{"report_id":"dda10fad-8294-4871-b942-c2a7cf2062e8","version":6,"status":"done","tags":[],"date":"2026-01-05T12:34:07Z","url":{"schema":"http","addr":"bigsbr.top","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"title":"CAIXA","dom":{"size":19482,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d2c5adbdfaca43a24131a912356ca1d4","sha1":"e956b50e5c19a11b092a3e2e8d932a9ae3d81e1f","sha256":"61a1dd81f6d9869ba40375830d22f4a1e51216b5d78ae1af5acaa3951edff14f","sha512":"02ce2bbabe75ae65296efd06ac32d6cf0b0a3e0d3802c0e5863e6f62676dbf50374198887298c996dbc2a06381e26b140e454008404466b2306605da07d0488e","ssdeep":"192:foKREwICOqzw6HW3TNZ3V+px8JauRlpytRUOCw76OjVtR4gBJAXS9Fli08FHEiAC:QKR08T0+Cp8cXCidVLaU","tlshash":"e092402428f760630293a1e56fb71b0b3ee1d507d85ac8583afc8b956fc6ec1cd17a58","dom_hash":"domhash1c2845945cc004ef322a024a9e6db218","first_seen":"2026-01-05T12:34:14.706248Z","last_seen":"2026-01-05T12:34:14.706248Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bigsbr.top","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-09T12:34:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-04T22:18:41.67311Z","alert_count":0,"request_count":1,"received_data":201487,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":23862,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":2,"received_data":98310,"sent_data":1102,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bigsbr.top","ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":31,"request_count":31,"received_data":491295,"sent_data":13654,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:2.1.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef37ef2bd1c618c3155283322e452ee9","sha1":"0a39188b4b24c69f163d53bd5af56495f29f60b1","sha256":"81d4e4adc1ae7a4d4c474647432d1602d8763e4df4c5f5fbcc556634fa9fac2e","sha512":"17ffc0bbc037ae23a0d6596b874efc15eef8565d66466b59083629ee7d3df0d630766954330ee90af40150ed30ec1fb37f14850c5676f1a384b84841c164481a","ssdeep":"","tlshash":"be6000000f30c00c30030c30f30000000c30300333003c00000c00c000c00c3003300f","size":16,"data":"","first_seen":"2023-03-07T01:39:23Z","last_seen":"2026-08-06T12:20:44.806188Z","times_seen":436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"52134c0e876d197ae07b11bc3a9ada73","sha1":"7f70798ea8f601d6fe0889bc2b51e91b46ccfd5c","sha256":"fee73e64599c1fe05194d232e7c0b613e0ed4cc65001cd130f78d31c90aeec1c","sha512":"69a907bf84aeac4a53129eafc5beb3fb3e9be273d6e2523deb3bb62cd9840c9160b5b17f0b6fccb78c699cad64c488541660f130173f67f24e32f9c91f8d6069","ssdeep":"3072:xAsVUDrPYH0/ivPUawWprNWG962FK42DIZGTzqd5NlDrwlERJJ4TvbsSftvy:nUfwLvPUspQ42NTzqdZeERJJ4TvgSfty","tlshash":"641419c9b7ca7066439375bc502f014bb17a7992f84cd8d0e182d8d42e74aaa12b7f7d","size":200838,"data":"","first_seen":"2026-01-05T10:39:02.768149Z","last_seen":"2026-01-05T17:11:42.3036Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9919d566e998990b5eca2d027e02949d","sha1":"4fc16c7434fc6f46b012d33eb0ae1ca35269c93d","sha256":"ed6217ca4e1b07cbd0cae4f9d5e065cda3c19be96df10bdbf411a63d12755b13","sha512":"e6d908c5a57bbbe990ed8c77a7f007f4df1ac68aa136670948b3a4722328ec02abf886d60d5164648582907c29c4e3fb1fa1bcc024425e013c75faf064c362be","ssdeep":"","tlshash":"5b41861924fb66444a27a3b74bbf1ac66c34442b9006cd697c2ce5d28f661e18227ee8","size":2006,"data":"","first_seen":"2025-08-18T14:28:08.671762Z","last_seen":"2026-01-05T12:34:14.784145Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/js/jquery.maskedinput.min.js","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb2a5846df151c66877e0c198b61b684","sha1":"95a26d7d09bff3cf0c3a8a3b75056c73410e90fc","sha256":"fb82877818fa23c8c028053cc5744c5d7947faca82bd50a82b918016499bfb62","sha512":"7782a4428864f87b301ace80d5de866a4e816fdacc5adc6339ad08898e3d4374de15de710338d65c30815bd452ee6f3a150e11cccd8174799d2679ca458927c7","ssdeep":"96:rNYaTbFaRZqD1B7sfha1s+Gib2V81qJQOPG:KaQRZqKhadGib2VyO4","tlshash":"a591c999bdd0710361b308e500bf861981395fea542f95d2a021f9dcbd38e2921e7d7d","size":4324,"data":"","first_seen":"2023-03-07T01:16:53Z","last_seen":"2026-08-07T00:05:55.712125Z","times_seen":3941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/js/jquery-2.1.3.min.js","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bdc04968d2fe6799360150868a8b8b6","sha1":"3cca78feb86ab7549f20306ab25c7ab76c72b21f","sha256":"7682ae16052155906f82c882564658da00e3f9bf19eadf56cfe13f44c0c3d308","sha512":"adc14659167e1b6c739d06a8319e5643d73ee686aa2ffa9f44665024e3a03b2b0143040ac2eadcb7e63c00ceffff4c91ae7eb8ccb3b6c34d1055a9e7692e0dcd","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98HrL:z4UdWJiz6UAIJ8pa98HrL","tlshash":"d183d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","size":84319,"data":"","first_seen":"2023-03-07T12:12:17Z","last_seen":"2026-08-07T05:12:15.872747Z","times_seen":1769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bac229a50cc245f2d6b033137049e7aa","sha1":"7f92a4ce4cb89ecd5085b18720534f657b2fe666","sha256":"7f6019128495ba483f3bf607e35ad667b030a73a086629a4b7e5d3a1d8c09080","sha512":"06d519182a78fa3ace3f938a9608a9e7ce16ae2a51a958ee823b883a2e4de22cce9c669d4b312219ff2c7138a699bfa62b472530a88e915952af61e94c60bc79","ssdeep":"","tlshash":"6ce0ab9d3c66b06737f93638c2238a7b33a60b0175839524c646cc2478648861886d8e","size":429,"data":"","first_seen":"2023-03-07T01:39:23Z","last_seen":"2026-05-16T23:27:08.997305Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fcd85bda05033bccd9af97900f0795d","sha1":"2d2e2618f36a403b1943b146a704761bb0506fc4","sha256":"779e7bf3655d5ee923827d88cede8985a24b42cb840c3261de24199322b0cd52","sha512":"3fcecd80d47b6866539fe4f18f65131fff5c2117e8e1ec3e90a3ecec941189bc28cae55635b85606e65e579aa09966fb39fb90ded67d773fc3234623e43e7d54","ssdeep":"","tlshash":"7cc09bc9211a4c7156f72741cb7fb604b442325494e55a31895963445d20e57db54c54","size":144,"data":"","first_seen":"2023-03-13T20:14:54Z","last_seen":"2026-01-05T12:34:14.788401Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c119da4c0bc11bcdfe098193c7fcb26","sha1":"c86262fe858b5a5dc197c064dfb78d91e1ce8d60","sha256":"98084f6649a42e077b3830a3d4a6d4cb8380685cce5a459de63150212d8928a9","sha512":"2304cf4156a27ceb772e4bc921c6dea14e3a8b7abc291a4b38cc84d5178a28ed0ba5f6cfb72bf41206bd0b12d191a0bec2d1d6edcc7a8883ff40701d969312ee","ssdeep":"","tlshash":"48800000008a2220a200002202a0c2e0bcb88020ec822aa00a8b0c200080e0c882c808","size":27,"data":"","first_seen":"2023-03-07T01:39:23Z","last_seen":"2026-05-02T23:25:20.351307Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d55fcb3a75cdc6349429209103cd75f","sha1":"383d439f4c573ccc7c2d70aee27e8235fc8a8caf","sha256":"d6ea59f9c2f5bcf8a929c2113a6556c2458d65b534bc1756b39857aaf63cbe8a","sha512":"bd75e863096febe36222c1b2364e6f9c0efc188a01a6935ec6b158e707bed8fa03a8f7bc39a31dde746bd5ed5ca0e470d4839e9fbe6ad93d234520969d42cd5f","ssdeep":"","tlshash":"5a31808c1aa714118727f8ad9feb6001bf7ca4432449cd557c5ca1806fb9d9047e9ff9","size":1856,"data":"","first_seen":"2025-08-18T14:28:08.67743Z","last_seen":"2026-01-05T12:34:14.790254Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"68c4d5c701223bc1e618d3bfca70a4d2","sha1":"f855b01142497dec22c9c09bc2ca43128ae27d60","sha256":"37ddbd68a59bb6622749b5562243a20d16d235c0c478e3b4ce29a37574997284","sha512":"a01d1c0c82fde672750b0cbfef087fbadc54a4eb371d1b250353ac74d98f28aed2571b4987b74975df134e1ee7a0481135a228b41d1eac232358f9f1c11cac9e","ssdeep":"","tlshash":"ea21ddc919a338680702a87c6bde460d357cc5030805d8f27d6d64643f96f9a32aebac","size":1285,"data":"","first_seen":"2025-08-18T14:28:08.678944Z","last_seen":"2026-01-05T12:34:14.792294Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/js/redirect.js","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d17da3f1bb9e17ebf2cabc8571e8188","sha1":"3596d8e54fccbd49c755d4e6c1d1beb675159848","sha256":"da1b8ba7dfdf87ec4387dc485a2b9c13af6305be2da46e97a1aaeb6c7f59aad1","sha512":"27e85e5cb383190c79581be3799686c67c5f80528c18d0e31427a7ecd2c100533f57eab4d725561e28b68fc038f999c419be219c45cd27878ad51328704f19bc","ssdeep":"192:zjQ98KmTBzjchpmQ5Ulm8ScmcdPmRkaNafk5Cl3:fTl3yq3","tlshash":"9f62898c55f2480da653b279e63f58cc2a265003dc08db277e2d6293ffc816ed6d1ba5","size":15261,"data":"","first_seen":"2025-08-18T14:28:08.650091Z","last_seen":"2026-01-05T12:34:14.771959Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8a91769d79b990a9952791797c38574","sha1":"552adb69848265b692802461b2cc49906d5bf7f8","sha256":"f014dc91537060f5520556f3fd2822d79ee3bb80bdbfde06969a83331225cdaa","sha512":"f332d322efe5c8eb80d7009a7dc54328bef57f56f702c19f87f1388cd40ff10bf154937d0704c3e71d6aa7606da663465e78c6be11705c8c6b2fc7914e0b3011","ssdeep":"","tlshash":"a780043d33050004407040cf01301010554c415533504c4574101457075034c5417005","size":35,"data":"","first_seen":"2023-03-07T01:39:23Z","last_seen":"2026-01-05T12:34:14.794584Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"7702a2d98b7aa2113b655a14267da77d","sha1":"2be4ba2c7a5867704b9eea4c6130df8eb6a15b4b","sha256":"0f4c88b376da67ca6a0c3797341a8318de95fffc12cc2c049459969ac239c4dd","sha512":"ca6572c103a7438e1a4107c552890037fda829818a75f61935c7601875622dd9c36d2ca7ee4cd4d9e503668feb36358206fc23cb0503ccba79d401b6b0146040","ssdeep":"","tlshash":"0ce00000c0aa8020808000380000002808808008c0080020302a0000c0020080a2b020","size":358,"data":"","first_seen":"2024-03-04T00:16:09Z","last_seen":"2026-01-05T12:34:14.783303Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"44e5fbf0d575312862a38b1aff5695dc","sha1":"6c7c8deea42ee0ce22cc55408f47e0bb4165ccb5","sha256":"e8a3498f44b637babf93f11739ff4c1c5ae5dae197a3fb484156483b7f92a120","sha512":"584fb4f3127fb311cfdd5a8abbcaf64bccaec644ce14e93f6543d53bc647d625ec7e22856153fd2c0875dafc6dcdc6b837a4911f5bfa209217461f01616b0978","ssdeep":"","tlshash":"8e70002800e0a2880020a8800802082202202002000ac080232a0000008008aaa8c000","size":21,"data":"","first_seen":"2026-01-05T12:34:14.795493Z","last_seen":"2026-01-05T12:34:14.795493Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bigsbr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 09:55:49 GMT\r\nexpires: Fri, 01 Jan 2027 09:55:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 355077\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-07T05:07:03.222014Z","times_seen":322428,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/logo.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 29 Jun 2025 19:42:41 GMT\r\netag: W/\"68619731-93a\"\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5XqL6fjrlxxGu3Lot%2FykR%2BJaxoAhCzmn3RJWLRryHew4w5aIYnp%2BP1gvKtbhRbzc3JAGBcc%2BLvZjse0X7iFwEB9RZvrDCEMG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018849cbb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2362,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 54, 8-bit/color RGBA, non-interlaced","md5":"d8aea321c7283609bbceb82a4137dd1e","sha1":"4caad055a622463a90396beeab7cbc90c95c040b","sha256":"e03ddd21886efe47edc5948601494ecba82bc88fba468e4b29e8e3b0f0e79e26","sha512":"d9d955c5d62490d03c3f1ce3a563ce7d167b12fee9a157bb5d151d8a7ecab9c4ef5c9e70265074b3fee91805d83c795d87e9479f62735edc0f6cd9b9ed4cf77d","ssdeep":"","tlshash":"4f416dfa7d617aad51767a9c44a8230fbaf2066754ba682292b3efffd4135121c010d1","first_seen":"2024-02-11T04:51:40Z","last_seen":"2026-05-20T06:20:12.368854Z","times_seen":21,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/13.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/13.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Jun 2025 19:11:29 GMT\r\netag: W/\"68585561-665\"\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u6oLF3fy%2FL%2BmHwIlCB8mbgbEE0zlLhxIFfLHXhQcGuHXKa3TTli6ykvddq9LJ%2F9dEVMPPJ0r5KKmOZuTKorQD8ptO7K68EP3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018859d9b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"989bb8d5238a2a165ba97085e49de94b","sha1":"1e5964ce8ca8fba655cca630be9b04690b45ab30","sha256":"ef7cc4c7ab7cab0466926ce89f38b2f1901c5d70ed291bbf72d3ba9b1bd84354","sha512":"9736510fd672887894efc18a69b4db5d118eeceba69dececa2263d776463e2826999376f0f55b462842ec299bbf7fab2b7684c980d05d6b41e37c605c0dd52ea","ssdeep":"","tlshash":"4d31e893053a58c87e273479f6be0ada8d1389e161b05aed302037552c37e11e029b0f","first_seen":"2023-07-03T18:34:11Z","last_seen":"2026-05-02T23:25:20.15418Z","times_seen":66,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/css/animate.css","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 22 Jun 2025 19:11:16 GMT\r\netag: W/\"68585554-13052\"\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bOjgZYUYNdNS%2B%2FhFhx2hsdCQ5%2Bp6VtamWxrnwumXXMty65GM2TflvZ1ws0ggL4KMBAt9qGWmN2TV5VH6xEz0WOaKTAckDizF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018859ddb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77906,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8eae1a9cfafdc593321d4d59ec4905ea","sha1":"232f5f3f4c3a0a56823e0e933f9c7fec3aa9cbcc","sha256":"e89c81987c5cbc157097eaa6657d6a594abf030cc89bb63f0d2154d8383e9fab","sha512":"d682093cb96420c3c2c9ee1e172a616c86b4e60db47a1fc3790c73ff9300d2ecbe740099e2d5ce0f9e3024019324ece3dec7b6ead865d519c12d8daae9cdccba","ssdeep":"384:oNuKu1Lsg9unuFl3lH/4/0uJuDqDxbe3NxdV2PVriTKIZQMcLceS:oNuKuWg9unuLuJu9KIZQMcLceS","tlshash":"28732fad2991108456638a1d83df5e68673ce573181aacef73c2488fcf8bf6857c9147","first_seen":"2023-04-05T03:25:07Z","last_seen":"2026-08-05T21:19:02.795566Z","times_seen":2768,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/js/jquery.maskedinput.min.js","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /js/jquery.maskedinput.min.js HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 22 Jun 2025 19:11:30 GMT\r\netag: W/\"68585562-10e4\"\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRlqnQoitXzNwbM0OjayfpzODNvG7rkU3q4sYxZ9jkKeT1yaViACTlXF5GQ9hZ57lui4PYHu2PQE%2BqC5e7e7%2FPFQhrjTHOkB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018859dfb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4324,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4112)","md5":"bb2a5846df151c66877e0c198b61b684","sha1":"95a26d7d09bff3cf0c3a8a3b75056c73410e90fc","sha256":"fb82877818fa23c8c028053cc5744c5d7947faca82bd50a82b918016499bfb62","sha512":"7782a4428864f87b301ace80d5de866a4e816fdacc5adc6339ad08898e3d4374de15de710338d65c30815bd452ee6f3a150e11cccd8174799d2679ca458927c7","ssdeep":"96:rNYaTbFaRZqD1B7sfha1s+Gib2V81qJQOPG:KaQRZqKhadGib2VyO4","tlshash":"a591c999bdd0710361b308e500bf861981395fea542f95d2a021f9dcbd38e2921e7d7d","first_seen":"2023-03-07T01:16:53Z","last_seen":"2026-08-07T00:05:55.712125Z","times_seen":3941,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/css/kkk.min.css","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /css/kkk.min.css HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 22 Jun 2025 19:11:16 GMT\r\netag: W/\"68585554-32ede\"\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0iSXPn8Tv%2BcNghaXf4A5ADwcDhvPW1HN%2BCQOHg1c%2BB%2B4B%2BHCdLdCuS4YBpKcSC3B90zTE7f%2FMQOnNNBLZxc5PgJmZuuYmpnf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018849c9b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208606,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (492)","md5":"47104e07b760eaeb4bdf72c44f99b5bc","sha1":"8f9a91f148b6216a0dd627fc89fff966d491eb1d","sha256":"7a8cba3ec16c439082b744d72fb6d32e18a585bc35895da8f2523bfceb09fc9d","sha512":"b1781574c9179f41e9f4c2dfa09b1f9bf6705cdf0012c00b0e36854dc01ba51457c69279d4f49c2fd12c62f77f9936ecdb6897ea9470134e7fdd06afe6e3d1f2","ssdeep":"6144:LELfNHpFurbnG3yyDTCdVbvMrPS3dVl1X:LELfNHpMrbnSyyDTCdVbvMrPS3dVl1X","tlshash":"88147423ff48280e6937f01a9d981b9c23497a16bf0f1ffb5945119896da19132b6fcc","first_seen":"2024-06-20T05:29:27Z","last_seen":"2026-01-05T12:34:14.723949Z","times_seen":60,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/01.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/01.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Jun 2025 19:11:27 GMT\r\netag: W/\"6858555f-48d\"\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxDGgzNKOT3c%2FPRlSLyme0QlxhphKh%2FlfUDUQ9HvPIbl5JOSXvSLwcSDjKVKsP9ZUgz8xHMGbfefkbSa2mdHXTg9vSpLhHkf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018849ccb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"dffdea814cd24658bb9647146fc7d696","sha1":"35de78ca5ec5f0ce95cf75e65dce395b8f9d514f","sha256":"86a40b0629ac74104869be80f1952a37f8b7fa098c977d3b945cab05213a8c66","sha512":"f65ae72214ecc90ff7394ea2b3af2402bb29fd7f3ca988e6632388e9caaaff55ca6165bae3af224af423b2c6fab01791d5a544175adc63d7323ffffc0035cd1b","ssdeep":"","tlshash":"3f21dae7f8985565cb788711e6ce9a5c0e91f06802fa55a5e1f6839c3499f4d1412011","first_seen":"2023-07-03T18:34:10Z","last_seen":"2026-05-02T23:25:20.312457Z","times_seen":66,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/09.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/09.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 901\r\nlast-modified: Sun, 22 Jun 2025 19:11:29 GMT\r\netag: \"68585561-385\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OmPlbsNsWnr3HKpi9NnR9KT3zQNphyUHukT25mBlQeDa3hCu6SngAYlwO9EH4C80QoSY7B%2BD%2BctHpgzA9%2FJejIBjrTF1e6qj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b93018859d4b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":901,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"620502c125cf3cac251ba4c7031a3c9e","sha1":"0e79ef8ece0f046102eec2caeeff044d082ebe46","sha256":"fcb854fcea910dcff42c1bd470c482cb1f9b0998a448810646e7b4fc6cabc089","sha512":"758bf9dbb347628654fb3867230d2806692b69c07765b107a99f739a7413588d322ecdc733e0671f3ffb8dc8d54e1b1c8c1b4c6749968448f32c1e3d34a0670d","ssdeep":"","tlshash":"8811b3f2b4fa90faee08f9101ea20b03fd701c3712036308809796b23c231850a05928","first_seen":"2023-07-03T18:34:11Z","last_seen":"2026-05-02T23:25:20.185009Z","times_seen":66,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/12.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/12.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Jun 2025 19:11:29 GMT\r\netag: W/\"68585561-566\"\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b6x6jfNBdVgmbdb%2FL%2BKS%2FrU6oupsQT6voyv38xTDru%2BKdvRKIY6GCEe2j3RXJRcahHxoihT2GxomEdwpNlfq5S6WKzKagWIz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018859d8b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1382,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"bd9e1a284d3df07a6b92e0a41127fe73","sha1":"85e72eacf49ae78c4791c26adf1c374d7cb83eb3","sha256":"f77bb73e9fee36bccbca261e7fc9242cd6100027b7b2fbb3bc0e40c96fc4f3e8","sha512":"4ba544119b5741b3290e6ea616d5ad36702e623a05f7fb5d245f230bb8abc2f0b87c9c77d2f55e8ad4df5b38c3813608237ff8a47a04e18911b0722067a131c7","ssdeep":"","tlshash":"9b21d8d01a153433da76f55b563000617329e3bce2c7b03a038d7e55acac49905deb5b","first_seen":"2023-07-03T18:34:11Z","last_seen":"2026-05-02T23:25:20.188115Z","times_seen":66,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/11.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/11.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Jun 2025 19:11:29 GMT\r\netag: W/\"68585561-536\"\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4eowynJ6%2BXcHwhFCH04T4mYoWmyG7cv5Yr%2Bg9IKLQThIXr1BeQVf6D8D81Rqacp6XKZbQQnW9hj6Ofusq5JpRTLdqZVqqil\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018859d7b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"36e1683ec486e52ebe43b30c18747386","sha1":"f7303aba49e6127614813fb428dff163706cb9a8","sha256":"a834d1ba9f61b0b95b031f40216ea6e083ff71edd055996b2322238c40a3e221","sha512":"de62c931f47fbfb429800e572222468320b05903a31661e459b44bc0c952b857de556227e0fd0edf7b9e7a0a6d54b9b53285becf5bee922e9fad2751847728cb","ssdeep":"","tlshash":"842106e3400e2368f3687b5d0c16089c89a497088e980b8e0963ef1cb2a329cea12488","first_seen":"2023-07-03T18:34:11Z","last_seen":"2026-05-02T23:25:20.315091Z","times_seen":66,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/15.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/15.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 745\r\nlast-modified: Sun, 22 Jun 2025 19:11:30 GMT\r\netag: \"68585562-2e9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lYWeTxbt8Z9sRRMxYkBKwBQrt6bjZaMXZ45fk1FB8JXtHzbFAjHdX8k04f3HByS%2B5HYYWFU6ckiq2zRmC89TATbiI936%2Bh4Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b93018859dbb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ba70d92fafe951cb5c81a6753678935e","sha1":"3cae375f97afecf43780c0d83ca996aeb32ead7b","sha256":"e19b0f75d9fcf033eec5c47e8e709561602b54001e8fea37992b20d7f2221734","sha512":"f9eaf3bdf0ab9da380d41ec4d9eb9ad5ced5e848fe47c5b4a29ad4976d2bd47f4636d745f0fc90f441cdd599229182017188d72f7d782f628ce43111c185a865","ssdeep":"","tlshash":"8d0165e32b69647c57d9e329a38bf3f4ee46451a8006004c27656a4242bff45634718d","first_seen":"2023-07-03T18:34:10Z","last_seen":"2026-05-02T23:25:20.298672Z","times_seen":66,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bigsbr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 09:55:49 GMT\r\nexpires: Fri, 01 Jan 2027 09:55:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 355077\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-07T05:07:03.222014Z","times_seen":322428,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":56,"dns":2,"connect":7,"send":0,"wait":8,"receive":11,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/07.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/07.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 291\r\nlast-modified: Sun, 22 Jun 2025 19:11:28 GMT\r\netag: \"68585560-123\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCfGPgKzOqdTngrduZtmhQKV4CY393JkxgQkBShEBkMTDux96Kkx7FI%2BZeMJYKjdPPTs2EbeJ29OdBqDtwhtDZ4mQ%2BB9guzd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b93018859d2b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"fd2c76629af87c764ae010405fffc4b5","sha1":"0b5666fa799eb67c767277048dc4f38926c74e35","sha256":"253039cc0142e7f95041388561bfbb7eb9f6d9f65a37766e680f9a09114f52be","sha512":"3940a2d2068faf9d6d2bf9275d07ea329a81c73925d7bc466601920de7ef1b8d89ea31b16e75b55cdefdd5136235ba2e32e4a5185cb16fcd7943ec306f0518a7","ssdeep":"","tlshash":"e9d07da3050244f4f7931a35320f95f0d52657042728154d01096aa622d260890c4305","first_seen":"2023-07-03T18:34:11Z","last_seen":"2026-05-02T23:25:20.161194Z","times_seen":66,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id= HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\nexpires: Mon, 05 Jan 2026 12:33:46 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 05 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 74347\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":200838,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3248)","md5":"52134c0e876d197ae07b11bc3a9ada73","sha1":"7f70798ea8f601d6fe0889bc2b51e91b46ccfd5c","sha256":"fee73e64599c1fe05194d232e7c0b613e0ed4cc65001cd130f78d31c90aeec1c","sha512":"69a907bf84aeac4a53129eafc5beb3fb3e9be273d6e2523deb3bb62cd9840c9160b5b17f0b6fccb78c699cad64c488541660f130173f67f24e32f9c91f8d6069","ssdeep":"3072:xAsVUDrPYH0/ivPUawWprNWG962FK42DIZGTzqd5NlDrwlERJJ4TvbsSftvy:nUfwLvPUspQ42NTzqdZeERJJ4TvgSfty","tlshash":"641419c9b7ca7066439375bc502f014bb17a7992f84cd8d0e182d8d42e74aaa12b7f7d","first_seen":"2026-01-05T10:39:02.768149Z","last_seen":"2026-01-05T17:11:42.3036Z","times_seen":8,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":63,"dns":2,"connect":15,"send":0,"wait":37,"receive":27,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/06.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/06.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 255\r\nlast-modified: Sun, 22 Jun 2025 19:11:28 GMT\r\netag: \"68585560-ff\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkLfUjS6x11NsH0jA9kPMruTwMt8LDJ%2F8pQp%2Fs88Yzp2lL1RD4DUAe7oVXjjL%2BB3ef%2BDMsrxruq31cfVB9RONBqvj8hcWC%2F7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b93018859d1b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"f622245ae741451a0d1e82d07fea0806","sha1":"bb534af76e8658687d250c29b9b2526bc9ba491a","sha256":"1ba74c05b7dc8efff8226e077941e5c8325bbe0b4b1f81d614c3ac66c8d0eeac","sha512":"70b80b1778bb06f2643991fa19dae444eddde13406927d9b54ff946a3d70c1879a753e7cb0d43773ba0b14caca662b7236acf4b75b127c06a1eac44ffdad9627","ssdeep":"","tlshash":"bdd095a310409d3ddf19b31351e20ebbed715c317da16a8f1067db141df23452e54206","first_seen":"2023-07-03T18:34:11Z","last_seen":"2026-05-02T23:25:20.340788Z","times_seen":66,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,400,700,800","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css?family=Open+Sans:300,400,700,800 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 12:33:46 GMT\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23176,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"d158237658e9dcf1096730f8eee978e4","sha1":"92539e6a86b365d3f5992c38c9fcf0976ba18170","sha256":"d1b0b2bad8eb48bc5c702f5dbf38d0eb05f12bbfa83b91dfe9cb4de6abf57b7a","sha512":"3259e92446048f5dba143976f62f3bc82b8491cc23ff05ca7658da9ac56a05601f065ef1714f6157dc01d6b6f06d5332ed108d2338fa5ca30f70f68414a3085c","ssdeep":"192:NCddw24WrqKnbqGIwV4Mrz7xCAAN21/rqbnbqGIwV4Razq4CZZE2s6rqmnbqGIws:0AYqY4tjXqY4nU8qY4FX7qY4o","tlshash":"7ca22aa00027185063431de623de7e34ee0fa2657048d0766bfd8b9beedad6963b435d","first_seen":"2025-09-17T23:50:37.558566Z","last_seen":"2026-08-06T17:34:07.902543Z","times_seen":1230,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":83,"dns":0,"connect":28,"send":0,"wait":46,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/04.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/04.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Jun 2025 19:11:28 GMT\r\netag: W/\"68585560-4e3\"\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WdGmbXR7jrwWE44EcHFS2Nlwdo0G1xRXwIGvwpmMZSbqye8HvdGe%2B01jQxn7So%2B5cXIps4qolHZOhTwsnBauoBQKo8a56NUr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018859cfb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"4b9853365b06cd4252ad0097a1fbfdef","sha1":"abd7088225c679a1897e26941b39d0cf718288af","sha256":"e5eb0c63a827789e505d1c6a6408bebad9cf3b10412f47fc0bdb0df9627eb3fd","sha512":"e8654b8fc87a647dd9ac382f25157576b11a1aaaadaea37639fd5f35f60c4c59a0bae6cac093071b667902f01a94ea54dc8e785c2e299ed06bd8923bf0403451","ssdeep":"","tlshash":"7321b4cf0a2682de888927173a188feb3a37620174f9da5786919c76167f842064e7c7","first_seen":"2023-07-03T18:34:11Z","last_seen":"2026-05-02T23:25:20.291178Z","times_seen":66,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/14.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/14.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Jun 2025 19:11:29 GMT\r\netag: W/\"68585561-448\"\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSWQhucCMS07lq4A%2F%2FpPRq8Aw5y0rplVaQDCSDC58XdSzd9woHA86YNh4dlUKgmrZKFvlkRI4hQLt5dI2u9%2Fsr0QxaCMJ%2FVm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018859dab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1096,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"5d38f4b2f1dde987957d76d901ac0721","sha1":"28a5b44a6b6bcfbcefaae6aa808a477a24a56115","sha256":"2f7390210444f3abcb35a67f746320e5d8b0041ce2282b62cfb0f8140766a5be","sha512":"5e3b8368a503922afaed7cc1d85c19970411e0ddcaf05e39da4d9fc2372f1a5ee27e904de53a738bd48cf7b6b9523c48490649ed03214fdf51db2c1220939d02","ssdeep":"","tlshash":"7111b6ef063633f1e12af43325977c26c2878e00a02ea4a78c881e6f110134848ae3a0","first_seen":"2023-07-03T18:34:11Z","last_seen":"2026-05-02T23:25:20.266703Z","times_seen":66,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/js/jquery-2.1.3.min.js","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /js/jquery-2.1.3.min.js HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 22 Jun 2025 19:11:30 GMT\r\netag: W/\"68585562-1495f\"\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M2o0XwXzzIt4HUbLxHioG%2Fcma%2Fgiwgqe3xORcqU3VU1U%2B24kThsBNuTlcjEuyKIh8AhX85p%2FzN5hd%2FzlDVrewz5LxZ228aT%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018859deb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84319,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32180)","md5":"0bdc04968d2fe6799360150868a8b8b6","sha1":"3cca78feb86ab7549f20306ab25c7ab76c72b21f","sha256":"7682ae16052155906f82c882564658da00e3f9bf19eadf56cfe13f44c0c3d308","sha512":"adc14659167e1b6c739d06a8319e5643d73ee686aa2ffa9f44665024e3a03b2b0143040ac2eadcb7e63c00ceffff4c91ae7eb8ccb3b6c34d1055a9e7692e0dcd","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98HrL:z4UdWJiz6UAIJ8pa98HrL","tlshash":"d183d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","first_seen":"2023-03-07T12:12:17Z","last_seen":"2026-08-07T05:12:15.872747Z","times_seen":1769,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/info-icon.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/info-icon.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Jun 2025 19:11:22 GMT\r\netag: W/\"6858555a-458\"\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YcddCFlTAP5GsYVBrsMKUdcy4tZs2NJGKqfgq0fLi358AES9whrS5Jng1YoUA93VRrCcRocVsc4N8iS3ZDrh188PZ3woG7Re\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018a69f3b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"b47ef247072939c0147473c4e45d3b00","sha1":"0ee519181ffbdca0adca9397baacf02308d286cb","sha256":"57cad85f2572ce6cd60a6c5e2218144490974dee722bfcb23a5a8f1587533cdc","sha512":"6fbf085ba9ee03617f249e2e1695c531ed7db4666af63877d2e2a313b850d44ef56867688bc6b6bde2a494deeb3a5533587e8a34e778dcf7da0c92e69efef998","ssdeep":"","tlshash":"4121969db3b5cc70c7723da9d842494c4ef645ba2717294de05eadab50b4d156b090e0","first_seen":"2024-03-04T00:16:10Z","last_seen":"2026-08-06T12:20:44.790993Z","times_seen":18,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/05.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/05.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 755\r\nlast-modified: Sun, 22 Jun 2025 19:11:28 GMT\r\netag: \"68585560-2f3\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=guYL22nYBnNp47mm7dqxtn3OUkaPjfnG%2BBWNEw9H3WYpgQyNR%2FaVI%2F2a45ZtF4vl0wYLWIkTEXIH7hCoeqqqHdWeIyYx7Dq0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b93018859d0b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"054fd9587bedb56887a6dd89aa1be82f","sha1":"80bde3b67935bccaeb01770cfd26a37fe825de88","sha256":"2450d9669ce42514ec429aeaec9b1fe1f4efb0ceceb2d0bd6d1c1f570e277622","sha512":"3a9feaa24082b4c67aa3628e30df6d28439c802a727aeb168e4c0fd6591f19f05b1dbf88d27cf3093cf2b50e5cbfe1cf158de5ac666281ffb85dbd9e964e2f59","ssdeep":"","tlshash":"1801606fb3066cf4039cdfb7663e2219e95e88256529831e103c2d3d9812e2c96da3a4","first_seen":"2023-07-03T18:34:11Z","last_seen":"2026-05-02T23:25:20.338087Z","times_seen":66,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/arrows.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/arrows.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 527\r\nlast-modified: Sun, 22 Jun 2025 19:11:18 GMT\r\netag: \"68585556-20f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lERJd6k%2BSdtOifg0UlEXdpv1qYIXimt9At5U%2But5tY9TAhjW1hR%2BqtSrUT%2BFHupxJbz%2FdjO3ytG5qs5iYKDq8lOHIKl8XX8M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b93018a69f4b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 101 x 17, 8-bit colormap, non-interlaced","md5":"ff54b2a4edbb799eaf7f1c670edabe60","sha1":"69440004cf458d346dda41b2beafc951805a9d63","sha256":"9a1f46db82828ebfe7dff4bc008099bd2bc836331f6c219ff160b5803c421d2f","sha512":"ca33a317808c49d31dc41dea75c59858d64fad8ff7e3f089631f752b76d6f0e567f400302ae916d645e774e75db6ef011180f17c0f5c5fa3cef7e27c662de3a3","ssdeep":"","tlshash":"f9f075d3975481754285107e47c047ffb007d20cba76e045660e6c5cb093004d5ca07b","first_seen":"2024-03-04T00:16:10Z","last_seen":"2026-05-02T23:25:20.259015Z","times_seen":68,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/angle.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/angle.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Jun 2025 19:11:17 GMT\r\netag: W/\"68585555-c76\"\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaZGGyrOxZJmu1mMHFY61yKd3Ho98OX2CvjYmct5y9C0TYshJpL07IxcsTljF0mpQFypvm8LoDB7TepDJC6nnL9sl8kvwxWb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018a69f5b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 10, 8-bit/color RGBA, non-interlaced","md5":"6b8e1b1d39a618d6ec63e7bcf0b2c049","sha1":"7ef28233bfd317e8ebb3c05a4a2ed6e5448fbfbb","sha256":"9efd661674d2194ae415438cef2d1a87b967976c106a76d2a0cf42e125077a69","sha512":"8403201151e42fc945a3641896694b0a65d0dad0a8f2173608fef6a87e9fc05698c235043f838b10632b76e33419dc511219c73d29dd002ce204e9bab57f66b2","ssdeep":"","tlshash":"d8617d8466860ff9d0566d2690475256c4e3eb5042660178fba9e2f374fef604ac3844","first_seen":"2023-05-07T15:36:51Z","last_seen":"2026-08-06T12:20:44.799411Z","times_seen":87,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/api/page_id.php","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"POST /api/page_id.php HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://bigsbr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"page_id=1"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5WClxW32FUHXRxB7TiQolN13e7sCpuLfGP6GeqlG73K1L7oCWota7EFoA7W%2Bnq9CzAdcCtTnwBhAB63KQRGn00lmS2zNosb\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b93018b1a22b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T05:07:07.342121Z","times_seen":17756185,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/css/main.css","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Jul 2025 15:52:46 GMT\r\netag: W/\"6864044e-3ccd\"\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1a5mURWY3U9VZWCAsRsYbja26%2F3ismulr23OP%2BXnB%2B04AOWuvMfYYBDDJKRe4EtKhORJMrFKO7Obw89XgGWPQVBRW22JF0%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018849cab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15565,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c6797615d45ca89540523a0f140af2cd","sha1":"a7215af27064eb79e5a436a2cc87f99dbd2d6edc","sha256":"aa5a03170e11dfa7da669c2bb60533a7f85aed93106651d9cef7046bb54c29f8","sha512":"4c241fcef7087300a925bf0ac34eb382a5037dbbe9e4c34ff966cfd7372b482cea4e128caef9e0deb9f13d262113012108a881731ceba9ad4f481dcd32f0c19d","ssdeep":"384:9KFRF+GF5FiFQF54hIyDBJ6s5L7ZlB4x5gFMNEEe:9KFRF+GF5FiFQF54hzPpV45gFMNED","tlshash":"b862deab8aa31441f85ba46c2ff55b42736d8843a50fddba3f8c625ccf851f98591b0c","first_seen":"2025-08-18T14:28:08.636832Z","last_seen":"2026-01-05T12:34:14.766944Z","times_seen":4,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/03.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/03.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 794\r\nlast-modified: Sun, 22 Jun 2025 19:11:28 GMT\r\netag: \"68585560-31a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q8dm3BQR1N1ul%2BuI0PJuikI8lVCSm8R3xTG9thpq9YZ1vdIwcMM2v6yQ0tkU%2BHbU2%2BwdE7RDfyAqKrB9obYL335bnQ23YC86\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b93018849ceb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c5d0fe2a0579b04a362bf2fc215bc67d","sha1":"c856cedf2a444797752c9f03a7b54763ee1bccc2","sha256":"993934ec7a57d8ac885f6096adf185109eaadb51b3f786c8514a4e5745ee4e38","sha512":"24da020b71d96a88e45269c9d525e9d2b2f705a6c63ce4853b463fd682d11e3acbd044ca3278032ea17bc9d6c8260c4f2bdaa3655148ba2914dd2997b0c4cb6b","ssdeep":"","tlshash":"6101c5d243a4ab6677c4dae23e6881d1ac5ffb6ed10d0786110b1e0ff0ae74a24c1422","first_seen":"2023-07-03T18:34:10Z","last_seen":"2026-05-02T23:25:20.269317Z","times_seen":66,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/user.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/user.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Jun 2025 19:11:26 GMT\r\netag: W/\"6858555e-9ca\"\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2g4tQaKRTEMnka54FzN9jYjQJ2tuCjtoFlX6LWWkdUVrU1xxD%2BCaxKCPh8vTJMLB7r%2FFqAtJUq1KgSs%2BentYZRP6ThB0xCd4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018859dcb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"c1963bb863f646063a5b89de77023cdb","sha1":"0fc968f88905fbad2bbbf7539df169cd104bed2b","sha256":"53b12e1294a1ad70a30faf3cf5a1932ae89dda8ff64ad58c0c139b00e4850605","sha512":"598b9dd05102445265fdf29d13c5e20610aef1255cff7bfd7bdff611c132b7cb34f935e7de202e2955598f2856ebc65273d7796d230bc6edf254066c90e8c3b0","ssdeep":"","tlshash":"bd514d7e4d1a581b90b82ac1d6d6cc36ed39d75b712d075b1bb0854e37b0da84397b0c","first_seen":"2023-07-03T18:34:10Z","last_seen":"2026-01-05T12:34:14.770317Z","times_seen":67,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/js/redirect.js","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /js/redirect.js HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 30 Jun 2025 21:10:48 GMT\r\netag: W/\"6862fd58-3b9d\"\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wxIc%2FNNZR3ZkiVmHxf54MPA5Bqsq9fUpbOvegg48Anjo96olGRKG5tbjTmAAcudY9gn4UVZsKwug63XNxmK3u6K1LeOrdLQh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018859e0b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15261,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (415)","md5":"6d17da3f1bb9e17ebf2cabc8571e8188","sha1":"3596d8e54fccbd49c755d4e6c1d1beb675159848","sha256":"da1b8ba7dfdf87ec4387dc485a2b9c13af6305be2da46e97a1aaeb6c7f59aad1","sha512":"27e85e5cb383190c79581be3799686c67c5f80528c18d0e31427a7ecd2c100533f57eab4d725561e28b68fc038f999c419be219c45cd27878ad51328704f19bc","ssdeep":"192:zjQ98KmTBzjchpmQ5Ulm8ScmcdPmRkaNafk5Cl3:fTl3yq3","tlshash":"9f62898c55f2480da653b279e63f58cc2a265003dc08db277e2d6293ffc816ed6d1ba5","first_seen":"2025-08-18T14:28:08.650091Z","last_seen":"2026-01-05T12:34:14.771959Z","times_seen":4,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/api/page_id.php","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"POST /api/page_id.php HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://bigsbr.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"page_id=1"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vp1IEiK3GdLxK6yk0Yn2f2uHKXsAmJnWhdzIAZI71j9NCNVopCUHubATgb11QZaSYLf6AvwmxHcHENrXywMB%2B8Y%2Bk7zREgF\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b93018aca1eb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T05:07:07.342121Z","times_seen":17756185,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/favicon.ico","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/favicon.ico HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: sbb=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nclckid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nfbb=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\r\npriority: u=6,i=?0\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bxc3LyDvrh8u%2Bi3nrCO5cJbVMBncW7qLKUZ%2BDABmsup%2BrkZwygr89I989Fg56VvYJgV3EBsqwUmrM2i6TO0em7lvx86MzRcJ\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b93018bca28b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:2.1.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":19390,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1ef7f35329fbb1124f1fafb250333157","sha1":"d034333e862e12a809df2f09af8ba1b0382e6c46","sha256":"26036ab1cdd5dd73b1f4deca8cf5840b8a270b577b846c5b7436d86ff0fd92cd","sha512":"0b80b4031b9802ec027f5d8f6ccdbe42a429415895ed062c11f8aa580e62878e50dd1a37f765e6c6a52f0e3402289879f96f43f886ad8fb28c739fdd3749303f","ssdeep":"192:1KREwICOqzw6HW3TNZ3VvIxUJauRlpytRUOCw76OjVtR4gBJAXS9Fli08FHEiABu:1KR05KM+Cp8cXCiIVLa/","tlshash":"dd92412428f760630293a1e56fb71f0b3ee1d507d85a89183afc8b956fc6ec1cd17a58","first_seen":"2025-08-18T14:28:08.640815Z","last_seen":"2026-01-05T12:34:14.774857Z","times_seen":4,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T12:33:45.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nset-cookie: sbb=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nclckid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nfbb=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I0ozte6QXwwz379jbVRgtquz5Ue4WF901%2FTTGiOmypilYJGrGY16eU4Mzias%2FMMlYRK8OgkSJ5sKK9Yk3voibB7ivlaxzzON\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b930185a96cb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:2.1.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":19390,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1ef7f35329fbb1124f1fafb250333157","sha1":"d034333e862e12a809df2f09af8ba1b0382e6c46","sha256":"26036ab1cdd5dd73b1f4deca8cf5840b8a270b577b846c5b7436d86ff0fd92cd","sha512":"0b80b4031b9802ec027f5d8f6ccdbe42a429415895ed062c11f8aa580e62878e50dd1a37f765e6c6a52f0e3402289879f96f43f886ad8fb28c739fdd3749303f","ssdeep":"192:1KREwICOqzw6HW3TNZ3VvIxUJauRlpytRUOCw76OjVtR4gBJAXS9Fli08FHEiABu:1KR05KM+Cp8cXCiIVLa/","tlshash":"dd92412428f760630293a1e56fb71f0b3ee1d507d85a89183afc8b956fc6ec1cd17a58","first_seen":"2025-08-18T14:28:08.640815Z","last_seen":"2026-01-05T12:34:14.774857Z","times_seen":4,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":63,"dns":46,"connect":1,"send":0,"wait":281,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/02.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/02.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Jun 2025 19:11:27 GMT\r\netag: W/\"6858555f-58e\"\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DHqds1koHwMro1n2EOiFA4EV%2FAoDGo8TJDDmdI2iujXb14r9Ef%2FWjqg8tiZH08GLcR8Wr9pNKgxfC7Efy256Ei3onghjKp57\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018849cdb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"2b035fa966f738ceb2561ccf4d3705fb","sha1":"fe656cf3d545e80627c9091f8f110bdc697148e5","sha256":"9791286851688173593d0d7b8048d9f4e030d35e5b61db408949181dcc077dfa","sha512":"c94a49c34a17174b72b371c52ac889ce40af8bb3c5a412f948d44935d7c94b409093410963492385cac544157aae85fb484ae79255ba053e735f3a9f2738ae36","ssdeep":"","tlshash":"4421e6dbd610102068d03317ac99b2190fa16c7ac2265a1e0e6a9528e0c6886f4dc1fa","first_seen":"2023-07-03T18:34:10Z","last_seen":"2026-05-02T23:25:20.309768Z","times_seen":66,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/08.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/08.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Jun 2025 19:11:28 GMT\r\netag: W/\"68585560-4fc\"\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMD4AjQ7WF4BusRQs31abooMUiA7BDVDVFgBxZndiAznjouUfKIP7eSLIreGNW9w3zDjMcNPfH%2BqsdXpTN9QIJ0wpguMJIEA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018859d3b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"b0bc3cedc286dd524172932f414c0bfc","sha1":"27b463ac249ee2fb51fa60349bfe82b10f3500f0","sha256":"451d5a5055055b1c3f8ec198ae189659d58090ba0caddde14d785f584bfac55a","sha512":"b2268e1ff70895cc4f087ebdc1fb55be3f68a6b8d5879e8f625ee5f5259141f05e7e17dcdae020036f1d749f525e8e556938307dda3e45ae62b98b466aeda004","ssdeep":"","tlshash":"b521c8771600f834e616be7ac7604d128c51660a1d9a059ba73f8af842eb0a829cca1c","first_seen":"2023-07-03T18:34:10Z","last_seen":"2026-05-02T23:25:20.293884Z","times_seen":66,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/indxic/10.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/indxic/10.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Jun 2025 19:11:29 GMT\r\netag: W/\"68585561-419\"\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JA1mwiLtwKzmYwssbLtNWlP5qgOfmDcyKS5EZGy7NtSYxZYrqYWbDMCfojczA%2FqbqzK8baHuVki%2B4f8djTZAt5Zp%2FDyZcoI7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b93018859d5b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1049,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ceb243108a4b7c2e37a1c180a0e779b4","sha1":"a4337d5cd11123ac56ce4535ba4e789204c65753","sha256":"52d3ef8761ae1fdaea49a3d3a16788438f65edad6dd54792afd28133b6a98e26","sha512":"61fac6c69007be0f6eb8268ee4804391b0c5373cf9cbf31c78a7360ad4463c98cfe4a714ab9d6b5cc3c4b9287fe3409d6b3acb44cfc1286b010a748eca5aed07","ssdeep":"","tlshash":"f011b59ae804673c5b84fbb4e492ac2484f5715dd1d6a08c700d791878255b24d30e02","first_seen":"2023-07-03T18:34:10Z","last_seen":"2026-05-02T23:25:20.329645Z","times_seen":66,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigsbr.top/img/bg_head.png","fqdn":"bigsbr.top","domain":"bigsbr.top","tld":"top"},"ip":{"addr":"172.67.133.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigsbr.top/","date":"2026-01-05T12:33:46.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigsbr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 17:14:59 GMT","end":"Mon, 30 Mar 2026 18:11:31 GMT"},"fingerprint":{"sha1":"20:61:E1:6F:0E:2E:FA:27:3F:18:4B:2D:60:38:DA:92:BF:90:42:F3","sha256":"4E:D3:3C:65:0B:C0:3A:7F:FF:BA:9D:73:4F:C5:87:D0:0A:C5:2A:82:7E:77:34:C8:96:41:B2:6B:93:F0:7F:D5"}}},"request":{"raw":"GET /img/bg_head.png HTTP/1.1\r\nHost: bigsbr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigsbr.top/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 12:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 750\r\nlast-modified: Sun, 22 Jun 2025 19:11:18 GMT\r\netag: \"68585556-2ee\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FUBXzGgWXyJ1BWh36gGI%2BNCVLtbl2aN9HLx5kt31LeuTfsW1sVwtw%2BxTH%2BycWlMtDILhM0AcawXz%2FVCkN%2Fy7MPZoNwFKqKS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b93018a39f0b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":750,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 120, 8-bit colormap, non-interlaced","md5":"cd7cbdffccae27d45ceb2448a08d8b62","sha1":"0137db18d07986e3838b49c05aa92be2d6fe5bb6","sha256":"b0f675172538da23a9c03611cde1527a6b910c905f0c8ce1f09bbe6c018aa876","sha512":"c630e17b7d3af7260448f31fec345a1299a9ec13da2132fac80259d769c21f589351df852f535c7a3c3b2e43fc3a6c1b503c0ac2a3a6b50cea007957862fd31f","ssdeep":"","tlshash":"d7012392bad5583c82d717805fc694186da70ed6ca218af8bb1d71b24cf594089a84d3","first_seen":"2024-03-04T00:16:10Z","last_seen":"2026-01-05T12:34:14.781322Z","times_seen":65,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"bigsbr.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}
