z","last_seen":"2026-09-09T19:28:33.656109Z","times_seen":1598,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":394,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/191/conversions/1333_2000__2000_64feff9371a04_bc_bkg3-1%20(1).webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.925Z","timestamp":1788981543925,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/191/conversions/1333_2000__2000_64feff9371a04_bc_bkg3-1%20(1).webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 238752\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-3a4a0\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":238752,"size_decoded":239076,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x1333, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9f742b43ffe0f5043a6d7a2d70c67f57","sha1":"10ccd3aea59f86701db2c2ff94e873b0506308e2","sha256":"6a277668b4385c636a10723f18190ba6c93a2a35439391afb1819d550f7146b6","sha512":"c64fc1332852a32132e1e4eff604d9ecf41d97fcbb318114a9391d0ebb9298c4b74495416c0aa3de965881a190b82069de41dcdc715429770ca845cf010e6885","ssdeep":"6144:TwtTv8SYMnOcL3JcPrC8Tmu5LL9xN5ezANSTY7mOf:6v8RmL3JkzZNLnN5eMNJt","tlshash":"cc342311b6a3344e6a8e1e722c06d16c785e343eca7027cee18da435e5f753609212ff","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.379363Z","times_seen":11,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":56,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/155/conversions/148_383__383_64da50d4a8f37_bc_graph_blu2.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.839Z","timestamp":1788981543839,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/155/conversions/148_383__383_64da50d4a8f37_bc_graph_blu2.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 12234\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-2fca\"\r\nExpires: Sun, 08 Nov 2026 19:19:03 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12234,"size_decoded":12556,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"efe991928a37b89da1b1cfc013e36f6e","sha1":"9d7b5fc4c3ef8f3a4aaab188f100600932ee599a","sha256":"4e3f7e51f897dacdbd4e968d1d1c97308f648220f21e75e6f136964212bde5cf","sha512":"6377b08835cdd9e4b04e2f9b7acfee7ce5eca0c4fa2567a7cee31508a43bd0c5cd4cf09a912c6c77597827ba25c36d04b4aea85f66a0c93b4eb031b8747b53c4","ssdeep":"192:wegwulONv8KMqlTpmPoJx6lJyE9NbxLZqTu7izJqD7wrQkoUv6Rvw4gENCo8dIJm:wevulqBMq9UE0byE9Ndt2zJvrQkoUMgn","tlshash":"b342bf52df44c312df578b718be49fa159daaedd2297802393e06dc2e960af31e60e11","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.381132Z","times_seen":10,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/168/conversions/113_100__100_64da51a11bf9d_currency_421.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.853Z","timestamp":1788981543853,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/168/conversions/113_100__100_64da51a11bf9d_currency_421.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2626\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-a42\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2626,"size_decoded":2946,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"773c93b234afabb627c4c9f1d39127c8","sha1":"9d3f3458fdd114d7ed6607dfefaf634e39eff520","sha256":"abe3804a1817fbb912f160761af18339e98a95b1c1e08b0f7d2e43dc9972fce7","sha512":"f24add5c47a53daa3a1e3bbdb07150e88204ca6f2ae2780ac4d400afd08517de885db67c3e97bf2c7707c203c9926147a80b5001f055f55a76d6aecbe3f31ad3","ssdeep":"","tlshash":"ac516d6375bd63be890201e191f91815152be7d831fd0f57260af42155ec97c5c7eb22","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.38296Z","times_seen":10,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":217,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/150/conversions/97_107__107_64da4ecaa968a_feature-img-3.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.833Z","timestamp":1788981543833,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/150/conversions/97_107__107_64da4ecaa968a_feature-img-3.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1736\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-6c8\"\r\nExpires: Sun, 08 Nov 2026 19:19:03 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1736,"size_decoded":2056,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 107x97, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b052a912b3785c28fb69b8757b8fb1a","sha1":"c7a9ca7a5119ebeb5a9f44544a73541fbda7c62d","sha256":"885b51c0b5dedab75a76f85034e4d55f20e5b8a163eda01db061e4904eecfcd1","sha512":"11182eaea430e6e9fc53efe69a84e4e7798e136e832d6de3a7615e623c10e3dce3427feab803dcca92470da445c79bc4a445a77ceefbb96d22a668cb8d03679e","ssdeep":"","tlshash":"93314a9d200c3877365deab8cd25080017443b09826b535ac0da516b6390b2b3a3d1e9","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.383994Z","times_seen":11,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/157/conversions/78_70__70_64da50e73722a_profit-1.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.842Z","timestamp":1788981543842,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/157/conversions/78_70__70_64da50e73722a_profit-1.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1064\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-428\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1064,"size_decoded":1384,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ef4032a7bd43f981da9697d80ba712d","sha1":"ddb3a36a158dbd19b7ea08bc1f967fb038972919","sha256":"a8cb4f009dd8fdcd647f9dca2e5748ea1f197f7f9117caba664dbe8a9e71bd16","sha512":"972d6c2e602dc7e34a32e1c0f438d025a776be8a9f59fbfe6653bd03c4c8ef3c3f2018a75b8e908233d6b6def0f4dd1e479966e337834dfb62bf0544a6494b6d","ssdeep":"","tlshash":"2f111c5bf149aac9dd78f6b70be2325325412103c47df5c3312dd580415c2c4b97609c","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.385064Z","times_seen":11,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/lt.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.872Z","timestamp":1788981543872,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/lt.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 560\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-230\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":560,"size_decoded":878,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"a07934e15a82eaa9d991f14b8738a6c2","sha1":"7cab59a83cf48a81e775a194bf74ab60d7348541","sha256":"2a58af20a8b362e09b7face70ed010abc065f364a89a0bc839fa1fab162d1ed4","sha512":"5dcf54f0afdd32f6c0be87a677386dad074481cb75d01f5e81a9f9bda600d775ddcb639e127975fbe41a33fad72f2e53dac0b13003e9aebb35557c3006226303","ssdeep":"","tlshash":"40f0e1f309824d4d483f896742021d55b5bb4846061e4d8c8416dcc9e7b2f97949cc51","first_seen":"2023-05-27T18:45:41Z","last_seen":"2026-09-09T19:28:33.683284Z","times_seen":526,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":364,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/uk.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.883Z","timestamp":1788981543883,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/uk.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 574\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-23e\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":574,"size_decoded":892,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"e2b587a3b15e34cb226afa3e572af279","sha1":"192d98c5d5d5b34123e8717c38b6733d8f7e5648","sha256":"4ec4c568d064866640e472adfb0b9f0f11162a94f179ea925f7b50cfe60fc470","sha512":"c7caf5055a177aeb344248c67aa4252c8864be09220523285ce4d3eaab9de757f93458e6e314655c1a2448879a87fe460dae2869f6c7ac9e6931c998e61f461a","ssdeep":"","tlshash":"d5f0e1e965101c78d51554d137a509b6da371d588aa20d6440648cbfaebc9c613aa163","first_seen":"2023-05-07T21:05:59Z","last_seen":"2026-09-09T19:28:33.670465Z","times_seen":583,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":343,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/static/assets/index-3d0b3aae.css","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.812Z","timestamp":1788981543812,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /static/assets/index-3d0b3aae.css HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: text/css\r\nContent-Length: 15932\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-3e3c\"\r\nExpires: Sun, 08 Nov 2026 19:19:03 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15932,"size_decoded":16252,"mime_type":"text/css","magic":"ASCII text, with very long lines (15931)","md5":"fa91548de5069df7a607c58fb7548c08","sha1":"6bb062d098347ba7000ca8a7d3326087366cdb1f","sha256":"3d0b3aaeac5b64f80535cfd65e95bd0489eb0674f7ca5a7fee58fc2ff6f739e5","sha512":"73bf35bc5d478adb782b802ad8f0078115e2b3a2be513548e1edf366e558921f65113f67220e4eb8f4b3d0aae81e42c458ce72524ab3026b5f757c2fa469cf16","ssdeep":"384:Nt55RGMQlLVehgwM2sp0kN2a9r8NxMYj4NwNTaI1iJ:BOmh4c9iJ","tlshash":"9b62a7139a91342db42bc03674d99a79762c9413e72b6fb9f9566234c7ca1e70333b8c","first_seen":"2024-05-07T14:15:49Z","last_seen":"2026-09-09T19:19:39.387117Z","times_seen":6,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/158/conversions/78_70__70_64da50ed18b79_bonus.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.843Z","timestamp":1788981543843,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/158/conversions/78_70__70_64da50ed18b79_bonus.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1554\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-612\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1554,"size_decoded":1874,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dad68ebff66bab187543ef7a9afe1c7f","sha1":"3d383e0e7764be83ae132c07c112dd56e372196f","sha256":"dbb4e90ea61ee61c915a599bdf97d6fa441fcb0b7a10ffe2092df8726bb337d8","sha512":"b1af3849ef036d333d91537c22f665a00e5b4debe4dfe7895d3bc2ef3e98a56ede607f7fb381287d81eb2416076c7c6f87695060a0fc18a6392e31341c97ecf2","ssdeep":"","tlshash":"f031eac9434202598ebb5e6baafd6e00f84dd3354e9dad900fda1daa6613243cd14902","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.388313Z","times_seen":11,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/en.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.855Z","timestamp":1788981543855,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/en.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 1767\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-6e7\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1767,"size_decoded":2086,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ec7233b5c80e5db85f7733b2ec25203f","sha1":"d4c36fff06dc7d920b10eb13b58ea9cd9321b430","sha256":"347ee97a492f79675749d03533810ff899ee6a784b4e156f3e0a7613cdfb3d40","sha512":"89e59fa7fdef1f61485176467fd127acf55424aefcf78aca5c3944e59f0b802591587c9d90c4ff158f955b74798e933b41c84fd0d3842fa4600ec8b583c113b4","ssdeep":"","tlshash":"693109cf0b91610bd9cba7827ca71c17366659d422a7be1b4bda0dcc7f85c2ad004e38","first_seen":"2023-04-08T21:50:50Z","last_seen":"2026-09-09T19:28:33.693514Z","times_seen":6693,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/no.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.873Z","timestamp":1788981543873,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/no.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: image/png\r\nContent-Length: 743\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-2e7\"\r\nExpires: Sun, 08 Nov 2026 19:19:03 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":743,"size_decoded":1061,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"d3b58f803a9a01a59210dd673998a229","sha1":"6caddb6c8e749e9c5b786a3984bb7bdbba2bafc5","sha256":"3cf52e677d7f7be201cbf6e3ec56ed1f48b95c47e5969ef2c2510e270133c4f0","sha512":"88aade4affd629926e473df3d26ecca5ba49c4b77da9343e58729cf3a2b1cd0b9d27d9e019018455bffd18b7a7570a5c14d918eff46deecc5821903f76094988","ssdeep":"","tlshash":"5501b5c7a78024a68b3eca3b40066a23976b28186e26100c5128a9bd02c21ed3d50bfc","first_seen":"2023-05-19T09:59:50Z","last_seen":"2026-09-09T19:28:33.663647Z","times_seen":802,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":28,"send":0,"wait":27,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/161/conversions/113_100__100_64da518245914_currency_427.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.846Z","timestamp":1788981543846,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/161/conversions/113_100__100_64da518245914_currency_427.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1642\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-66a\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1642,"size_decoded":1962,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1449218b018393f15e07216f182d4ed1","sha1":"fd87775d73b8d49da39b91f555afbf42001d1051","sha256":"cef1afd9b54ce0dbe40cd373eb815f83b1b57bb8399472ba6571dcd0b0417a48","sha512":"2baf9b327ac1b5949439b19f387a85d396e58c0b03fcb69499bdfa3c418ca2e04fdc36ba1a602c9814cfc82300241fd04deaa0dfc2cd76bb0d577ad89c8609fd","ssdeep":"","tlshash":"ae31088ec39011ead003ea36893065fc16e8c17e2485fa23062c8cdc5af8e2969cb343","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.390582Z","times_seen":11,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":180,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/nl.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.862Z","timestamp":1788981543862,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/nl.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 469\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-1d5\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":469,"size_decoded":787,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"213b7e930b8a41dcf4c9f95ac76dbe6b","sha1":"eccf14152b6ba26fe8a7d02f79586992be40db20","sha256":"5d75fea10bb270c341503bda4357e90bb069e3e46c7a670a3583f924f3524bd3","sha512":"11eb344a2480ad3f398f91dfc4e14a3f8fb1b916543986796b6d9c5b52112c4bfe6fe48b6dae287c892f4d73106644f8b5226e4a42920d847dede47113a61b3a","ssdeep":"","tlshash":"e8f0d4dd5762669b985a6b8701010c2088931f90191980474a4fe08d7e7320535bcd56","first_seen":"2023-05-02T00:49:29Z","last_seen":"2026-09-09T19:28:33.692187Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":302,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T19:19:02.928Z","timestamp":1788981542928,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: text/html\r\nContent-Length: 55926\r\nLast-Modified: Fri, 10 Jan 2025 16:04:59 GMT\r\nConnection: keep-alive\r\nETag: \"6781452b-da76\"\r\nSet-Cookie: lang_fx=;Path=/;Max-Age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":[{"name":"lang_fx","value":"","quoted":false,"path":"/","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lang_fx=;Path=/;Max-Age=2592000"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55926,"size_decoded":56212,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3842)","md5":"567432d4265197603de750a51bbd02ce","sha1":"34e3d7f33d1684acad49656056e6cfe6f1ede6c8","sha256":"8662e4e2b7c901e6d9779a273b0f3ccadf9b6f696a4229e63ce30f52a5f44311","sha512":"9801ef5e28e95db56ef717b27c108f2a3df3ef276d8e4a071b52693a6deeab66d6bcd7c6e1cca20780f0258f429469e442f4096ec684be2da394e8848aa89b83","ssdeep":"1536:oy/KmYZu2nZkr5ZCM/bqqteyBWaLEzkye:oyBLte4WaLEzkye","tlshash":"3043fa3240f05567434241622b261d5effa1a48bd3a3490cbaec462bbf92e75cdb778d","first_seen":"2026-09-09T19:19:39.353054Z","last_seen":"2026-09-09T19:19:39.353054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":0,"dns":306,"connect":28,"send":0,"wait":55,"receive":28,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/static/assets/app-1858208c.js","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.813Z","timestamp":1788981543813,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /static/assets/app-1858208c.js HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 31567\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-7b4f\"\r\nExpires: Sun, 08 Nov 2026 19:19:03 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31567,"size_decoded":31901,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31196)","md5":"464a45511005c2aab58d174e1e118de1","sha1":"b17021ccaf6a768352a9f1c314776a8187c33cc9","sha256":"290dcbcacfefaa906522d379d214817d17e9273f5c6a5c80d9439e56b2a89ee6","sha512":"37cfad281200e9f096b9ad5e34fd0c43692d3d1d582d505c453eaedf39b29ba064d3e2d030605d80b27c38d101c7949b617c4755f70e9465066e63836d16e326","ssdeep":"768:r3XvoHfcZg3Sou3FZ+tZAMwQEjz83Wb+chsZkXehg9xzgos:8jiou3FZ+tZAMwQX3Wb+clXehg9xc","tlshash":"19e2b4cd7681b02867a711b6e1ef184fb37a2484980e8514a4aef4d43c7d4bd436bded","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.392519Z","times_seen":10,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/209/conversions/45__65080a114ad9b_BitApp24%20Logo.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.829Z","timestamp":1788981543829,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/209/conversions/45__65080a114ad9b_BitApp24%20Logo.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: image/png\r\nContent-Length: 4062\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-fde\"\r\nExpires: Sun, 08 Nov 2026 19:19:03 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4062,"size_decoded":4381,"mime_type":"image/png","magic":"PNG image data, 44 x 45, 8-bit/color RGBA, non-interlaced","md5":"5cb8d4648b96b0f468a6097c93ea782d","sha1":"7eaefeaa90acda658ee83f63995c198d1ae88940","sha256":"a0175d1d5fa21f1d3180c80f197d36a4d742e37436bd2f212b879601daf4685c","sha512":"5eab94cc32ce2b017d65ac5f10353fb2460e1273c96383063834bbb75e512226e96029ad2ff27511d8d2e9b8e764a4819e8e2b286b5f383ce9af2893ed0470f1","ssdeep":"","tlshash":"f6817d89279a21faa75e213933241db1bfe6bfd136e72841b9ffb0935619f0852c00d5","first_seen":"2026-09-09T19:19:39.394304Z","last_seen":"2026-09-09T19:19:39.394304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":8,"dns":0,"connect":28,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/163/conversions/113_100__100_64da518a30a54_currency_425.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.848Z","timestamp":1788981543848,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/163/conversions/113_100__100_64da518a30a54_currency_425.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2462\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-99e\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2462,"size_decoded":2782,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1db26aabe0e5b2fb93dbdf3c089772a4","sha1":"cb83d42908bbf5b5de057af231b0deb22a258eab","sha256":"a8874c6ae70d8df9b8fd481b96d303c4ee3ad0f5a410aabdf93c49adb1da5d9f","sha512":"491a91176e0867a16a6b68aa9380c3885865eb1eb1420490d02093e00cadc24f29fdaaac0e06c384bd9f2fa82727ced20f51318568795aad85f3b9064aa2327c","ssdeep":"","tlshash":"9e512be16735dc33a852af24322a4d2267dec576d3c03b48cb1991e787b41c1533da5d","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.395832Z","times_seen":11,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":193,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/hi.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.866Z","timestamp":1788981543866,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/hi.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 701\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-2bd\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":701,"size_decoded":1019,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"79777c74b380b937c38b2eab06975935","sha1":"ac6ae14f67313ad088c273c33768cdf592560ebc","sha256":"cf916648517414e341d51a40821bfb3be8a487aa1c024c2d488d1bc2ee17fdef","sha512":"896f0ef4290e3dda7a84ff0aa87edf57599d8e972645ccf13c405cd88f98700d40198338416cb82fd4f44e04ff696304480b88c9312c24af60d11216a87c98f0","ssdeep":"","tlshash":"b60194e2400143edc21353f0ad8740c2cd8f2a6e52216d3bc8d9949e6d5024d5ea8cb8","first_seen":"2023-05-15T15:04:16Z","last_seen":"2026-09-09T19:28:33.676107Z","times_seen":499,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":466,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/sv.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.880Z","timestamp":1788981543880,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/sv.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 715\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-2cb\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":715,"size_decoded":1033,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"191c145f7eb3f4755cc9a019a42259ad","sha1":"3ab0abaf3d362e2f59284949f3f62779af5dbedd","sha256":"c6897e837702d73a8dad3043ec690277cecff9ef960555169cba79d4fa9c62a3","sha512":"13c9da7e72fcb954eb8a95c3b1045eef1372c832a798293336aaa6b069be60db0f72ae8037844962bd2ff7e07c5e75ed1f14e3c927b5bee7825061b57e19084e","ssdeep":"","tlshash":"190144dd03258f3a0a370b9e24691057ded72d931b1a63506ab8bc3d6d031cd518d319","first_seen":"2023-05-13T11:39:52Z","last_seen":"2026-09-09T19:28:33.696207Z","times_seen":788,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/166/conversions/113_100__100_64da5199bf964_currency_420.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.850Z","timestamp":1788981543850,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/166/conversions/113_100__100_64da5199bf964_currency_420.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2150\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-866\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2150,"size_decoded":2470,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"63b626a8e4960ab1172fce3524da6f09","sha1":"c115d94d7f8e4e145f516b12972d5323354c7f7f","sha256":"ca52572d1e3678026d6069d9fdd6e1ccf46c131dfcc7c490be839d6207693e62","sha512":"da5528d3b267671f90c38ff3716beb81e3e6eb05962e8b4f990829b24b63fff9882a44addfaa97dda31975a96566c73f9232ec14e61e91e2f4fa0a7cb720bc9c","ssdeep":"","tlshash":"26411c4f03810c459d7f54c831f2a658e85db91c12fca2a6deee45440162b1fa1b8320","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.399957Z","times_seen":11,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/167/conversions/113_100__100_64da519d7a9bd_currency_422.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.851Z","timestamp":1788981543851,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/167/conversions/113_100__100_64da519d7a9bd_currency_422.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3756\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-eac\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3756,"size_decoded":4076,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee80fbb8b4d2f2733b66bb62773dea2a","sha1":"a98122bfd1c9aa589ab53e7891a63a2c18a73ffd","sha256":"974843b591922bc73d2184e2206d394f67113d3446a800fe6ae70a21adb0a2e6","sha512":"1f85e9ca53b4a46a6f36e1f56bbe637f06f175041a04c37ea5a332523c5543455979ec45bcf6b076ffc01d20fe85e135ca8756b257fd0467edb14ce00f68fb97","ssdeep":"","tlshash":"7c715dba8843a96cbbb0c13b4fe57205e4e532c114977fa8e1918c83c65f196fc98cd2","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.401975Z","times_seen":11,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/153/conversions/40_40__40_64da506028bfd_bc_asset_5.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.840Z","timestamp":1788981543840,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/153/conversions/40_40__40_64da506028bfd_bc_asset_5.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 902\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-386\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":902,"size_decoded":1221,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cb51f868475aca06e8cca4575d3285f8","sha1":"594de08a30db1b039d4ed6184a67315730b3dfdb","sha256":"6a7e24e34ce7977d4341b39bf27da2cff839718f21926e06c5f69ae8d2e434b7","sha512":"3a39847c3786e7aee5885b0bc191e387ed1721f828fcbb996d1bdafd4a226d40c13c24e4bcd848bf7597935396198b58bb711f3669612d4393f93c0a5cc5890d","ssdeep":"","tlshash":"a711630942313009e512ec5757fe5be854f501961aeb192cd08811b3f424f89ff51e6e","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.40441Z","times_seen":10,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/fi.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.864Z","timestamp":1788981543864,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/fi.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 523\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-20b\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":523,"size_decoded":841,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"605699c0baa63458c609512fc19363c8","sha1":"b920ed840cba7fa302d5e6eca3b51a7c64095f64","sha256":"5bf3510eaa1ec9cb53c13393d67ab23ced2c1912bcc614828707ce0bcec20119","sha512":"84d6a445b4ed0cc42ed936f05ba272e33247294bd3e58401518862da0479a3cd8d58ae9c13db2cb2fef091bac9fc18603243fd435b7ec4310d5ddaa7f0d23b8f","ssdeep":"","tlshash":"87f075d60161497cee5905e641200916dfd30440e71b2b100a2ea7dda5f2274dd347b2","first_seen":"2023-05-27T18:45:42Z","last_seen":"2026-09-09T19:28:33.681967Z","times_seen":754,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":432,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/th.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.881Z","timestamp":1788981543881,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/th.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 524\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-20c\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":524,"size_decoded":842,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"1c7933a528550f950ffb12cdde1c74c2","sha1":"3098d40b7cafe07f1c6579f2ed6ffcc9fb65745a","sha256":"f6e31ccc4d7a997049f3331ccf9b0e987d84f72620deee4359628f72f5aa6dac","sha512":"0cbc3c7c3b31f1e28f4b311fd4f9982a94820a72f13f03d8490bd488b271c6e869ae9079b03f2d64c6d669dbe2d0cdf49955c75036d84ef7c42378882b849a20","ssdeep":"","tlshash":"eff0758c0340a5be02964653a8030d3acbd304acd736088dc0fe741b18512110240251","first_seen":"2023-08-05T11:28:13Z","last_seen":"2026-09-09T19:28:33.698197Z","times_seen":512,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":400,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/148/conversions/102_107__107_64da4ec0af8d0_feature-img-1.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.830Z","timestamp":1788981543830,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/148/conversions/102_107__107_64da4ec0af8d0_feature-img-1.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2464\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-9a0\"\r\nExpires: Sun, 08 Nov 2026 19:19:03 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2464,"size_decoded":2784,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 107x102, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1f62cf1a45e7268329eddd2f4a1b6211","sha1":"9daa342786ca7a21399e709ca73d0be9f5b4ed97","sha256":"8bee2b65faddf7c11da791128d19e1fa8232972beb55e7ad2e0068ab28591960","sha512":"ac062b999d4f283174d221fd5aa2f8ec391b11e37827141402bcc67fdffe19039e4fc55a4ca88a4d828f5537d5c29d823ee6725f243ea95abe75c8bacfac3fd3","ssdeep":"","tlshash":"87513b9bd1907bd193591c7594b4e772d9a36cda4321dcf02668f21bdf0d8a0e31b136","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.409028Z","times_seen":11,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/cs.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.859Z","timestamp":1788981543859,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/cs.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 849\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-351\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":849,"size_decoded":1167,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"4be819ea527d8a704539f3ce154c6a82","sha1":"882f02dee6104dfcda844e466b4ae8dd1e3f69c5","sha256":"2db01ff2e46696a2a9ffa5d4f5af6f2e95bef36e12aa0eb7e05045e73c0396ad","sha512":"550423dc23236b8963334e64fe6b6759aa07a9d0fa04f351d22629931f733b09b02309f1d8aadfc4abb40b0234e356d80b4d1c3b391612baeed106fdee1d25fb","ssdeep":"","tlshash":"910192d860a5ae999a04fac7920309f2a0a246192a06fc08c9ceb88e19cd8a7617070d","first_seen":"2023-05-27T18:45:41Z","last_seen":"2026-09-09T19:28:33.675272Z","times_seen":750,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":330,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/ja.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.869Z","timestamp":1788981543869,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/ja.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 705\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-2c1\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":705,"size_decoded":1023,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"125d3bb3275409f964ec5023de1762c9","sha1":"f06d834f76897f2e8417a70b59b47419ad668ace","sha256":"4461385ad6fdaab33bd89e593c3fe1c14021644444d779584ddaec3cd4fe91f4","sha512":"bace0d647ae16a5a0c4cc9c169ef59e62a4db6b45ad839816d6e6113bbf0acbfee6e563e086a81396eb0b608eb5a0bd12b5cd82c8b102a40011f8096064d2c05","ssdeep":"","tlshash":"430160ee84182c9e40093161513f2b90ace342ca0a16301a82bfbc9d87e6931d32a66a","first_seen":"2023-05-04T12:51:22Z","last_seen":"2026-09-09T19:28:33.694843Z","times_seen":936,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":422,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/ms.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.872Z","timestamp":1788981543872,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/ms.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 1043\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-413\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1043,"size_decoded":1362,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"3570bf54c536dcbd24f7ea9ddb7c2f41","sha1":"806758cc4afa15db5c70cc5330031a267d497237","sha256":"ed7928914d2ed92a77f00113d2e4811bd6e43180d03f3ec47e584fdb730a11fb","sha512":"5dac9c0629795f10873eed838e998f706621fa0a4d4f97b98f6ccb1c39909f453ef9238347e8d864daffeb984dcf1b5c7f079f5d5444e860d331c355afbb062b","ssdeep":"","tlshash":"b611b9ce51d623f2ac5d9de939071c6acb538472030b9a2bd8fd9c9e11b29253228300","first_seen":"2023-05-27T18:45:41Z","last_seen":"2026-09-09T19:28:33.683989Z","times_seen":457,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":448,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/es.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.879Z","timestamp":1788981543879,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/es.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: image/png\r\nContent-Length: 873\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-369\"\r\nExpires: Sun, 08 Nov 2026 19:19:03 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":873,"size_decoded":1191,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"8bf31a924501d6db655fe75696b5f046","sha1":"94ba0f8d4db0c35c1246a55fcbd6e0ef3cd7f0e2","sha256":"5ae9561f31199bf8a892f797a69db1bc5d477e2f8318f2b7e95487f025f66f28","sha512":"37dac360a5ac86e3e0cb6672eab5db6baf1514225741615696d09cadd93492f3c666bb6c385d12475046fa21c1672250b8cee13b83f629d80b3a8aec752491dd","ssdeep":"","tlshash":"f31163e9cb60dc1da704955134135b78ef920fa9036f296d861490ffecaa61ca5d0325","first_seen":"2023-04-08T21:50:50Z","last_seen":"2026-09-10T01:26:59.12772Z","times_seen":1940,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.997Z","timestamp":1788981543997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bitapp-24.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:22 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 31662\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-10T02:26:00.312504Z","times_seen":339796,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":17,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/164/conversions/113_100__100_64da51903591f_currency_424.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.849Z","timestamp":1788981543849,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/164/conversions/113_100__100_64da51903591f_currency_424.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2538\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-9ea\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2538,"size_decoded":2858,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e7ea4429fc7dae7a169472a03c237db","sha1":"a2c4cc79ff93cf42732ea2b66e3b5882a03233aa","sha256":"c4c60327ff5eb6758fee222f06fef34a25df6ccdfd2db0325fefe6003a3b4a92","sha512":"57346524a8540e03d59429ec10dbee9b3690fead4625056df4ec9735bd9384032c5c55c42db6586176cd30b0e6187fc52a4c261b40c03d453a084e6ea1aed77f","ssdeep":"","tlshash":"26511abc4ccd87945a88a07123c9031c523ecb6ad27847c7ab57854429bebb7d6c1d2d","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.415867Z","times_seen":11,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":195,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/da.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.860Z","timestamp":1788981543860,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/da.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 595\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-253\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":595,"size_decoded":913,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"a30b08094003e6cfa25800109f955b7a","sha1":"4d43a76c0889bd20f88905cf6ad76b4e0ccd8597","sha256":"a981b9c5114a52486766b43af45545d454234f8d99cb405f24382b225394f117","sha512":"8f2f6e54b5910f386ca584c3fb2fc230dd67120bf40560b2e49fb5628463a9c397ef835961469a95b04eed8201c1584346d58008da11b0a35d721ce704e377c6","ssdeep":"","tlshash":"17f047ced352cc19499b75b116335105c4f717b8122bc45d1095ae0c3d297419996be6","first_seen":"2023-05-19T00:59:36Z","last_seen":"2026-09-09T19:28:33.659868Z","times_seen":765,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":460,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/pl.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.874Z","timestamp":1788981543874,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/pl.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 380\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-17c\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":380,"size_decoded":698,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"44c8193715ca274b0074f1bb80c9e597","sha1":"e0ad2c0c5ba99953d42dfafde03b81289e180168","sha256":"3cd67729cd6ce09de1e48b04d1246a349597239241989e61356b99b588c0d90f","sha512":"f303b9ac87a8e77eb79573b9b2d7df819474084430ea08d2da7a08800d42e7367857c8b3527b437e3c5d7cf941fb64bbf0fd0f8e87e68d356372825bf626a6ae","ssdeep":"","tlshash":"ade0f1e985542c6eca650ca212372875e89380a10e173492c0e466eb62867078953203","first_seen":"2023-05-07T21:05:59Z","last_seen":"2026-09-09T19:28:33.664859Z","times_seen":908,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":263,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/vi.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.884Z","timestamp":1788981543884,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/vi.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 818\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-332\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":818,"size_decoded":1136,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"931fa5c7d5aa2805b11fbc974b816d77","sha1":"8eb02f52bbe074b5dd681b95c6196890e49651fa","sha256":"06fc7512126a48e27890c8ac939d5821da05cc0b08d4d11698b2d95b32c3ab66","sha512":"fdb1cf9fa583d8f5fa55b0771228b69ae02873fe9db4827dab69677fbf897b7e993f15b5c3732bc66ab64fdf0534b4fa3ecdf6e6c3cc4c0803de0e48bb340b45","ssdeep":"","tlshash":"a70186a0ce845efd145fa97703a11e1aaf9b1ad01fea1c72407c6c2964924408154956","first_seen":"2023-05-06T09:49:14Z","last_seen":"2026-09-09T19:28:33.658051Z","times_seen":789,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":455,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/169/conversions/113_100__100_64da51a5312de_currency_417.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.854Z","timestamp":1788981543854,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/169/conversions/113_100__100_64da51a5312de_currency_417.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2476\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-9ac\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2476,"size_decoded":2796,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f5977863be40a9092de63b38960668d7","sha1":"57bebb7f74d612677f64fc6409a21219c4825221","sha256":"a8dcf4ba56e5407a66ae00a4d6b94a73b8f27358fa948149a687e383b0d1f23d","sha512":"bfe5247f5ed6a4da2c6bfca007a270593095fe7f190bc0ebddcc90607b5aae903e958532a599c306a5667265ad013c873c02da6db77f758fc82da62cdbd17a57","ssdeep":"","tlshash":"4951296ebbcc8214d9e23e915300d5092649c5c6c3f2ba92a49828c75157eca94237bf","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.421251Z","times_seen":10,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":195,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/ar.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.856Z","timestamp":1788981543856,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/ar.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 1480\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-5c8\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1480,"size_decoded":1799,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"7fec8a94e0af73b8647803e1ff9887be","sha1":"aca14e7523e0bff0a9399a0998b49387d636da9e","sha256":"f093a618390e4ef10ee984262dd3334074536f565eb0ecf6cbd0939597073b3d","sha512":"61d5698ab4bcbf9589338c045a1a214edb887746e9e9a67d434dbc1ee81b3682a7cca8560c79a285dff0fd2d8550305e1d7b8f17fde68c1b9543e788a78379a0","ssdeep":"","tlshash":"fc3119e713000b75a02b96385a3b08b8244a4c4c0b6ad99b52cfbdae97563c58191e38","first_seen":"2023-05-07T21:05:59Z","last_seen":"2026-09-09T19:28:33.705323Z","times_seen":3764,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":273,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/zh-TW.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.857Z","timestamp":1788981543857,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/zh-TW.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 870\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-366\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":870,"size_decoded":1188,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2a2b643bc15c7363c9e58e6b47d7de30","sha1":"506ab44f76022397b3aa9682e8972d7944703d54","sha256":"c63293f5412adc096b8e492e88b8d8edfca5367a491acdd9071ef8d31b4ba9a1","sha512":"a742115cc74831e58f2607fda3ecdf88d8a01d1f9f19d784e1c46a24f9dc23f3a8b5f11251b1c6c911a53a18ee3a01d841e82952f7ab97fcc44b2a0673238e43","ssdeep":"","tlshash":"1f1196ca2450d5d7c2ea12e389ee4b452b4f4afc28560d886c151ab511df1d740e4710","first_seen":"2023-06-10T08:53:38Z","last_seen":"2026-09-09T19:28:33.689077Z","times_seen":5306,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/de.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.861Z","timestamp":1788981543861,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/de.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: image/png\r\nContent-Length: 602\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-25a\"\r\nExpires: Sun, 08 Nov 2026 19:19:03 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":602,"size_decoded":920,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"8a2ba86f3b7de7562445967e2c21843b","sha1":"3046cd0b51721f180c2dc75513fd4bfd316b45b5","sha256":"cc318f3be9ba75def2af54bd9d0fab4f3e316517de9bf138e40dee06d332602d","sha512":"bbfe0899d1e796e1635d12332d6e5ecc21c78c7073419b14236660d6524861ad078644a0de96c914a07988584105a4d503a7ba9f29480be720ce541ad7ebeb5f","ssdeep":"","tlshash":"8df002a8839266668e5b12f3c0031dd44dbb0db4573f3518622ba8be0b61e0263806f0","first_seen":"2023-05-02T00:49:29Z","last_seen":"2026-09-09T19:28:33.687191Z","times_seen":1714,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":3,"dns":0,"connect":28,"send":0,"wait":27,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/common/arrow-down.svg","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.929Z","timestamp":1788981543929,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /common/arrow-down.svg HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/static/assets/index-3d0b3aae.css\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 687\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-2af\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":687,"size_decoded":1009,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a60b35876f9b28d59bed3b7e4abf6ba2","sha1":"12c7639426c80f97352cf3fd7a5bb968da984459","sha256":"7ff5a0abbe0db2a64746dd03b7218d574c1cc2c0e1ff9ddc30850e51da43e373","sha512":"f11d5d96bc13d4f84716084714ed9935945f17c6f6b1066d2672342820a4a7f54e55d271197953468c11853f1159c754e9bddd4cad92da6099ef7fd54ce493de","ssdeep":"","tlshash":"1e01f4c4c20544f8f4929f50daf4d5c3eb3034baf1d44c4cb55526b42122586d90fabc","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:28:33.698871Z","times_seen":536,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/210/conversions/32_32_65080a1584e20_BitcoinEraLogo.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:04.485Z","timestamp":1788981544485,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/210/conversions/32_32_65080a1584e20_BitcoinEraLogo.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 1065\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-429\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1065,"size_decoded":1384,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"a9cfd0ebf0bbe7aeb0a70789fe2d2f6c","sha1":"92d31a89afb5f051252042081d64668d3423f079","sha256":"deb99a75cc11b9d6c6a54b8da1f5414f41b900d755b3272ffc2349701511fbe0","sha512":"ed254ea110563fcd5a6dc7c4f3e4974a61b4c11c8bd112dddd68e127eaaf4690c9fb5a4cc19986d194c26018bc1b4e3b334e15fa7f2ea880f902c14d24ccdefb","ssdeep":"","tlshash":"8411b5aa993231e4c082473f53228bc57cfe846266d235cd490969e30c1a24129c6380","first_seen":"2026-09-09T19:19:39.428338Z","last_seen":"2026-09-09T19:19:39.428338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.809Z","timestamp":1788981543809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Open+Sans:300,400,600,700,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Sep 2026 19:19:03 GMT\r\ndate: Wed, 09 Sep 2026 19:19:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30070,"size_decoded":2608,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"6fce742990a1ecf01431eebf06541d25","sha1":"cca53966852f0d5486e2b134dc01032f3e658bd8","sha256":"9d95d1586b80e36867fcc02a259a124fea267f62c2960cad88520cece45ea767","sha512":"0e42d3856e473c3ffd2dcda9fe1c1f39b58de1e34aee37de4c4a2ee72a875b250276629aa33b2c5e979137383387cd6ea5e120ea89f08cbc57bb8c3dcb507d91","ssdeep":"192:fCPPa2Skrq4nbqGIwV4G5zpDCKKf2XdrqJnbqGIwV4jozYJCMMV2NnrqDnbqGIw1:6SqqY49t5qY4yf/qY45uOqY4VptqY46","tlshash":"73d21b9000171850ab435de633ce7e34ee0f92626044d07a6bfd8b9bdedad6963b431d","first_seen":"2025-09-17T10:39:33.731039Z","last_seen":"2026-09-09T23:23:04.861126Z","times_seen":2530,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":33,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/160/conversions/113_100__100_64da517e4d728_currency_428.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.845Z","timestamp":1788981543845,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/160/conversions/113_100__100_64da517e4d728_currency_428.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2282\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-8ea\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2282,"size_decoded":2602,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"adc208f617eac1385e30d128a91cc647","sha1":"b56bf6b0392fb8c76717fc4b839eb274c0ee014c","sha256":"09db71c7fafe5000dbc1ea3120e63ac45549e6e88cf8a5b8dfd1436896bf8fda","sha512":"f153cd9a413213b0f392a2ac866a8a17b39df55768af54278e63aa3f33f8d30e77005402fd5adc9700d72654eaa926219cb0bd4487081dbde7916e8c999529e3","ssdeep":"","tlshash":"0c415c3e423ae5d5625c50ab281627610a7c332bf83c6ed0e5dde6d8c6c7121afca0b5","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.432036Z","times_seen":11,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/fr.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.865Z","timestamp":1788981543865,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/fr.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 637\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-27d\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":637,"size_decoded":955,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"930f08c6829077e96cf25d58f26bd6d3","sha1":"0dfa244548435053bbebd2ed5914e2785f0f3dc3","sha256":"594f333e3a8fe65a0466e4f9c140dab97e6b6a073579edf130a87b86614d7ec8","sha512":"34b8e8c8f95a135cccd845a2513c69d0fc3489a2df5b347dae0b5c65f6b1d218c1c976332d97f69d40f38159ab7b51c8d8cfb40d32bd45f24162320727d2a6d9","ssdeep":"","tlshash":"92f0839a22c1602d852411d530320900f4bb0f1002d13ef694be84b3281e7cbb19179d","first_seen":"2023-05-02T00:49:29Z","last_seen":"2026-09-09T19:28:33.689729Z","times_seen":1743,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":358,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/hu.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.867Z","timestamp":1788981543867,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/hu.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 505\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-1f9\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":505,"size_decoded":823,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"c789a334c212492af26b433c5e2b4d5b","sha1":"7bc986549c06acb5f13c177af6793be159f7c480","sha256":"e911743b60f76ab09482b0abdc256e58e9abcd693c8a382547180d18f0eef14a","sha512":"53dbd93f8b7f9cb71f439ad589c0e2ce980205da477bdd4dff12b0aff9faa85e8d383a8eddfda32f11d40da0b76976d921977b8465258b8c4db6df20c9139eff","ssdeep":"","tlshash":"3af00ee803321a32c1f86642262e09165983bca1b2578c6c80af589dbd8a03021c039b","first_seen":"2023-08-05T11:28:13Z","last_seen":"2026-09-09T19:28:33.694179Z","times_seen":684,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":402,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/ru.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.876Z","timestamp":1788981543876,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/ru.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 487\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-1e7\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":487,"size_decoded":805,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"5ddf50d1327e2ecc28a980e93b9f538a","sha1":"581fa9ecc609a1a07fca205b6c9751e8c28f1ebb","sha256":"1bdc7040f02e999a17f291b59767d4101adefa2d89775272ac7c66f37c710fff","sha512":"2375f58bfd0c3fe7b54258a6b222e285dbf4b4e30e87f76387ec5e1033906d0a04eb78481ee8c78460934f5c1de26007a6488d7857d59d8ca8b7b3fe31228f0d","ssdeep":"","tlshash":"a1f054ee2d01086d493cd918106b0fe1d45b0cb50ae64414d0dab2c43e2278fa8f8ac1","first_seen":"2023-05-02T00:49:29Z","last_seen":"2026-09-09T19:28:33.6878Z","times_seen":1307,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":315,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/flags/sr.png","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.877Z","timestamp":1788981543877,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /flags/sr.png HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 1009\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-3f1\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1009,"size_decoded":1328,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"0c5055eb6380dc316b78186e47738aca","sha1":"6130e54d0a11874109a7b9be82fa15e8e2d93fc7","sha256":"724fd2c83f9ca340c60f394c06dd5987b771f57f237e8b5f33e156b0b4c9fd79","sha512":"62aa89ac0235c1acf551be0257348d05de3e4cc4d2d5af8dbaf91e3e8d6ac4f223f0ebf4fa7e4e47b4db195659755aa21d8644359ee76552d193a6b997eab7a6","ssdeep":"","tlshash":"0c11d58a0138483acbae42c0228b708a7fd3efc0d517cd013488f8023e1a1e985126a0","first_seen":"2023-05-02T00:49:29Z","last_seen":"2026-09-09T19:28:33.684688Z","times_seen":521,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":335,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/countries/gb.svg","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:04.167Z","timestamp":1788981544167,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /countries/gb.svg HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 527\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-20f\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":527,"size_decoded":849,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c39480d514fe1af4c7e5f62a3ac53b67","sha1":"80a3f070bc7a8b0a8edafa1927ee65b2a3a30b42","sha256":"910e4fa63fb7a23d30d59dee2feb08da51a405eb06b38a7e12d18d9b504d13b5","sha512":"353e7893f13756905ec7612d0c2411231450b2d11781131794c45668f281a7c092acb8cdbfaf8e5809cb5bdfe89860ccdc339a54cad35544ce58e28403abb479","ssdeep":"","tlshash":"4af0b45d22695966e21b8364dfbc74b4013f24dd2288204db8453378c51a37f79bbae8","first_seen":"2023-09-12T12:51:11Z","last_seen":"2026-09-09T19:28:33.681275Z","times_seen":2685,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/154/conversions/148_383__383_64da50d0a056f_bc_graph_blu.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.835Z","timestamp":1788981543835,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/154/conversions/148_383__383_64da50d0a056f_bc_graph_blu.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 13330\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-3412\"\r\nExpires: Sun, 08 Nov 2026 19:19:03 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13330,"size_decoded":13652,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0e4a330b7e7793901744981c9f90f677","sha1":"d2d5eddde723b9e315e5d80833843f9c69f8414d","sha256":"fb1e66d3e11e11bc1670cb9dd5e701cf1fea7b832ff556dc54cc128fe636af82","sha512":"7a1270804fc98a0fb498bb65948bdeb341422fddd9425c24879e7dbed862133526aa79bde96671b0eee1f9fe9914bd2d4f3c94fdaf3164e904a23723d7d5253f","ssdeep":"192:/DAk68eTmTNjVghH7Sw40YebO6fH9qIZ+GSfuQrnSWDcODDkgwdVjtHpQdL8:L/kTmFdOOUUIgrmoSu4jtJQt8","tlshash":"4a52cf5290b1292dd800bc7ca661f9ae5c6ef7bc84e408e6001296d42a7fe1f2749119","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.439335Z","times_seen":10,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitapp-24.org/media/165/conversions/113_100__100_64da51952ac12_currency_423.webp","fqdn":"bitapp-24.org","domain":"bitapp-24.org","tld":"org"},"ip":{"addr":"185.98.60.138","port":443,"asn":29262,"as":"Ideal Hosting Teknoloji A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bitapp-24.org/","date":"2026-09-09T19:19:03.850Z","timestamp":1788981543850,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitapp-24.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 16:45:04 GMT","end":"Sun, 18 Oct 2026 16:45:03 GMT"},"fingerprint":{"sha1":"C0:76:4E:0A:50:55:47:F1:C7:6E:71:AD:4E:9F:A4:AA:D3:9E:8E:A2","sha256":"67:2C:D3:7D:42:B7:ED:DC:57:42:79:E3:AD:F3:B2:70:BA:DC:BA:E8:BA:43:C5:CA:9C:82:4A:8C:32:F0:C9:79"}}},"request":{"raw":"GET /media/165/conversions/113_100__100_64da51952ac12_currency_423.webp HTTP/1.1\r\nHost: bitapp-24.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitapp-24.org/\r\nCookie: lang_fx=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.1\r\nDate: Wed, 09 Sep 2026 19:19:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2012\r\nLast-Modified: Fri, 10 Jan 2025 16:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"67814552-7dc\"\r\nExpires: Sun, 08 Nov 2026 19:19:04 GMT\r\nCache-Control: max-age=5184000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2012,"size_decoded":2332,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"227478d74791353ba0c627f09f3804ea","sha1":"f5b4d99bc4d46b664a30f81b1a035c9787a38e21","sha256":"83b306c647c90e181bfa402621fd4e8b0df87a12ee1c1bb4c8ad54997b53fce9","sha512":"83a1c93b959031d89fbd1e35627188a4e628b3c7787a5aa99854d7effc2598785384698bd35420ed99a794370eeb44844865c516fb9fcf4b9aa27e8ec2d9462b","ssdeep":"","tlshash":"f44138a1e0007203dd79c87484244f96240f3686ba3cc8f3bacd222c30a992ec6fac34","first_seen":"2023-11-27T07:36:46Z","last_seen":"2026-09-09T19:19:39.442034Z","times_seen":11,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":205,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bitapp-24.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bitapp-24.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}