{"report_id":"31d84cd4-0496-43ce-913c-5b26b08a215f","version":6,"status":"done","tags":[],"date":"2026-06-01T14:25:57Z","url":{"schema":"http","addr":"m.bing-x.top","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"title":"BingX News｜Crypto News Updates \u0026 Market News Today","dom":{"size":23212,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16257)","md5":"ff6c7cfdb115c45d5d8401c6d9177d0b","sha1":"0d13e6c1a05a5ed0d508b5dcc01de2b036e61860","sha256":"a421ddcb88af4ecec9021dc7f3f137d7d9d79073be7ac5a59655534f74d4d7ee","sha512":"3c480119786de91808b339c18c87c6df1c0c3e0145f0d09dc9b98ce84c9861672c84b9c56da1a578e806eeb8a5129e47bd70c73b961e7e320a57f426d03bf644","ssdeep":"384:KxIYbaxNZCxG2984Rhtc1W05g4lieFnXgK7wStH3YS2HnlSiR3BSyG3CvhFwhNF3:KxITxNQxG2EDb4rwBs1c/PfLK+Mxa1Y8","tlshash":"cba2ac61662451b342b3d9c1e4b0bf1abea7f30b940a80147aef868e1fd3cb5bd46570","dom_hash":"domhash959a913ec6f15e6b91f74aad0d69325c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.bing-x.top","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-06T14:25:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"adminapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"s3-symbol-logo.tradingview.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-03-20","domain_rank":110931,"first_seen":"2020-11-23T08:22:37Z","last_seen":"2026-05-29T17:18:21.299995Z","alert_count":0,"request_count":1,"received_data":1275,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"huobicfg.s3.amazonaws.com","ip":{"addr":"3.5.159.204","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":5277579,"first_seen":"2021-11-22T07:40:25Z","last_seen":"2026-05-31T17:07:40.417249Z","alert_count":0,"request_count":10,"received_data":114656,"sent_data":4393,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"webapi.bing-x.vip","ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-05-26","domain_rank":0,"first_seen":"2026-06-01T14:25:59.9335Z","last_seen":"2026-06-01T14:25:59.9335Z","alert_count":19,"request_count":19,"received_data":55266,"sent_data":9692,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"m.bing-x.top","ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-05-26","domain_rank":0,"first_seen":"2026-06-01T14:25:59.936525Z","last_seen":"2026-06-01T14:25:59.936525Z","alert_count":68,"request_count":34,"received_data":5086009,"sent_data":13956,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"adminapi.bing-x.vip","ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-05-26","domain_rank":0,"first_seen":"2026-06-01T14:25:59.950239Z","last_seen":"2026-06-01T14:25:59.950239Z","alert_count":8,"request_count":8,"received_data":6722,"sent_data":3746,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"hw.rangwodf.cc","ip":{"addr":"104.21.11.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-12","domain_rank":0,"first_seen":"2025-06-03T12:45:54.191815Z","last_seen":"2026-05-23T12:25:49.789232Z","alert_count":0,"request_count":1,"received_data":5042,"sent_data":372,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2b72232ed380a528eeb3a552d77ae9c7","sha1":"6dc118004f8c5dcbcb571446e544948e5884cd56","sha256":"b7d4991a24ab4ba72ab4e3cfa67e51ed181d0f21335bd7adb062d024a1564c4a","sha512":"9a7cba48645dd78c7a719297ffad44b3da7263835e444e0fde947908fd4345a1cbb1d672b3e53338231cd6a11b38c7d45e5395f1387d368b0e8f93beea4d6347","ssdeep":"","tlshash":"77c08cc4a0c26d001602649010af34e890244027b0485b028c94d8482e220b08233e98","size":139,"data":"","first_seen":"2024-09-19T22:02:28.519141Z","last_seen":"2026-06-01T14:38:08.623081Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9cbeee43eb9396cc6f22ceb11a068a8b","sha1":"855c2b8e594a001965664c3dac645d713e2c239d","sha256":"4748c61b3b46c6d4621d9fe0f60dd4899f2041684946b1434ba9656cfd8db04e","sha512":"13e27d58dd059ba27341cca34d9fd559187d1a26e28aed067fb26d0a35b3e4fb6d9f0a8f9ea8f4d3d207dfda8ae35c0ce573288498bc2c56472beade7926ee80","ssdeep":"","tlshash":"bbc02bc4b0c73d001606641050bf34e8a034402bb04c1b03ccd4dc483e230f08233edc","size":139,"data":"","first_seen":"2025-03-06T21:41:52.844247Z","last_seen":"2026-06-01T14:38:08.624922Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6ad1de43a179edb86c8a59616f0bbb3e","sha1":"297000177cf28dae0c4b519d0b4ed485a943e29d","sha256":"f79a609bba025ca87664a6e904e36ea1fb8725b9bfb307a9339aa46364617439","sha512":"c79345d3262380fe5036bba72fdf15c3299b0fb1c1b778d96b9ab9a903719cf77a1773cfbb9a8a8806be9a66ebf20add9f7dc5d1cfd8aaa48e81ba4716e9ab63","ssdeep":"","tlshash":"03c08cc4a0c26d101602651021bf24e49024402eb08c1b038ca4d8493e220b09233e98","size":139,"data":"","first_seen":"2024-08-20T17:29:46.839424Z","last_seen":"2026-06-01T14:38:08.626582Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/charting_library/charting_library.min.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-06T23:47:44.161826Z","times_seen":997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"104.21.11.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef762069ef4ea29f67e875a95a1bfba1","sha1":"7d6eb62282771edb04fe2bdecf30ef58692b33a8","sha256":"8850618e47785b4fe94ccd5978f98d846a9f82fd734dc685cf4a8e56958831c7","sha512":"a2f3fa65bea9e9e24e8deb8bc963dafff9b46e48e2e33d942d2b065e57ac820b8ca1fa4cf636063fc8a4a9aab3a4788ff2eba86a1ffcb5e222245d0e3b30231e","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3h2muyFDM3ii7M/+0rg:bLMujzYpL5EOhT0529KaCDaVAHD8","tlshash":"c9917356212374160674337e5bd7874df725a0f331428689babcc2026ff9076d621ea8","size":4366,"data":"","first_seen":"2026-04-27T03:35:33.864259Z","last_seen":"2026-06-06T02:42:02.380075Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e74c9f6de3c074ef578e539a30045763","sha1":"8cc6081f37d5b5663379d3ef8b7a29cd022ebb2d","sha256":"feb1a4bf9f46b55be2fa93e5a712dbc573b7c2ad43bf3c94ed02cde0b0c3c109","sha512":"14354e1a4fdc955426af99a555ab7b2555e347931e3f3b4208cddf8278c26ad99a01520859390cf72f0f6b7eb8c1ed938750b38df2c4f1871b9369695dabebda","ssdeep":"","tlshash":"c1e0abd331a1d70439f99569b1dd186294baf37248cc953ff068b8002e76a2580a6d21","size":420,"data":"","first_seen":"2026-03-23T14:44:34.65402Z","last_seen":"2026-06-01T14:38:08.618148Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c2a59594b7c750c554d59b777cf7e0a5","sha1":"cc0ac4dbb49aff978ff3ee7d7c1a27f761ba6a20","sha256":"505695da350a211f6c8dbebc42f4bdc2bd8e287e4f5611c8eaf94c81f8951468","sha512":"8fdf9120a742f4fb36ebe9f4bd7684db839a87a5773a496dc5a6e6a8403cfe7562e67463995d588160f8fe75170f338034d8676b7708873d3c0b5c84a0da3b51","ssdeep":"","tlshash":"eec08cc8a0c22d041702641011af24e890244026704c5b02cca4d8683e220b48233e98","size":139,"data":"","first_seen":"2023-05-10T15:08:47Z","last_seen":"2026-06-07T07:15:22.257028Z","times_seen":6676,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b1e6506abda1ffa5b9ab2721a0fee13f","sha1":"cc64d89d747a4c6f5293b262055d3cb8e175b738","sha256":"848a05dd565ed4ad22c665530b61473e4437ca86f8bd027a8c952177f73b5269","sha512":"ac564a39d053f7c5f6e636296207458bae1d069f50356ee85ac23a8045617ebbe8cb5f26870d5a19f2d3cf834bc578918ad2b9f46bb68e3d0961c68841bb6e17","ssdeep":"","tlshash":"ecc08cc4a0c32d001643641050af34e490348026b0481b428c94d8492e230b08233e98","size":139,"data":"","first_seen":"2023-06-07T05:45:46Z","last_seen":"2026-06-01T14:38:29.840398Z","times_seen":252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d394134562fba64d1f9f6426bfec651","sha1":"45fa2be1cddbb3232056efe2a70ce950809272ba","sha256":"c3a3d569adcda9019399dcc1e0e6933e9804d7c5ada8f6b1c569d7c04ac4feed","sha512":"8dfe206609f2eaa6d9c22357c58f33006637a2c1d24a268b82871e887db144b3d0616fd907af77a58115f215814335a86ff7bbaaad54c884e0fad66fb7727f4c","ssdeep":"","tlshash":"4611abfe191aa4296303404e976b7801643650a9000a184177ccde9dbb9af7dd0cfb8c","size":1048,"data":"","first_seen":"2026-06-01T14:26:05.67409Z","last_seen":"2026-06-01T14:38:08.620442Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6bfc68ca673adf29592b7f1080026574","sha1":"ea31642ffe2af1436592801a8899f159ccd82a3b","sha256":"90a28f86c845a175ad683b18ffe710f17fd7d92bdbcc4fa194446639d200cc69","sha512":"146399870300bb6b8d0aeb1a95741d9b1af123290b182c325d40837fd50efb35a9916ad72294989e0ef4ab1537e6a9bb79e033c0349f641ce5f82baeb22611c6","ssdeep":"","tlshash":"2fc080cca5f37d0516167561146f35d4d0289017704c5b02ddd4dc483f531f48237d98","size":172,"data":"","first_seen":"2025-09-27T05:00:10.576574Z","last_seen":"2026-06-01T14:38:08.61542Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-49d11ba8.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"2347f9fdf2d78cdf64310d094372d451","sha1":"f723fb619488160e39661185757652b41410a506","sha256":"507f9242bf6d24e643488a86fc69e7da988af3415100812678f63f15b8e6ed30","sha512":"d18e455547f19efc422df5f112381ec76356186110c5802f75ebd10edce8cf1a3f77df1468075f5d72b4583a10f1d89bad58dc96702f3e437de5449f614e0249","ssdeep":"96:bY5uPNL4w9NvYs29nqCwW8+ih+Yw+GvuU0AjtfOt3hrwr33YHcRB+Tj9:bYgPNL4w9tYscqCw1hlw+auQZ21hrm3g","tlshash":"bea1b64db80389bea977144448580421615d3bfeb26c44f6f7bdad4a37b5eb9e354320","size":4639,"data":"","first_seen":"2026-06-01T14:26:05.639382Z","last_seen":"2026-06-01T14:38:08.532947Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"60d048e4c2a1eb5d800d7af368cc92ac","sha1":"7ee48e9063a598ebd38d8b0c7430bd748c810c56","sha256":"fc5dd52f9a7f2cd9ac63f3d4e537d6a04f9d97421d87aebf080b38d981c6fb80","sha512":"d3eebc743f8fa489e50ff88bb1c004951f637a926125d6b6698d3d37f899147e2cc425f4ca1b10efdc2e5a69db4ba67f5615281c07adec44f17dd4aaa85d72e2","ssdeep":"","tlshash":"e8c08cc9b1e33d001602641050bf24e490244426b04c1b82ddd4ec492e220b08233e98","size":145,"data":"","first_seen":"2025-09-27T05:00:10.591622Z","last_seen":"2026-06-01T14:38:08.62219Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"16dfbae0074513ae555634b362ca9537","sha1":"3ec3319b1073824a55146a85bab68a0c85769570","sha256":"08ac14e63c88f78e2a818841c6b62d154a05d7af793129d1ff4bbf1ecb858014","sha512":"52952f64e10d9a83ae3cf31b137ffa1aa4e7c3a5a4fb283234727f49fa4c493b39edeb5bc851f827e1a9364e73f371c91667fc6c250d52f27c3e8bf65c48899c","ssdeep":"","tlshash":"eec08cc5a0c73d001612a42410af28e890358026f0881b029ce4d8492e620b18233e9c","size":145,"data":"","first_seen":"2026-03-23T14:44:34.662097Z","last_seen":"2026-06-01T14:38:08.612431Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-07T08:30:45.576099Z","times_seen":36372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-9b7b0384.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ee4b0ad5ee8dbe4b6c150a099218942","sha1":"b8fcec1a789a68194b820045cb2e2b975269b2ce","sha256":"c0ed5703e342415181d7c40ae6c008d484a0ef1fa2887d360243b9004ee9a4ea","sha512":"c0b8adb7f2506eafbd81aa3ab348cdecfb15d86b2b9572c7f0847441574bf586af887f1928f7a08f8999735ba60c4dca39f3cb83575a83a991fcd0b71c7f647c","ssdeep":"1536:xjxqx6xBC1sERL+Dddj2+EynDiv6t/L3EEAdunJdLR1GQT:NII/3ERL+Dddbiv6t/L3EEPpT","tlshash":"23a35ec954061eff5dbe08846e5b5a0020691f975ccccca373be6e4a3bf9ce4625a718","size":100578,"data":"","first_seen":"2026-06-01T14:26:05.620724Z","last_seen":"2026-06-01T14:38:08.603933Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/filters-1023b067.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"7393d8569c563c9bbc02b498457a4dc5","sha1":"f504f04d85eb0b7df52ce9f91fdd118e6e9a357d","sha256":"362babc41043a3dc910bf48506816387449e58fa12cb9ca0d0d5e4c7924fd7af","sha512":"883dde7f4071f38a423ae97b47c53b54a2e7a360940d6f5f3d4ae72a3587471d5f50e9163a4c71f12aa01d3bfeb66c7adb5b8aa905bcdd3ea3a4c009ec897fe3","ssdeep":"","tlshash":"415145fdfcd3a13356ea6df940288510728ebe20686e0a4df55bd0465933888e07f778","size":3078,"data":"","first_seen":"2026-06-01T14:26:05.584037Z","last_seen":"2026-06-01T14:38:08.581182Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"83c3e2adf3a6b14111458849e2f1e4d5","sha1":"562013729ba02b66b570492fb0a0f2b61280ec93","sha256":"ae599c2b6f2d946ba47f1d3f8bde555c91f3be80698db0c4e265bbef72849628","sha512":"a7332aa69feaa155fb0fc097e71f9908dbcf2ec5391d734e50b88281b9fd98c6d3666d741b514bc46ee9f8a3472efc3cd15b487e4090492071818822435364f4","ssdeep":"","tlshash":"abc08cc8a0e32d001602741410af24e49025802774481b168c98ec983e220b09237ea8","size":142,"data":"","first_seen":"2025-03-06T21:41:52.808608Z","last_seen":"2026-06-01T14:38:08.619398Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-328c454b.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"013724237ac09f0da9477a8548d762fd","sha1":"8f923d37201aa9e8f6bd0e9b62f100b31895501c","sha256":"cc136a26bb75cd798eaa63f8ceb0ce1e743f12ba0ee3189d3315c9acd579259a","sha512":"d90e5949410e25e4dc85646038a5a4d99532f0afce5bec5cd3cb00b7c19efe59f2c338657bebad64a9d8bb872b06a8b1014cab3923861e48da2f41afd294a84e","ssdeep":"384:NtLlV9Ies7tvGiPo6MNbaeD1PgFoxbfifIoWYlSAPCr9qqOecHXCg135M:PLIG4MUYYoxbfGcNOecHXCg13a","tlshash":"9962c799f80a9a3df577a4a104cd0400720e3fda500d99a3b5fe7d877796ef8b70a614","size":15323,"data":"","first_seen":"2026-06-01T14:26:05.600415Z","last_seen":"2026-06-01T14:38:08.531665Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ec4c1d5196aba60d94e140a373eff54b","sha1":"3dd138ec0af6761c2a33a2c83029bfa4f664dbc5","sha256":"ab39237c410b7884ae76d0bf39fe69f1291c24374f6ed095b135ac23fd21c96b","sha512":"5bb9e931ec252a36f73a85dd6e945708c1fef54fc720cdffb90765e78c51c81080ac95ef1e567bc5ae9863c243de0882e1183561e754d82e123890b96d47fa4a","ssdeep":"","tlshash":"93c08cc4b0c22e001602651010bf34e89024802674481b028ce8d8a82e260b48233e9c","size":142,"data":"","first_seen":"2026-02-01T01:35:54.682726Z","last_seen":"2026-06-01T14:38:08.629135Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-07T08:30:45.576595Z","times_seen":38683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"66f3832186e63f9e6dc840695647afd7","sha1":"c88b5b4a0ad23b5e63454693716ea7e6e9b37a4c","sha256":"11c1c2b458ec629dcc74c85cd672bb7708e34ffb7efbb68aeaeb6ac913255b71","sha512":"5424db2d753294f6a8a6c4034187ad5b9d12787552d9c5e70b8eac316ab99076b4c3710935cc347d80726007276d9b75887bd352641dae8529f2e95695256eb1","ssdeep":"","tlshash":"efc08cc4a0c36d001a06641010bf28e49034402674881b03ac94e8482e220b08233e98","size":139,"data":"","first_seen":"2024-07-02T13:45:50Z","last_seen":"2026-06-07T07:15:36.609681Z","times_seen":4278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-cdb3ac80.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"a6ba866cf924e5a24932051934006e3e","sha1":"d8cdff401b25449b77704423eb6ff678c4b8545d","sha256":"f298d076759de8e8165a85b79c31d6aa46cc9db4a9b08d82dc1c9c4c7710848c","sha512":"8b5175a4e08f719d9d4f4d9ab7dafc093ce31448f430f4158eca53b959a52d5cc832d9a27a2fff5d2fcf215ba6dc2aebb9640a6573958932bec90e886867a615","ssdeep":"","tlshash":"4801d0f9fc0dcebb1f62068002a1360114092fddfa1419f298877e661be4950d7de72d","size":772,"data":"","first_seen":"2026-04-08T17:19:47.548453Z","last_seen":"2026-06-01T14:38:08.534133Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/vendor-93b7ce71.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"ea6d61bdac00a5a9b70630a439f9c029","sha1":"dd1947a855f3bb73ca80b534606754669df40b32","sha256":"7012e144ef983e007990b06b5f63c9bd37403f9d3c40d8643b3639db42720cf7","sha512":"8bdf209e95db0bc6276398fd63959a3d5d5da41719b18fe82fb55524b8790b9a2a164a24ee50e1de54d979ec027c713cc81be61a6baa08192cb04bc78753eadf","ssdeep":"12288:TAT1O3FcXC8WEQhh+X8sxNsRJywe1/z2ZBGxIU1KF/W966OMG77t5Ck:TAT1fyC1X8XRJyweFz2XRfF/W966OMg/","tlshash":"d91529c97692f06147ab24e240bb0006f3396e59740e84a4f16d98eb7d79d89d2b7f3c","size":927739,"data":"","first_seen":"2026-06-01T14:26:05.643336Z","last_seen":"2026-06-01T14:38:08.55893Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/currencyItem-7760150c.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"a8e3f24ab997016fcbc69a608e743ba1","sha1":"c6d11d83311ce5966db58d4a7a445df51eb9681f","sha256":"df0cae98ff43d01f26a19d4536960c6f364b7ee0a5351d91972e79af16d7d086","sha512":"a57cbb140c4dd43755db2a95152e6ded76837939ab16d1d1bc0e0de8d974db88e466f067933d64fbe7e2d0cb94e6eb2d2bd53bb98da1c0e8f5c8e4e4d5974b1a","ssdeep":"","tlshash":"7c21df9aa912c7b1cabf90a285bd5414170d7bda700181c5ebee148a3b875fcd738a31","size":1206,"data":"","first_seen":"2026-06-01T14:26:05.653101Z","last_seen":"2026-06-01T14:38:08.546505Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"fba0ee7ae4592ea85cd034e3a0880b6a","sha1":"bc8903ce273e24296e904ed4649b0dbe555bb80e","sha256":"ca9bec056a2ab66f969f3a8db147ceaeaa0e521ee58a111c301d23b7cac397c3","sha512":"7e91cf496f5110e2c7c77e795120b6847f8f63e39b1e8a0cc155c5bde26bf2c12340df517db0421bdb986ce605bae72d5ea8ebc97f3c63dad5025996084cd0a9","ssdeep":"","tlshash":"28c08cc4a0c63d001a02aa1410af24e89024802b704c1b439ca4d8493e224f18237e9c","size":145,"data":"","first_seen":"2025-09-27T05:00:10.573775Z","last_seen":"2026-06-01T14:38:08.613493Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"44bfd921e9543c2f43861ff2ed742d1d","sha1":"a6639d2c6815b027fe890f5e3829c4010591683c","sha256":"3ac1b7a6639f6e4bc683976b2127cfcdf8845314148579ac3aa8f989c146461a","sha512":"e9fc564c4d2700d6be82f054d1fc3d2d23d38e806e9f5eefc94b3ea49b8e6d1f2a637eca669953a8311dbdfa301aa63cefbf2c13bc6eec9dde9bf9442a8fe3d6","ssdeep":"","tlshash":"a9c08cc5b0c22d009a02641110af28f49024402670482b52dce4dc483e220b08237e98","size":142,"data":"","first_seen":"2025-03-06T21:41:52.819585Z","last_seen":"2026-06-01T14:38:08.617204Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7c990b0364e7f878a920a6339c206b44","sha1":"25b0e7ca78ab6fc500cc0b5f3c5eb05d8f7c2548","sha256":"c15dce073bed44e7ae569e71885deaf2d20daed1ddffc56c73c42de53e2df337","sha512":"bdf6c982846bfb9bf9d1bba277136603a532b24444ac0984d14015e7aeb4d3e9994c36b06e0b58ba3b72903c961ce49c90862db1e0721edca619b723ab9b7c7b","ssdeep":"","tlshash":"c3c08cc8a0c72d001603655510af24e89034802670481b428d94d8a82e220b08233e98","size":139,"data":"","first_seen":"2025-12-28T04:21:32.305063Z","last_seen":"2026-06-01T14:38:08.630776Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/zh-dc9b5170.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd19be703fcb41e61d49a16c853b9cca","sha1":"f36913241433e3c72e242d272aa9f6c40255646e","sha256":"1ed55a0ee9780c85d6f0cd6c81eac94edeb8b8871c58e93cce507d1659a2858c","sha512":"ab9c28e61f09acbc3d7c05ada860094d87c2f2690a4f55d77849f19140a43879f87044ac9e06f5236fb4ccf0f52faffbb596eac88399a16b6d5e713c37ac6995","ssdeep":"768:D9sgcXP80iU/fLzlLW0+sl/mgrUYxP7ePR:DzcXRH3JW0+jR","tlshash":"fcf2e6d43daedd9a40a3a627b04f994120b35ec6c626c4091fe99ef562d8f039793b30","size":37213,"data":"","first_seen":"2026-06-01T14:26:05.602651Z","last_seen":"2026-06-01T14:38:08.597256Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-219ec309.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"1f0019e83ccfbbcdd965ea604aa2967f","sha1":"5b4286c2b0028fc385319d073ffc93a72dfc4501","sha256":"7e27efeb86ec5c3b395dbb1db2b0b88775fa8d83269a225f66436af49ae6d7c8","sha512":"de4a264e41991826b70200e8deb38f9eca46972dce0cf2a375508fa94df43be846e563a07cf59103b4d6e5e48a84a20cd03cac88e0f7508a13b3fb82556218e8","ssdeep":"","tlshash":"40f00e7fbd6ac0b22fb384e8a1731820ba1c1b4a3b54c4d4c4871e148b388f3e12e224","size":508,"data":"","first_seen":"2026-06-01T14:26:05.58163Z","last_seen":"2026-06-01T14:38:08.596398Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"65cc32c48c6ca2b8b2fd44c1670ae667","sha1":"f2a116897b02c9bf0bb31247024703d913d0cd13","sha256":"83e989e9718ddc6751b336792e962c10faa616a9f3feaffc90f9c430e4c6d221","sha512":"bd8ce0e0a56f50ef5d499026d682702cf4fc60698a0152097cad28c8b889fcd4bdad15f87af7f14437f9cba7bac5e26d80af6bbc49249f7efbdc468ef39be9f4","ssdeep":"","tlshash":"11c08cc4a0c22d001602681110bf24e890244427704c5b028c98dc583e220b49237ed8","size":139,"data":"","first_seen":"2024-12-08T15:39:09.862859Z","last_seen":"2026-06-01T14:38:29.851322Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a6c5d65e551430b1950331879b14a51d","sha1":"34d6767dc2fd9f9f5b161f4af7d580a75850105a","sha256":"1837fcfd5443eedd4b56189cae3a113e0d9701ff0c043d5fb1c1692262674880","sha512":"2b1477e3636c1c537ad7b2f376c9834ac9b30f810529053220f39695e05465cac05bbbbd0cd1886917ad9ea8ed1b28fd5ba75304c18168e05a15b32c2fc465e4","ssdeep":"","tlshash":"66c08cc8a0c22d001602641020af24e49024402670482b03cca4d8d82e220b08233e98","size":139,"data":"","first_seen":"2025-01-03T15:55:01.034291Z","last_seen":"2026-06-01T14:38:08.629954Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e21a880dd4e3258951787a42857bfaea","sha1":"d69092393af4e813929289ea3c5a180c722ed227","sha256":"b409d8c03eaa683dc7ddd1fdd40df4dccb80954fd3ee28ccd07d14415c28944e","sha512":"e340b50c449986a72c671e9f082b62ba21b40061c898e7d11b24a908efd7755559b88ced0fc5ce1002aeeb69f90b86eaf58edba7f1716ba5b7376a387ed22aee","ssdeep":"","tlshash":"45c08cc4b0d22d001602642060af24e49025442670481b028cd4d85c2e220b08233e98","size":139,"data":"","first_seen":"2025-01-03T15:55:01.306059Z","last_seen":"2026-06-01T14:38:08.625742Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/#/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"da2b00c361e8761dc8ec015928821182","sha1":"a74dc162e801de1dbd2aee717f7e157f4a236a98","sha256":"a1781bbf8a24c27d1308647e71112cb3150676be30304869cc460fa414288649","sha512":"456891de97805792a00daa6be217ba433e659bf3a56737bcddb5d658007ab55249fabba67cdfb850df49866cec1d4578392ecfad64566f801d21c82267d1e26f","ssdeep":"","tlshash":"9bc08cc4a0c32d001606641010bf28e4a024402ab0482b028c94dc683e220f08233e98","size":139,"data":"","first_seen":"2026-06-01T14:26:05.690106Z","last_seen":"2026-06-01T14:38:08.627465Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/trx.png?2.0.1779829021312","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.204","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/trx.png?2.0.1779829021312 HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: jT/o8Vrl6jlOGCbXPgLOAsdJGGPsNKlQeXPblBuiSP4yI4ii9fMVB8yz8y4b45fBGX591bZ7A68hPVi1DibrskrAp0uU8qID\r\nx-amz-request-id: SC6FEAVRCGHVWJ3W\r\nDate: Mon, 01 Jun 2026 14:25:45 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:16:15 GMT\r\nETag: \"6868416c3e73ea6862b7595bc18525e3\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 610\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":610,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6868416c3e73ea6862b7595bc18525e3","sha1":"4c77ac014aecec29e584cb03972aaddd98c8738d","sha256":"e9c728057aad1b6bb1c591a6a462787ed05ab7371d71e1070abddbe84f6ac4f5","sha512":"7ac560e7c2c27a593f5a5924b79e8eedc5e5155779d61de17d24f9105129fd666a164ade4d25763af42c889378fc9f24653e711009b85c8936fabcffb75bf253","ssdeep":"","tlshash":"a0f0783e72e837747409d732737f88f239271f96f27a510822a51a04752261e144e9ce","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-06-02T08:10:02.659224Z","times_seen":585,"resource_available":false,"data":null}},"time_used":1127,"timings":{"blocked":848,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/common/getAllSetting","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:37.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":1282,"timings":{"blocked":528,"dns":54,"connect":233,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-219ec309.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:38.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-219ec309.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 508\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\netag: \"6a16091d-1fc\"\r\nexpires: Tue, 02 Jun 2026 02:25:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (507)","md5":"1f0019e83ccfbbcdd965ea604aa2967f","sha1":"5b4286c2b0028fc385319d073ffc93a72dfc4501","sha256":"7e27efeb86ec5c3b395dbb1db2b0b88775fa8d83269a225f66436af49ae6d7c8","sha512":"de4a264e41991826b70200e8deb38f9eca46972dce0cf2a375508fa94df43be846e563a07cf59103b4d6e5e48a84a20cd03cac88e0f7508a13b3fb82556218e8","ssdeep":"","tlshash":"40f00e7fbd6ac0b22fb384e8a1731820ba1c1b4a3b54c4d4c4871e148b388f3e12e224","first_seen":"2026-06-01T14:26:05.58163Z","last_seen":"2026-06-01T14:38:08.596398Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1942,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1942,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/filters-1023b067.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:38.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/filters-1023b067.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-c06\"\r\nexpires: Tue, 02 Jun 2026 02:25:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3077)","md5":"7393d8569c563c9bbc02b498457a4dc5","sha1":"f504f04d85eb0b7df52ce9f91fdd118e6e9a357d","sha256":"362babc41043a3dc910bf48506816387449e58fa12cb9ca0d0d5e4c7924fd7af","sha512":"883dde7f4071f38a423ae97b47c53b54a2e7a360940d6f5f3d4ae72a3587471d5f50e9163a4c71f12aa01d3bfeb66c7adb5b8aa905bcdd3ea3a4c009ec897fe3","ssdeep":"","tlshash":"415145fdfcd3a13356ea6df940288510728ebe20686e0a4df55bd0465933888e07f778","first_seen":"2026-06-01T14:26:05.584037Z","last_seen":"2026-06-01T14:38:08.581182Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1939,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/matic.png?2.0.1779829021312","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.204","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/matic.png?2.0.1779829021312 HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: y+cw4+6KNYWqZZDZriTCbLgzS01yWzgyFOwS66OPpY9w1S9FgeGoUrnCGX5KAn8Xk5e6F7ZVKVqXL+w0woIuXc306gY/xePl\r\nx-amz-request-id: NA7MBJ67M6GRSSWD\r\nDate: Mon, 01 Jun 2026 14:25:44 GMT\r\nLast-Modified: Thu, 09 Dec 2021 03:01:36 GMT\r\nETag: \"4b8255d6caeb3c78506ce4a4f522500e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1609\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1609,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b8255d6caeb3c78506ce4a4f522500e","sha1":"8f735937aa89b1dde66077b56fda4dd4986bd5b5","sha256":"80db0486115a4e758711b1b12a083facacef885e3197958fb3c9efedd94069c0","sha512":"22b08242dd56258cccf0f4dee8a608f3f2038ac054ecb8589d3a6f0ff589a49b605cd55a25c79f71d68e32cceca19e203e40cf43b2a9b938502918c785ea38cb","ssdeep":"","tlshash":"0731585ab31823b4f40897b406a650712f7039f77792c649dad61c13f65210d0dfee97","first_seen":"2023-08-09T05:15:42Z","last_seen":"2026-06-01T14:38:08.587762Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1447,"timings":{"blocked":568,"dns":22,"connect":262,"send":0,"wait":287,"receive":0,"ssl":301},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.bing-x.vip/profile/upload/2026/05/27/jiaoyi_20260527055612A008.jpg?2.0.1779829021312","fqdn":"adminapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.bing-x.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:42:39 GMT","end":"Mon, 24 Aug 2026 19:42:38 GMT"},"fingerprint":{"sha1":"28:67:45:E6:61:F1:B8:CC:D9:05:A0:01:71:15:68:C3:40:91:5B:FB","sha256":"13:FC:39:0A:11:4E:0F:FA:B1:85:1F:65:88:39:29:1C:41:21:75:79:CC:D7:B4:78:15:BF:3E:16:D0:94:C2:D8"}}},"request":{"raw":"GET /profile/upload/2026/05/27/jiaoyi_20260527055612A008.jpg?2.0.1779829021312 HTTP/1.1\r\nHost: adminapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1002\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 26 May 2026 21:56:12 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1002,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 66, 8-bit colormap, non-interlaced","md5":"0b18d671463e2f0b604df96e444483f7","sha1":"3aebab8f2439a72831e079461c72cab3e01b58fc","sha256":"350f3dab288a6257b01bfbe976af9915ea8355074fc174acb9cc561790dd3033","sha512":"6bd191f3c08c68668336917e5bc18de0c1804d403e9dbf66acdec6bf6cf82c675a71d10e89dfffd5ecc9882e66f594455b39bea178f8c85747a98e6a108a7e7a","ssdeep":"","tlshash":"151198e1cca2b9764d94447d0e822f188df651086a72e361341cff957543cd435b6642","first_seen":"2026-03-01T01:24:12.634004Z","last_seen":"2026-06-01T14:38:08.588559Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1341,"timings":{"blocked":454,"dns":0,"connect":0,"send":0,"wait":885,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"adminapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/common/getMt5Amount?coin=xau","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:39.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:39 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/common/getMt5Amount?coin=xag","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:39.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:39 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/btc.png?2.0.1779829021312","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.204","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/btc.png?2.0.1779829021312 HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Ai8cHHlgbaRYi1xq5V6C6L5rDF4obARppb1jE1PhjQv4ziCjzHcnifHz4kgJ7YVqGjDisl+TvItQXmZiiFJBIstjikl08Hvo\r\nx-amz-request-id: NA7V8T5EPQV9JKSS\r\nDate: Mon, 01 Jun 2026 14:25:44 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:37:53 GMT\r\nETag: \"03c74454bc971a3437d588396a5e610e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1947\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c74454bc971a3437d588396a5e610e","sha1":"1a359cf1c14e757eaee1c5c807cf6c7732646b15","sha256":"733d0c0a99a79f263e8b548b8b1988ccfe80e156d36120371495955b4e51e382","sha512":"dede5e3cd5e0f080f4662e4e2df58482d19df970a2cc3f505eda82fb180a736a4c82523fe35b7a613293f572197e44c3bf963bcbaa32174c00d80b0b1e08bb2a","ssdeep":"","tlshash":"24419620d7bec18cf00196fcda29c87479971cc53e28d089d6e9485ab66405d1d72cff","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.034886Z","times_seen":471,"resource_available":false,"data":null}},"time_used":1459,"timings":{"blocked":572,"dns":22,"connect":253,"send":0,"wait":295,"receive":0,"ssl":315},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/blz.png?2.0.1779829021312","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.204","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/blz.png?2.0.1779829021312 HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: a0ZY7Mddy7ZWE9ve7Ty71ciPYozsADn7eBL5rBShPABgelAJmmZy4sGPwt72BZ13xs3g9+Ijrf+wD+15gTQV1PbpDt70+WFR\r\nx-amz-request-id: SC6AA424PSMM6F63\r\nDate: Mon, 01 Jun 2026 14:25:45 GMT\r\nLast-Modified: Wed, 15 Dec 2021 10:33:36 GMT\r\nETag: \"de0059bbef67f9c3df6064bc1bbbf3f5\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 6040\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de0059bbef67f9c3df6064bc1bbbf3f5","sha1":"320868b36c5c9096b5b857d046a51c380b2753af","sha256":"eeef5e65de2a963065a0c6661e38b7d4ab470f4787e64e2fcb92e41189e19b62","sha512":"5b5da844bd0bec1f061e0d9d531be81666c8a5c6c5e201289b2d19ac962eea542b79126bb1b53e3aebf03ae3f1ad371f9b26a7d08c1eb4baee7522a38d4a34d3","ssdeep":"96:T5cAg0U0h3k+pyt1hSyG/wDkB4koyUWEamKTRD3Rpe08sDTZoOkTX/WEyDcT4cdZ:asU6xpe3buwD+uHbaZRDhksDTZdkTvWM","tlshash":"b8c173853375c2edf100d7bc8a0a74793a632de63822d55907e81c86a85492e4de9ce7","first_seen":"2025-06-16T08:54:16.094362Z","last_seen":"2026-06-01T14:38:08.574165Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":851,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-d253bac1.css","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:37.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: text/css\r\ncontent-length: 61\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\netag: \"6a16091d-3d\"\r\nexpires: Tue, 02 Jun 2026 02:25:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-06-04T04:33:14.424259Z","times_seen":317,"resource_available":false,"data":null}},"time_used":1924,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1924,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-a444c2e2.css","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:38.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-a444c2e2.css HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-402e\"\r\nexpires: Tue, 02 Jun 2026 02:25:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16430,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16429)","md5":"e527af1b8e92b41bfc8e920323f3769c","sha1":"6fbb3836c6814c2b4f8db8d00767d283f6ad02f1","sha256":"a444c2e266ac9e2134d3e270b87ed28f0b19e356a67552e59dc169e23db4fd92","sha512":"63b5ccc66a1fa0484bb5441844178d21f3e58aceadc50df0842fb34a2130abcd179d7c50b2c216639bba9802b8bcae6cf5a8b0ea4952d093ddfa39536440f33a","ssdeep":"384:DFVVG0aeYZZp+TnjsCmOqSV5eKch2g3ye5ncqocJnNyh:zLUQ","tlshash":"18729628f680163dec33d1d6bed889cce15dba21e6439ed8fb6766220dcb2d71231195","first_seen":"2026-06-01T14:26:05.594205Z","last_seen":"2026-06-01T14:38:08.595506Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1946,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1946,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-328c454b.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:38.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-328c454b.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-3bdb\"\r\nexpires: Tue, 02 Jun 2026 02:25:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15323,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15314)","md5":"013724237ac09f0da9477a8548d762fd","sha1":"8f923d37201aa9e8f6bd0e9b62f100b31895501c","sha256":"cc136a26bb75cd798eaa63f8ceb0ce1e743f12ba0ee3189d3315c9acd579259a","sha512":"d90e5949410e25e4dc85646038a5a4d99532f0afce5bec5cd3cb00b7c19efe59f2c338657bebad64a9d8bb872b06a8b1014cab3923861e48da2f41afd294a84e","ssdeep":"384:NtLlV9Ies7tvGiPo6MNbaeD1PgFoxbfifIoWYlSAPCr9qqOecHXCg135M:PLIG4MUYYoxbfGcNOecHXCg13a","tlshash":"9962c799f80a9a3df577a4a104cd0400720e3fda500d99a3b5fe7d877796ef8b70a614","first_seen":"2026-06-01T14:26:05.600415Z","last_seen":"2026-06-01T14:38:08.531665Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1943,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1943,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/zh-dc9b5170.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:39.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/zh-dc9b5170.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-92ed\"\r\nexpires: Tue, 02 Jun 2026 02:25:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37613,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (27768)","md5":"dd19be703fcb41e61d49a16c853b9cca","sha1":"f36913241433e3c72e242d272aa9f6c40255646e","sha256":"1ed55a0ee9780c85d6f0cd6c81eac94edeb8b8871c58e93cce507d1659a2858c","sha512":"ab9c28e61f09acbc3d7c05ada860094d87c2f2690a4f55d77849f19140a43879f87044ac9e06f5236fb4ccf0f52faffbb596eac88399a16b6d5e713c37ac6995","ssdeep":"768:D9sgcXP80iU/fLzlLW0+sl/mgrUYxP7ePR:DzcXRH3JW0+jR","tlshash":"fcf2e6d43daedd9a40a3a627b04f994120b35ec6c626c4091fe99ef562d8f039793b30","first_seen":"2026-06-01T14:26:05.602651Z","last_seen":"2026-06-01T14:38:08.597256Z","times_seen":4,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-951a0f61.css","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:35.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-951a0f61.css HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-4ab67\"\r\nexpires: Tue, 02 Jun 2026 02:25:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":306023,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"55e24e0ffb43b8dd0a992ba4d6f7b5fb","sha1":"28e2a392c21006f15d2b4cffe3e918a7b9ad4985","sha256":"951a0f618a1dfa4c26a27a10100225c1eb63321732a9fb8fd39c2ae27e3102fb","sha512":"1ec0da8770dce8a8d8da6a820237037f502a759b75fcd287ca3a57a454fd73d54f0625a88ba845616cad0e2dc84a1ab46105973af003112e79a345d243b53a4e","ssdeep":"6144:nIvxsal1W9EkZ8w71ZACkFDS3vyf58rBeV05TO:Iv1C9dZ8w71ZACkFDS3vyf58rBeV05TO","tlshash":"9054d6a9a590117c6f27aa7597ce5ad8f23ce6719c018de8f20160094fc3ff923a7617","first_seen":"2026-06-01T14:26:05.604735Z","last_seen":"2026-06-01T14:38:08.579928Z","times_seen":4,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/platform/dev/config.js?1780323937945","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:37.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /platform/dev/config.js?1780323937945 HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 394\r\nlast-modified: Fri, 09 May 2025 16:34:57 GMT\r\netag: \"681e2eb1-18a\"\r\nexpires: Tue, 02 Jun 2026 02:25:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"515b1020697de1562fbf2921270d0c75","sha1":"acff9af2460d3448fd35621b6f23b66365e6f10b","sha256":"f211ecfc247b8897ad43d78e79db5c5c6c8275f8221d0429d5daf71b360d16a1","sha512":"47451e8ac4179ac6c5b7c51f25f3f68350314269b888e810ce6daa036406721d0160d5be1eea642e5e72a4756314bdc0f4fa3e1facd36c1e6d36f4ca15db670c","ssdeep":"","tlshash":"cde02b9331a5d70435f99569b1dd196294aab36248cc913ff069b8002e76a2584a6d21","first_seen":"2026-03-23T14:44:34.58466Z","last_seen":"2026-06-01T14:38:08.599026Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1963,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1963,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:44.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: zh\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:44 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":533,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9755d211b17ba8ab1390f14de8d1637a","sha1":"a61207d7f6a0cc4ea7368f9a56f71a49f9801b9c","sha256":"d1f8ab933cf86b905f4abe3ab4d019a8d5c81b71a30cebacd7465b26bd2be046","sha512":"45f6b619582557431465320421c85d50eeb128bcd4d7bb51ac7251bc4974fd8a6c499bfd9b0bcbaf3ab7c093a8875631eb9ad75792614631edc1ddf8881c34e7","ssdeep":"","tlshash":"6df0594e2578de6a0d0695db16c8bccd526d2643c660cc30865acf1c41f11b65b17808","first_seen":"2026-03-23T14:44:34.561021Z","last_seen":"2026-06-01T14:38:08.572261Z","times_seen":6,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/common/getAllSetting","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:38.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12024,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11702), with no line terminators","md5":"ba728b6a1f6676cf4826b19ae00763d4","sha1":"83127e57d63ef503d785ab7a58223e6330624892","sha256":"1bee7f2af37b910ace53e05c67c28a0e22cda705f26a21bc954a6627db4d188d","sha512":"297816148b8aa80ea266a252f9c49411f76045db59b5b5ba570a6fe82329e01f87fdfb4be32ea91665062172a78da923a208b961640c29b33b6b6616fcab0c83","ssdeep":"192:cAf9VOxuxQxo7R+IqAuc2iHZl4Htmrn+3BSk7AtFJtRaXy57i797x7D2s7k7uMNk:FuuHjcy+RJ4F4XydEBlD2muuMxWvdvFT","tlshash":"ea42665a25eddcf9c186afc170fa3e90e85c35d3e9459805b0daefadcca54b0ac4740a","first_seen":"2026-06-01T14:26:05.611252Z","last_seen":"2026-06-01T14:38:08.576735Z","times_seen":4,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/common/getCoinList","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:38.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20841,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (20825), with no line terminators","md5":"8b22b00184373385eaa969524332f010","sha1":"0019c67fe9c649a40c5a4efba83511ce16e92c16","sha256":"affd031f3630a1ee0e88ce53c23d28d4ae15a12657af1671bb17b8dc409c5259","sha512":"f5ce308c4d82be47d49a4441505d87e05629a0a7c1602b6e667d6a062fd3bb178d798104f141d26a99769ea6cad95ab65d9c3a1ab03cd018e52d424cc44d3614","ssdeep":"192:iXKTXpZXItXaEWXc5XTRSXVv0X+0X/2XzQSMgurwXPwYGK7/zvxYfnCKQnjiS5xg:7Imfy2o/YupuY","tlshash":"29922f95113894bcc57ad1d11eff7d16519d322fecc68a1a83ce8d998fe4ab0660af03","first_seen":"2026-06-01T14:26:05.6131Z","last_seen":"2026-06-01T14:26:05.6131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/platform/dev/favicon.ico","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:40.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /platform/dev/favicon.ico HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:40 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 69467\r\nlast-modified: Tue, 26 May 2026 22:21:14 GMT\r\netag: \"6a161cda-10f5b\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69467,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"c827da958c5fb623914748d94f92bc08","sha1":"ba2f8bdff38eb2dc989bcf9d090fa057c3efeeec","sha256":"950cf7a6b208ca5e5d7e162126ab8fd580701314a937de2c2d6430dcc88e0b3b","sha512":"a6e5ea7d1047640f798c44ff6cb44eeedd207d69037906a0d212d3eeb0304992e500b1a11170e8f4362928a7a6f942660abd2d3930fc838c03960457a6bf2c29","ssdeep":"1536:Ed7SZsz70mOaU2MvjM/NQYfCAv11pHsM1M1QVilOIadHI3L++Jrzegm:EdTz70muFLUND3FO1KIR3L+Wrqgm","tlshash":"f863f1c7a19bd435a8d3db76523d292cb4e308acfcfae56cc24c2b7514963c9a24c617","first_seen":"2026-06-01T14:26:05.615791Z","last_seen":"2026-06-01T14:38:08.5733Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2389,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/sol.png?2.0.1779829021312","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.204","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/sol.png?2.0.1779829021312 HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: DMRduOiDogAe18iLSucP40GFxbgNoOGQh62YicPYVNzO6Cb4vEVNRbVMUBaX+M3mSv2faUehR7XP8mciDzJToBa3aHrB0lvg\r\nx-amz-request-id: SC69M3J1T66G024S\r\nDate: Mon, 01 Jun 2026 14:25:45 GMT\r\nLast-Modified: Mon, 13 Nov 2023 03:50:00 GMT\r\nETag: \"ee89bcfca63b88fd463f28fb7edbadee\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1901\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1901,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee89bcfca63b88fd463f28fb7edbadee","sha1":"e519959e2a57b505820d4dba95aa6d99d3113c41","sha256":"4d4cedd0f67d386a8dda8333c82b599994f110887ee16fd38862d8c04ba6061d","sha512":"273f82fd285071a515fa9cdb0d7fb2a4cec70e73b93c26d803cb46cd819d459dc0a7addd61001eff57dbcf51d4a2081544aa43ec43ee3cf31d5ab07b6f8a1991","ssdeep":"","tlshash":"0a41e1aaf0e9f535f30487e9ca85446108ab42e3a541c261c3d1ff0ff8180d61d9daea","first_seen":"2024-04-18T22:13:30Z","last_seen":"2026-06-01T14:38:08.584123Z","times_seen":141,"resource_available":false,"data":null}},"time_used":1113,"timings":{"blocked":839,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.bing-x.vip/profile/upload/2026/05/27/hangqing1_20260527055529A006.jpg?2.0.1779829021312","fqdn":"adminapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.bing-x.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:42:39 GMT","end":"Mon, 24 Aug 2026 19:42:38 GMT"},"fingerprint":{"sha1":"28:67:45:E6:61:F1:B8:CC:D9:05:A0:01:71:15:68:C3:40:91:5B:FB","sha256":"13:FC:39:0A:11:4E:0F:FA:B1:85:1F:65:88:39:29:1C:41:21:75:79:CC:D7:B4:78:15:BF:3E:16:D0:94:C2:D8"}}},"request":{"raw":"GET /profile/upload/2026/05/27/hangqing1_20260527055529A006.jpg?2.0.1779829021312 HTTP/1.1\r\nHost: adminapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 163\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 26 May 2026 21:55:29 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 66, 2-bit colormap, non-interlaced","md5":"b8b4b7bcdbf8cca018a32d44c535a715","sha1":"2e0c071852a7620783adc2160460dc88bd174f86","sha256":"0132f4805cd5cab210a8238ae3fd2b27a99575658bfcda3ddd3a6fbeb708144d","sha512":"e1a0fe413c6da59cebc05149ff489f2dc7f90f0c828b09490c71188abc8751d8ba12a7a30ff41997aac215ce88db6cd7b6114686ef72d625d1b477221a611a70","ssdeep":"","tlshash":"cec08cd2b36e8c3a4a5d823b01a7a010f62879a0719ae5971e00a520aa2928486c2a17","first_seen":"2026-03-20T18:54:31.45328Z","last_seen":"2026-06-01T14:38:08.555684Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1574,"timings":{"blocked":-1,"dns":1,"connect":225,"send":0,"wait":883,"receive":222,"ssl":232},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"adminapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-9b7b0384.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:35.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-9b7b0384.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-188e2\"\r\nexpires: Tue, 02 Jun 2026 02:25:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100578,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"5ee4b0ad5ee8dbe4b6c150a099218942","sha1":"b8fcec1a789a68194b820045cb2e2b975269b2ce","sha256":"c0ed5703e342415181d7c40ae6c008d484a0ef1fa2887d360243b9004ee9a4ea","sha512":"c0b8adb7f2506eafbd81aa3ab348cdecfb15d86b2b9572c7f0847441574bf586af887f1928f7a08f8999735ba60c4dca39f3cb83575a83a991fcd0b71c7f647c","ssdeep":"1536:xjxqx6xBC1sERL+Dddj2+EynDiv6t/L3EEAdunJdLR1GQT:NII/3ERL+Dddbiv6t/L3EEPpT","tlshash":"23a35ec954061eff5dbe08846e5b5a0020691f975ccccca373be6e4a3bf9ce4625a718","first_seen":"2026-06-01T14:26:05.620724Z","last_seen":"2026-06-01T14:38:08.603933Z","times_seen":4,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hw.rangwodf.cc/1.js","fqdn":"hw.rangwodf.cc","domain":"rangwodf.cc","tld":"cc"},"ip":{"addr":"104.21.11.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:35.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rangwodf.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 May 2026 18:04:32 GMT","end":"Thu, 20 Aug 2026 19:02:54 GMT"},"fingerprint":{"sha1":"5A:63:60:AA:CF:E0:0B:02:9F:23:4E:6E:21:DA:F9:15:AC:CB:78:7C","sha256":"56:34:0F:B6:94:94:4A:81:93:56:DE:21:B2:3C:9B:CE:2C:BB:45:4C:9C:DF:3F:7C:5F:FB:81:26:E6:1A:B1:0C"}}},"request":{"raw":"GET /1.js HTTP/1.1\r\nHost: hw.rangwodf.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:25:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 13:20:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnrM43JuobhyMEqZ95Y8umgY1BrXNGUcKoXFCnMQD3wgetRvg8G1mm5nYwBDJ8ELtq0P8it6qU9uzXfwA3kSH72VVIAUzgFmfdqMufmt9ra%2BYDm86qvV%2FBAFKp4EFvMXoA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69ce6d3a-110e\"\r\ncontent-encoding: br\r\ncf-ray: a04ee3778dec0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4366,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ef762069ef4ea29f67e875a95a1bfba1","sha1":"7d6eb62282771edb04fe2bdecf30ef58692b33a8","sha256":"8850618e47785b4fe94ccd5978f98d846a9f82fd734dc685cf4a8e56958831c7","sha512":"a2f3fa65bea9e9e24e8deb8bc963dafff9b46e48e2e33d942d2b065e57ac820b8ca1fa4cf636063fc8a4a9aab3a4788ff2eba86a1ffcb5e222245d0e3b30231e","ssdeep":"48:bD3MlcaYje32enWULpu30EejF5huyFPFalMikhbHdF9Sd3h2muyFDM3ii7M/+0rg:bLMujzYpL5EOhT0529KaCDaVAHD8","tlshash":"c9917356212374160674337e5bd7874df725a0f331428689babcc2026ff9076d621ea8","first_seen":"2026-04-27T03:35:33.864259Z","last_seen":"2026-06-06T02:42:02.380075Z","times_seen":133,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":17,"dns":41,"connect":1,"send":0,"wait":390,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.bing-x.vip/profile/upload/2026/05/27/shouye1_20260527055455A004.jpg?2.0.1779829021312","fqdn":"adminapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.bing-x.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:42:39 GMT","end":"Mon, 24 Aug 2026 19:42:38 GMT"},"fingerprint":{"sha1":"28:67:45:E6:61:F1:B8:CC:D9:05:A0:01:71:15:68:C3:40:91:5B:FB","sha256":"13:FC:39:0A:11:4E:0F:FA:B1:85:1F:65:88:39:29:1C:41:21:75:79:CC:D7:B4:78:15:BF:3E:16:D0:94:C2:D8"}}},"request":{"raw":"GET /profile/upload/2026/05/27/shouye1_20260527055455A004.jpg?2.0.1779829021312 HTTP/1.1\r\nHost: adminapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 371\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 26 May 2026 21:54:55 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 66, 8-bit colormap, non-interlaced","md5":"a177ea7a7832f02d6d559c52f28f5914","sha1":"6a7bc633b39f396b29a487743847ae7ec1e5ab19","sha256":"1c5ac87cc0fe25d51a48e4a73b3c56256bc69353ff665b92d66099d5aca01f8d","sha512":"9bf18d6adf2cfd553ef4ad7e79bb2b31fd00c34aadb6dd86e63758184753d74696a6c60f74c2746e0b17003bddc96e2eb369a666d6c607d69c621f5a6a7d75ad","ssdeep":"","tlshash":"f1e06885c6a4fc31c10a8d7702666218dee6a4903562b31e9a64383a6ee0040898e039","first_seen":"2026-03-20T18:54:31.420353Z","last_seen":"2026-06-01T14:38:08.571418Z","times_seen":9,"resource_available":false,"data":null}},"time_used":697,"timings":{"blocked":-1,"dns":1,"connect":227,"send":0,"wait":229,"receive":0,"ssl":232},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"adminapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eth.png?2.0.1779829021312","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.204","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eth.png?2.0.1779829021312 HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: /jnRPMa5LGC2srzJDaAJVl6+jXeyL+AKy7xt6G7C2WYEbbBhvAYw2I9iJiACGUH9WYWgYQrnnzQFZc/2uas9OBmLp+QnSZaH\r\nx-amz-request-id: NA7HKXZ4ZDXQEE1M\r\nDate: Mon, 01 Jun 2026 14:25:44 GMT\r\nLast-Modified: Wed, 23 Nov 2022 07:24:47 GMT\r\nETag: \"d8a57c2396575a058eb68a6c0e32caef\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 616\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8a57c2396575a058eb68a6c0e32caef","sha1":"6495d31828866f3dbabc4aad7c77e02ff457cfb8","sha256":"b05bb6169930a076c463a15280a165560bd30972e2599f71ca62f44c023d666c","sha512":"7bf60d4e2903aa9f5be3e9268a3379da63feb8a312534d17c48686419a4fb52993c0c75b3686ca004145502266f58d9fa39cf59f19b7ab9dee6b503b877c3f58","ssdeep":"","tlshash":"f1f0a498354a14204804c77b1adead3a625329ecb7a6c0c5bfd91b0b79c48eb3cb55cd","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.035689Z","times_seen":494,"resource_available":false,"data":null}},"time_used":1421,"timings":{"blocked":561,"dns":18,"connect":254,"send":0,"wait":283,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ltc.png?2.0.1779829021312","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.204","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ltc.png?2.0.1779829021312 HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: YpkaUGuXk6k38sHogGfqo90MFdX96PxQ6oBxtd/wOhRA19K5OhLzcHMmo//q2W8DE3lSd3xO2AT750E2DjBenxuPpeunQK3W\r\nx-amz-request-id: NA7Q1A1N2NW0S0EH\r\nDate: Mon, 01 Jun 2026 14:25:44 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:04:10 GMT\r\nETag: \"b772bf1738628de70f1b9304c3d669ff\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 479\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":479,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b772bf1738628de70f1b9304c3d669ff","sha1":"db4b8dbd617a80bc2b7efcafc1b93064eb9a08bf","sha256":"9afa8bc92c0b1ed443e1b75a05bbac5399cc3a6c95863765b0d68959faf089ed","sha512":"2c54b078c370b434455c91a7a61454bc4cbc3ab611793db68dc733087aa507a280108d53977a1a47983a7161b52cea75d097c6f6bee8c529774fde42ad2c7516","ssdeep":"","tlshash":"f8f02e7df6441b35980ed634663e2cb430352fa2f245805a21dd1a547a574ea5945363","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-06-02T07:26:04.057052Z","times_seen":506,"resource_available":false,"data":null}},"time_used":1437,"timings":{"blocked":570,"dns":21,"connect":255,"send":0,"wait":276,"receive":0,"ssl":307},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/doge.png?2.0.1779829021312","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.204","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/doge.png?2.0.1779829021312 HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: TzUCkEcUUiS+H46hblni1dryWg7l1dRSHA+KF518M3SssbkwqjKxA1iHsKxwMjatnBk1DY+JwB6u84NVRAS0l6ovKn60z/tY\r\nx-amz-request-id: SC6A6XZ2P0Q21PQ7\r\nDate: Mon, 01 Jun 2026 14:25:45 GMT\r\nLast-Modified: Thu, 14 Nov 2024 02:02:53 GMT\r\nETag: \"85a9905c5ded19678ea5c2a0e3eb5b92\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 95699\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":95699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"85a9905c5ded19678ea5c2a0e3eb5b92","sha1":"758fd685e61ce28ddab9bcebfc60f62f1f2c150f","sha256":"83785fe3ab9c29b35a4884d93864038593ac03e6f605a5cb6bf9f7567e338abb","sha512":"a88cb74309d3fca02ce1fc32c81f0d78c387a4936c0f2924c603037201d14b26a5fa715723f40d01868d2a41361e26e2a2abb315e32332970ce15a186d8043dd","ssdeep":"1536:LEpYE8EXjfWGPQcIhSWQnGQBMDPla2zoW1:f","tlshash":"da9394d5b7e5e2e8f005e3fc872a98f53a632cfa3922c95893e52c15e95102d489dcd3","first_seen":"2024-12-15T14:02:10.456974Z","last_seen":"2026-06-02T07:26:04.026839Z","times_seen":314,"resource_available":false,"data":null}},"time_used":1628,"timings":{"blocked":842,"dns":0,"connect":0,"send":0,"wait":277,"receive":509,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: zh\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":532,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"882c7e56dac65c79972f463ddd96d157","sha1":"1a4e9d5623d9875727af26a511219113866e8fa9","sha256":"793b8110166b364f649b49f9ebf1dda277f2586c66dcb3b6a5701dcaa40ca0a5","sha512":"7e0e81867b1d36531a259147fff4ee0e1702f7a0b0e00690a32eb865678eb112202f53ce2379ade3cf609a7da31716905bb19967c008f4c6d1b900736a5b43af","ssdeep":"","tlshash":"c9f0591b197c8eb90d094ac769cc7cc9865e2647d7218d34d5aacf2e45f11b71f1b504","first_seen":"2026-06-01T14:26:05.629137Z","last_seen":"2026-06-01T14:38:08.608837Z","times_seen":4,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: zh\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":533,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9755d211b17ba8ab1390f14de8d1637a","sha1":"a61207d7f6a0cc4ea7368f9a56f71a49f9801b9c","sha256":"d1f8ab933cf86b905f4abe3ab4d019a8d5c81b71a30cebacd7465b26bd2be046","sha512":"45f6b619582557431465320421c85d50eeb128bcd4d7bb51ac7251bc4974fd8a6c499bfd9b0bcbaf3ab7c093a8875631eb9ad75792614631edc1ddf8881c34e7","ssdeep":"","tlshash":"6df0594e2578de6a0d0695db16c8bccd526d2643c660cc30865acf1c41f11b65b17808","first_seen":"2026-03-23T14:44:34.561021Z","last_seen":"2026-06-01T14:38:08.572261Z","times_seen":6,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/charting_library/charting_library.min.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:35.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65424d1a-2a6b\"\r\nexpires: Tue, 02 Jun 2026 02:25:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-06T23:47:44.161826Z","times_seen":997,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/resource/images/light/kefu.svg","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /resource/images/light/kefu.svg HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Feb 2026 09:52:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699ad1f3-54a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e724d7ab7843c3085eecc6ca2f2bf45","sha1":"08fb02f6059fec2137bac5b3b2cf2c62acdfc798","sha256":"df985f79874337c4aaa5a582d93e80f71639af38e0877a277a3179d39e379740","sha512":"5b87c4dbc7e1499fe1531f1d3a38706b48174565eec3fc62dce651bd3fdc882b3e80ad3a0ab60890f1b2d77a287994de8f2bbe2553855d9a18ffce0b46d6c869","ssdeep":"","tlshash":"51218a3f031586aed1c0af9887c2590c173ce222f0b545d877535b665c14abb95bcd72","first_seen":"2025-09-14T16:18:45.645426Z","last_seen":"2026-06-01T14:38:08.562875Z","times_seen":18,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.bing-x.vip/profile/upload/2026/05/27/shouye_20260527055545A007.jpg?2.0.1779829021312","fqdn":"adminapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.bing-x.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:42:39 GMT","end":"Mon, 24 Aug 2026 19:42:38 GMT"},"fingerprint":{"sha1":"28:67:45:E6:61:F1:B8:CC:D9:05:A0:01:71:15:68:C3:40:91:5B:FB","sha256":"13:FC:39:0A:11:4E:0F:FA:B1:85:1F:65:88:39:29:1C:41:21:75:79:CC:D7:B4:78:15:BF:3E:16:D0:94:C2:D8"}}},"request":{"raw":"GET /profile/upload/2026/05/27/shouye_20260527055545A007.jpg?2.0.1779829021312 HTTP/1.1\r\nHost: adminapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 370\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 26 May 2026 21:55:45 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":370,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 66, 8-bit colormap, non-interlaced","md5":"76c8d7f2a238d3d66e8512157cd81c7b","sha1":"bfc09cfb34538ade2d463fe238127441d4543912","sha256":"466ff03e40ec53473da8a0189af765a689d92364c16ae8fc0f63a5feee8dc288","sha512":"6d0bc5077a6a47d5c3aa0dbb4bc95c768389f656f1f7f8743427123248bae06b9ab67ed9e8272f7ccca3d2dc874a7e7b1723ea05da7326426572cfd3fec5ac33","ssdeep":"","tlshash":"3be0601f062adc2fd01d09b38bff32e0fc4042152190a4033caa3d30bd06086080c705","first_seen":"2026-03-01T01:24:12.593306Z","last_seen":"2026-06-01T14:38:08.585064Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1574,"timings":{"blocked":-1,"dns":1,"connect":241,"send":0,"wait":826,"receive":222,"ssl":283},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"adminapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/resource/fonts/Arial.ttf","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:36.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.bing-x.top/assets/index-951a0f61.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-06-06T23:47:44.198419Z","times_seen":1328,"resource_available":false,"data":null}},"time_used":2714,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":992,"receive":1722,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-328c454b.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:39.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-328c454b.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-3bdb\"\r\nexpires: Tue, 02 Jun 2026 02:25:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15323,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15314)","md5":"013724237ac09f0da9477a8548d762fd","sha1":"8f923d37201aa9e8f6bd0e9b62f100b31895501c","sha256":"cc136a26bb75cd798eaa63f8ceb0ce1e743f12ba0ee3189d3315c9acd579259a","sha512":"d90e5949410e25e4dc85646038a5a4d99532f0afce5bec5cd3cb00b7c19efe59f2c338657bebad64a9d8bb872b06a8b1014cab3923861e48da2f41afd294a84e","ssdeep":"384:NtLlV9Ies7tvGiPo6MNbaeD1PgFoxbfifIoWYlSAPCr9qqOecHXCg135M:PLIG4MUYYoxbfGcNOecHXCg13a","tlshash":"9962c799f80a9a3df577a4a104cd0400720e3fda500d99a3b5fe7d877796ef8b70a614","first_seen":"2026-06-01T14:26:05.600415Z","last_seen":"2026-06-01T14:38:08.531665Z","times_seen":4,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-cdb3ac80.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:40.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-cdb3ac80.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 772\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\netag: \"6a16091d-304\"\r\nexpires: Tue, 02 Jun 2026 02:25:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":772,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"a6ba866cf924e5a24932051934006e3e","sha1":"d8cdff401b25449b77704423eb6ff678c4b8545d","sha256":"f298d076759de8e8165a85b79c31d6aa46cc9db4a9b08d82dc1c9c4c7710848c","sha512":"8b5175a4e08f719d9d4f4d9ab7dafc093ce31448f430f4158eca53b959a52d5cc832d9a27a2fff5d2fcf215ba6dc2aebb9640a6573958932bec90e886867a615","ssdeep":"","tlshash":"4801d0f9fc0dcebb1f62068002a1360114092fddfa1419f298877e661be4950d7de72d","first_seen":"2026-04-08T17:19:47.548453Z","last_seen":"2026-06-01T14:38:08.534133Z","times_seen":9,"resource_available":true,"data":null}},"time_used":2565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/common/getAllSetting","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: zh\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12024,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11702), with no line terminators","md5":"ba728b6a1f6676cf4826b19ae00763d4","sha1":"83127e57d63ef503d785ab7a58223e6330624892","sha256":"1bee7f2af37b910ace53e05c67c28a0e22cda705f26a21bc954a6627db4d188d","sha512":"297816148b8aa80ea266a252f9c49411f76045db59b5b5ba570a6fe82329e01f87fdfb4be32ea91665062172a78da923a208b961640c29b33b6b6616fcab0c83","ssdeep":"192:cAf9VOxuxQxo7R+IqAuc2iHZl4Htmrn+3BSk7AtFJtRaXy57i797x7D2s7k7uMNk:FuuHjcy+RJ4F4XydEBlD2muuMxWvdvFT","tlshash":"ea42665a25eddcf9c186afc170fa3e90e85c35d3e9459805b0daefadcca54b0ac4740a","first_seen":"2026-06-01T14:26:05.611252Z","last_seen":"2026-06-01T14:38:08.576735Z","times_seen":4,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/resource/images/light/notice.png","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:44.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /resource/images/light/notice.png HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 536\r\nlast-modified: Tue, 12 Aug 2025 22:46:38 GMT\r\netag: \"689bc44e-218\"\r\nexpires: Wed, 01 Jul 2026 14:25:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":536,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 19, 8-bit/color RGBA, non-interlaced","md5":"9fcbca8b435fbfaf017365293aefb833","sha1":"b294a558c6e3049919fe1659f1e1450a00037506","sha256":"449b0ce49226d926da6e5fe36b2676129ec7d5defb06e6bc69d037e5573ae0ea","sha512":"8e15ffcad907dda438f0deb6aa650a0ffa80c2bc5d199685f8630fc628bd0f410b77baa26f6592dc3d93695ac3e99a2ab64e088dfc6985d0e9b68add588172b5","ssdeep":"","tlshash":"11f0755636380e2ccdef5a3e355a4110d823f3a0ce009d806544267dcc1f08422b40c3","first_seen":"2026-03-23T14:44:34.625538Z","last_seen":"2026-06-01T14:38:08.602267Z","times_seen":6,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.bing-x.vip/ws/327e578e-b88d-4c22-ae8c-04ef4ec45439","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:38.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"GET /ws/327e578e-b88d-4c22-ae8c-04ef4ec45439 HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.bing-x.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: yrqgBqNCUIWhYjWoWaSnyQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Mon, 01 Jun 2026 14:25:39 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://m.bing-x.top\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: X1bOGZUd0Hc6TvzY52jVlJxJq8c=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":2109,"timings":{"blocked":-1,"dns":704,"connect":935,"send":0,"wait":232,"receive":0,"ssl":939},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/common/getMt5Amount?coin=xau","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:39.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:39 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"116d5742482cf83be756a6a87d70c547","sha1":"ff05c7317efe749150dc9068b4c6557bea86b5ab","sha256":"2c260d314b9a64e4d91e3205506d1b9cdfc6072512da4e6c5c2cc727953f5d5e","sha512":"711a3d3712c4df4c403c1d0b04da3ed988549efebe6c887d18b5f46f504feab05eae175e206ae93d1b7a3421fabfda5021b076a678422ed31408ed2a913a08e2","ssdeep":"","tlshash":"fa9002a51c188342a88710a5990a564400243960262493484c5e912580c81622050858","first_seen":"2026-06-01T14:26:05.638054Z","last_seen":"2026-06-01T14:26:05.638054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-49d11ba8.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:40.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-49d11ba8.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-121f\"\r\nexpires: Tue, 02 Jun 2026 02:25:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4639,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4636)","md5":"2347f9fdf2d78cdf64310d094372d451","sha1":"f723fb619488160e39661185757652b41410a506","sha256":"507f9242bf6d24e643488a86fc69e7da988af3415100812678f63f15b8e6ed30","sha512":"d18e455547f19efc422df5f112381ec76356186110c5802f75ebd10edce8cf1a3f77df1468075f5d72b4583a10f1d89bad58dc96702f3e437de5449f614e0249","ssdeep":"96:bY5uPNL4w9NvYs29nqCwW8+ih+Yw+GvuU0AjtfOt3hrwr33YHcRB+Tj9:bYgPNL4w9tYscqCw1hlw+auQZ21hrm3g","tlshash":"bea1b64db80389bea977144448580421615d3bfeb26c44f6f7bdad4a37b5eb9e354320","first_seen":"2026-06-01T14:26:05.639382Z","last_seen":"2026-06-01T14:38:08.532947Z","times_seen":4,"resource_available":true,"data":null}},"time_used":2566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.bing-x.vip/profile/upload/2026/05/27/zichang_20260527055833A013.jpg?2.0.1779829021312","fqdn":"adminapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.bing-x.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:42:39 GMT","end":"Mon, 24 Aug 2026 19:42:38 GMT"},"fingerprint":{"sha1":"28:67:45:E6:61:F1:B8:CC:D9:05:A0:01:71:15:68:C3:40:91:5B:FB","sha256":"13:FC:39:0A:11:4E:0F:FA:B1:85:1F:65:88:39:29:1C:41:21:75:79:CC:D7:B4:78:15:BF:3E:16:D0:94:C2:D8"}}},"request":{"raw":"GET /profile/upload/2026/05/27/zichang_20260527055833A013.jpg?2.0.1779829021312 HTTP/1.1\r\nHost: adminapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 378\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 26 May 2026 21:58:33 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":378,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 66, 8-bit colormap, non-interlaced","md5":"50dfd52cf7762963aee6d96ff4d0caad","sha1":"079a5a9370250a7951be5913a935ab8d5bfaafa7","sha256":"2a1c765233cf7ee3c7c7c71dd85abd39320f4f4409591465fe0feab70ce9a2e5","sha512":"3376c1af602bd7097e43f1dd1f6a19dcbad2c316e549dfe8c147093311ff934470e755801a0ba4b80380e0ed7a2afc1bf6635358d92fd0bdf40a394987badd9b","ssdeep":"","tlshash":"c8e0c091b10c0c1fda0504370b7b71f0383ca17d3918c7b9a9edc024319c04988a3617","first_seen":"2026-03-20T18:54:31.43892Z","last_seen":"2026-06-01T14:38:08.566202Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1559,"timings":{"blocked":454,"dns":0,"connect":0,"send":0,"wait":883,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"adminapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/vendor-4b39a398.css","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:35.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/vendor-4b39a398.css HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-16c35\"\r\nexpires: Tue, 02 Jun 2026 02:25:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93237,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"2491919d901ad15e82d6c1245fb28968","sha1":"166501022e953ff7bf709e96198c76d4578676de","sha256":"4b39a398237e9aaae03327bd9216047be19b6587a469195ed9160b96c9b5a819","sha512":"c538de42b89cda2c728d4b43d017565e1ac244b948c4dedf116cff1b0d085f16948fbb5d42b798ab020ac7dc3fd8ac2e56ecd365b07edac5e1d25d08edcb73b9","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Bb:BnNIClDsIxuVS8tb","tlshash":"bb93d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-03T16:32:00.309427Z","last_seen":"2026-06-04T04:33:14.445183Z","times_seen":199,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/vendor-93b7ce71.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:36.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/vendor-93b7ce71.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-e27fb\"\r\nexpires: Tue, 02 Jun 2026 02:25:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":927739,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ea6d61bdac00a5a9b70630a439f9c029","sha1":"dd1947a855f3bb73ca80b534606754669df40b32","sha256":"7012e144ef983e007990b06b5f63c9bd37403f9d3c40d8643b3639db42720cf7","sha512":"8bdf209e95db0bc6276398fd63959a3d5d5da41719b18fe82fb55524b8790b9a2a164a24ee50e1de54d979ec027c713cc81be61a6baa08192cb04bc78753eadf","ssdeep":"12288:TAT1O3FcXC8WEQhh+X8sxNsRJywe1/z2ZBGxIU1KF/W966OMG77t5Ck:TAT1fyC1X8XRJyweFz2XRfF/W966OMg/","tlshash":"d91529c97692f06147ab24e240bb0006f3396e59740e84a4f16d98eb7d79d89d2b7f3c","first_seen":"2026-06-01T14:26:05.643336Z","last_seen":"2026-06-01T14:38:08.55893Z","times_seen":6,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-bc011be9.css","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:38.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\netag: \"6a16091d-18d\"\r\nexpires: Tue, 02 Jun 2026 02:25:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-06T02:42:02.411177Z","times_seen":706,"resource_available":false,"data":null}},"time_used":1921,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1919,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/filters-1023b067.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:40.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/filters-1023b067.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-c06\"\r\nexpires: Tue, 02 Jun 2026 02:25:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3077)","md5":"7393d8569c563c9bbc02b498457a4dc5","sha1":"f504f04d85eb0b7df52ce9f91fdd118e6e9a357d","sha256":"362babc41043a3dc910bf48506816387449e58fa12cb9ca0d0d5e4c7924fd7af","sha512":"883dde7f4071f38a423ae97b47c53b54a2e7a360940d6f5f3d4ae72a3587471d5f50e9163a4c71f12aa01d3bfeb66c7adb5b8aa905bcdd3ea3a4c009ec897fe3","ssdeep":"","tlshash":"415145fdfcd3a13356ea6df940288510728ebe20686e0a4df55bd0465933888e07f778","first_seen":"2026-06-01T14:26:05.584037Z","last_seen":"2026-06-01T14:38:08.581182Z","times_seen":4,"resource_available":true,"data":null}},"time_used":2566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.bing-x.vip/profile/upload/2026/05/27/jiaoyi1_20260527055614A009.jpg?2.0.1779829021312","fqdn":"adminapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.bing-x.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:42:39 GMT","end":"Mon, 24 Aug 2026 19:42:38 GMT"},"fingerprint":{"sha1":"28:67:45:E6:61:F1:B8:CC:D9:05:A0:01:71:15:68:C3:40:91:5B:FB","sha256":"13:FC:39:0A:11:4E:0F:FA:B1:85:1F:65:88:39:29:1C:41:21:75:79:CC:D7:B4:78:15:BF:3E:16:D0:94:C2:D8"}}},"request":{"raw":"GET /profile/upload/2026/05/27/jiaoyi1_20260527055614A009.jpg?2.0.1779829021312 HTTP/1.1\r\nHost: adminapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 999\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 26 May 2026 21:56:14 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":999,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 66, 8-bit colormap, non-interlaced","md5":"2d85ed1d56e6476bfa4b9bcb98ce60d1","sha1":"e0c9762bead782dabde01495863f8050788aa1e3","sha256":"3fb57883875b9fae6fb3fb10ad2d0350acddb6b3273eee0b14833cacc4977686","sha512":"f728a030417a27330e58670318734e709c12e1e23e9e13f7487b6eaf3fdb8ad50e1e15f30c04d8b360992246e83d59b1b5778deab7b385e605193c716893248d","ssdeep":"","tlshash":"741198ced919781d804804236083a18975f7b65e610dd1a278f482703339445dd66a1d","first_seen":"2026-03-20T18:54:31.438057Z","last_seen":"2026-06-01T14:38:08.565213Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1569,"timings":{"blocked":-1,"dns":0,"connect":222,"send":0,"wait":883,"receive":222,"ssl":230},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"adminapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:44 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-219ec309.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:40.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-219ec309.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 508\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\netag: \"6a16091d-1fc\"\r\nexpires: Tue, 02 Jun 2026 02:25:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (507)","md5":"1f0019e83ccfbbcdd965ea604aa2967f","sha1":"5b4286c2b0028fc385319d073ffc93a72dfc4501","sha256":"7e27efeb86ec5c3b395dbb1db2b0b88775fa8d83269a225f66436af49ae6d7c8","sha512":"de4a264e41991826b70200e8deb38f9eca46972dce0cf2a375508fa94df43be846e563a07cf59103b4d6e5e48a84a20cd03cac88e0f7508a13b3fb82556218e8","ssdeep":"","tlshash":"40f00e7fbd6ac0b22fb384e8a1731820ba1c1b4a3b54c4d4c4871e148b388f3e12e224","first_seen":"2026-06-01T14:26:05.58163Z","last_seen":"2026-06-01T14:38:08.596398Z","times_seen":4,"resource_available":true,"data":null}},"time_used":2358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.bing-x.vip/profile/upload/2026/05/27/hangqing_20260527055526A005.jpg?2.0.1779829021312","fqdn":"adminapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.bing-x.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:42:39 GMT","end":"Mon, 24 Aug 2026 19:42:38 GMT"},"fingerprint":{"sha1":"28:67:45:E6:61:F1:B8:CC:D9:05:A0:01:71:15:68:C3:40:91:5B:FB","sha256":"13:FC:39:0A:11:4E:0F:FA:B1:85:1F:65:88:39:29:1C:41:21:75:79:CC:D7:B4:78:15:BF:3E:16:D0:94:C2:D8"}}},"request":{"raw":"GET /profile/upload/2026/05/27/hangqing_20260527055526A005.jpg?2.0.1779829021312 HTTP/1.1\r\nHost: adminapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 163\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 26 May 2026 21:55:26 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 66, 2-bit colormap, non-interlaced","md5":"f9c581c0b54eb904d68fb84be8e7bbfe","sha1":"919e390683d103e5f645116805625c7f7239cc6d","sha256":"3f3b2ce1086ad39bf3af8be018651bf3edbd44584d951bff5306ee51ca82145a","sha512":"4eb1f161abcc6cf171e3d3ae95174d4036db815c19e57766eff71cfb446a0a6454edd933f8857a920b0b82c6d74dd55f14a26ff64ec31f5eb87996ec32b8c083","ssdeep":"","tlshash":"e0c08cd3776e8cb74a5d823b01a7a1a4f629b4a031d5e5472e40a120aa282848682617","first_seen":"2026-03-01T01:24:12.632568Z","last_seen":"2026-06-01T14:38:08.607269Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1358,"timings":{"blocked":21,"dns":0,"connect":233,"send":0,"wait":816,"receive":14,"ssl":273},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"adminapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adminapi.bing-x.vip/profile/upload/2026/05/27/zichang1_20260527055831A012.jpg?2.0.1779829021312","fqdn":"adminapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adminapi.bing-x.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:42:39 GMT","end":"Mon, 24 Aug 2026 19:42:38 GMT"},"fingerprint":{"sha1":"28:67:45:E6:61:F1:B8:CC:D9:05:A0:01:71:15:68:C3:40:91:5B:FB","sha256":"13:FC:39:0A:11:4E:0F:FA:B1:85:1F:65:88:39:29:1C:41:21:75:79:CC:D7:B4:78:15:BF:3E:16:D0:94:C2:D8"}}},"request":{"raw":"GET /profile/upload/2026/05/27/zichang1_20260527055831A012.jpg?2.0.1779829021312 HTTP/1.1\r\nHost: adminapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 379\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 26 May 2026 21:58:31 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":379,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 66, 8-bit colormap, non-interlaced","md5":"6b4ff09ea48ab17f96e1c88fb098b676","sha1":"f38cbdaae7260c0e492bc34e8a10fa8a686f75d4","sha256":"7e5e36ecb666cf4e31d61da05ab1044c411e57f949d6309e36fca63a3425e57d","sha512":"624ea95ad590596b6dba77a0e6f8cb935e643e171e3299aae2a820cd30a08670aa48ca3c79977251f8b255dc0ee5d7d9c4871b3b076bc8b0039d911c22acca85","ssdeep":"","tlshash":"13e0f1cb5398c861d6ed40424047f6684b6536b152cc72221101723ee3b84248460993","first_seen":"2026-03-01T01:24:12.572723Z","last_seen":"2026-06-01T14:38:08.601404Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1349,"timings":{"blocked":451,"dns":0,"connect":0,"send":0,"wait":884,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"adminapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/currencyItem-eb9b6d04.css","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:38.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/currencyItem-eb9b6d04.css HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-b40\"\r\nexpires: Tue, 02 Jun 2026 02:25:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2880,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2879)","md5":"413e26b7057e9dd3b9d260c3ace08108","sha1":"3225da101b6592ad5ab4cada9d4920c4b91f53e3","sha256":"eb9b6d048a157120e1949c645b3574732b6922854889e8563c4d6501c31e57d2","sha512":"dcdc25c8264323b3d085117aac98333aaad872f42c03d2611520df2a0fc6525d50c1dbaa3ebdc7f2293b8b6ba71540395f817bdcf8c1d670b3dd24e1a37add72","ssdeep":"","tlshash":"b9512d5493190374f937c4c76fb40509e8a46f61f04b8ae8fc8f112f5d5b3a75a30a25","first_seen":"2026-03-23T14:44:34.526692Z","last_seen":"2026-06-01T14:38:08.599828Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1946,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1946,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/currencyItem-7760150c.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:38.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/currencyItem-7760150c.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-4b6\"\r\nexpires: Tue, 02 Jun 2026 02:25:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"a8e3f24ab997016fcbc69a608e743ba1","sha1":"c6d11d83311ce5966db58d4a7a445df51eb9681f","sha256":"df0cae98ff43d01f26a19d4536960c6f364b7ee0a5351d91972e79af16d7d086","sha512":"a57cbb140c4dd43755db2a95152e6ded76837939ab16d1d1bc0e0de8d974db88e466f067933d64fbe7e2d0cb94e6eb2d2bd53bb98da1c0e8f5c8e4e4d5974b1a","ssdeep":"","tlshash":"7c21df9aa912c7b1cabf90a285bd5414170d7bda700181c5ebee148a3b875fcd738a31","first_seen":"2026-06-01T14:26:05.653101Z","last_seen":"2026-06-01T14:38:08.546505Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1938,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bnb.png?2.0.1779829021312","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.204","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bnb.png?2.0.1779829021312 HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: tr1ibbxrrpFX2drIAuWEcxyLRnKACGmk/Ef27aW304qLKSy5EMWkAFOAFqkrdR4W2UE2yL0jafYd75lqgNGhjphTiid3utd/\r\nx-amz-request-id: NA7HYJP02VS6BJKB\r\nDate: Mon, 01 Jun 2026 14:25:44 GMT\r\nLast-Modified: Mon, 10 Jan 2022 15:02:55 GMT\r\nETag: \"bed74791845ecaea0b78be9b10c690f6\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1015\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bed74791845ecaea0b78be9b10c690f6","sha1":"ca96e3d4056d851ed301eeb4a2adf8e0103b8c4a","sha256":"7a938ed34bf0bbd6dba92c49cc3911052777ac55306abee47300bc36b0e6aedc","sha512":"cefe77f1b27c043db212b67fd228a6a208b5e63f079ccfedec269fae9bfe964c9be8b423737c3e16d0f112237808a623d101f4bc9e6f5b039e13747251db50f0","ssdeep":"","tlshash":"20110ea4730cd2511e0cd35a7b29dcb97652b4e6d782910015c6250aafa4aff1c70fcb","first_seen":"2024-01-11T12:12:53Z","last_seen":"2026-06-01T14:38:08.594515Z","times_seen":247,"resource_available":false,"data":null}},"time_used":1439,"timings":{"blocked":566,"dns":21,"connect":262,"send":0,"wait":285,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/resource/fonts/DINOT-Medium.otf","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.bing-x.top/assets/index-951a0f61.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-11d88\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-06-06T23:47:44.188483Z","times_seen":960,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/common/getAllSetting","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-3dd01f9a.css","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:38.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-3dd01f9a.css HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-1230\"\r\nexpires: Tue, 02 Jun 2026 02:25:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4656,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4655)","md5":"16f672406beb4924c1e88cd51b5b2094","sha1":"3c5dc4bda0ba2829567e89e4ca6cf03ef66a1143","sha256":"3dd01f9ad09d4a49306b111ff1fc6702ab76e007768c1701703ce9d45f58a5c5","sha512":"810c8610c5ea1ff9898a18a139c228689de24442c026021c4263f6a6c52b03bc3cac51960e51f6f21ec3a574654a11f78cd89e88c33211a3372159e71e364e1b","ssdeep":"48:DUBElfMEX2JNOFfmod66DxIdXuCAfOFfuP7M9oYUOFfqVnFfWWGmplZTo6kQaQ2l:H1FXuswi+Xldkj12fyQ9/","tlshash":"4da1fe18f6490038ad33c38b7e558a09a274bb72f0979ed8ba6721594d9f1db2373253","first_seen":"2026-03-23T14:44:34.55172Z","last_seen":"2026-06-01T14:38:08.605447Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1916,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1916,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/currencyItem-7760150c.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:40.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/currencyItem-7760150c.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-4b6\"\r\nexpires: Tue, 02 Jun 2026 02:25:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"a8e3f24ab997016fcbc69a608e743ba1","sha1":"c6d11d83311ce5966db58d4a7a445df51eb9681f","sha256":"df0cae98ff43d01f26a19d4536960c6f364b7ee0a5351d91972e79af16d7d086","sha512":"a57cbb140c4dd43755db2a95152e6ded76837939ab16d1d1bc0e0de8d974db88e466f067933d64fbe7e2d0cb94e6eb2d2bd53bb98da1c0e8f5c8e4e4d5974b1a","ssdeep":"","tlshash":"7c21df9aa912c7b1cabf90a285bd5414170d7bda700181c5ebee148a3b875fcd738a31","first_seen":"2026-06-01T14:26:05.653101Z","last_seen":"2026-06-01T14:38:08.546505Z","times_seen":4,"resource_available":true,"data":null}},"time_used":2566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/resource/images/light/bg.png","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /resource/images/light/bg.png HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.bing-x.top/assets/index-a444c2e2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Jul 2025 19:16:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68891e20-2a8d4\"\r\nexpires: Wed, 01 Jul 2026 14:25:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1125 x 319, 8-bit/color RGBA, non-interlaced","md5":"30356cc21e6821f9a6098e53e62477f7","sha1":"91b14deb154312d6e0802c1d1ea43bb776391d76","sha256":"ed1a5cd6439a19192ec41188c74ccd27134207aa886d0bc4fc2c177d3d3b15d2","sha512":"7effc74d2a979519e13171231b1c9d5fa2655d097a380b9f6a988002e9ad5305cdbf6e94710165d37e0d7994f7c1ef35b730142aef8802de17b936f2c16e00e1","ssdeep":"3072:NU1ozwOcZbJuOakfFWJsPxHPynIYgYN/j0a/5fSBl/+s/5OlycH:NeZb3akk+ZHPUIYNxFxfAGsxYZH","tlshash":"32041217460a554bccafc6b5ee89efe00ccc7628b8a3dd3e9120dc89592d31f7a256c5","first_seen":"2026-03-23T14:44:34.559955Z","last_seen":"2026-06-01T14:38:08.570406Z","times_seen":6,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-cdb3ac80.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:38.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-cdb3ac80.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 772\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\netag: \"6a16091d-304\"\r\nexpires: Tue, 02 Jun 2026 02:25:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":772,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"a6ba866cf924e5a24932051934006e3e","sha1":"d8cdff401b25449b77704423eb6ff678c4b8545d","sha256":"f298d076759de8e8165a85b79c31d6aa46cc9db4a9b08d82dc1c9c4c7710848c","sha512":"8b5175a4e08f719d9d4f4d9ab7dafc093ce31448f430f4158eca53b959a52d5cc832d9a27a2fff5d2fcf215ba6dc2aebb9640a6573958932bec90e886867a615","ssdeep":"","tlshash":"4801d0f9fc0dcebb1f62068002a1360114092fddfa1419f298877e661be4950d7de72d","first_seen":"2026-04-08T17:19:47.548453Z","last_seen":"2026-06-01T14:38:08.534133Z","times_seen":9,"resource_available":true,"data":null}},"time_used":1941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1941,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/vendor-93b7ce71.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:37.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/vendor-93b7ce71.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-e27fb\"\r\nexpires: Tue, 02 Jun 2026 02:25:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":927739,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ea6d61bdac00a5a9b70630a439f9c029","sha1":"dd1947a855f3bb73ca80b534606754669df40b32","sha256":"7012e144ef983e007990b06b5f63c9bd37403f9d3c40d8643b3639db42720cf7","sha512":"8bdf209e95db0bc6276398fd63959a3d5d5da41719b18fe82fb55524b8790b9a2a164a24ee50e1de54d979ec027c713cc81be61a6baa08192cb04bc78753eadf","ssdeep":"12288:TAT1O3FcXC8WEQhh+X8sxNsRJywe1/z2ZBGxIU1KF/W966OMG77t5Ck:TAT1fyC1X8XRJyweFz2XRfF/W966OMg/","tlshash":"d91529c97692f06147ab24e240bb0006f3396e59740e84a4f16d98eb7d79d89d2b7f3c","first_seen":"2026-06-01T14:26:05.643336Z","last_seen":"2026-06-01T14:38:08.55893Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1576,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/common/getCoinList","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:37.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":1292,"timings":{"blocked":527,"dns":57,"connect":233,"send":0,"wait":229,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/common/getMt5Amount?coin=xag","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:39.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:39 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"373b35ffc4ca06a90944d992371b9763","sha1":"2b3a5f5d385c0046b2417504d9642fb596edb191","sha256":"5400a6e946c0c94faa86164ad0f258a84abb134089fdfdbf413a90e5d7ef87b9","sha512":"ed7a6185801f0c2ded4fe4fa0180a95517deaad140597aff2d32239855bdbb4a28be0759af37197c517b96f49310865ec40ce075e1c169aeeb24185a2a5dcefb","ssdeep":"","tlshash":"e89002566c5c8242e88300a99506160404283160272492884c59513580882622440958","first_seen":"2026-06-01T14:26:05.659956Z","last_seen":"2026-06-01T14:26:05.659956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/platform/dev/logo.png","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:40.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /platform/dev/logo.png HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 29 May 2026 18:24:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a19d9ef-1287bd\"\r\nexpires: Wed, 01 Jul 2026 14:25:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1214397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGB, non-interlaced","md5":"88a56fc9487cb92bc675430f0cc7c674","sha1":"374be7fd804e28439c45c3fe0772d0b922d9c1bf","sha256":"72f2408dd6285faf533c0a5ac05e75aa37f3c1d95c2ac679f7c06f1d0e50345a","sha512":"2f5477d17857573c3b1497298f1514326e3e9573202ea90c7d64e710caaac37a10b1db37f6773236a1804a936f5973e572f5959cd40ab3035ef749ce61122ed3","ssdeep":"24576:AYHMPQ1i6wOUa4P0LnR9Uit/aRLLQ8bNXO4R:pHzi6wmtrXUitCNx3R","tlshash":"092533fa1699e2e1dd0f93b54e8900245fe201244bf4b1fb5f2d5abde241e441c2e6dd","first_seen":"2026-06-01T14:26:05.661399Z","last_seen":"2026-06-01T14:38:08.547589Z","times_seen":4,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/crypto/XTVCLEVER--big.svg?2.0.1779829021312","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /crypto/XTVCLEVER--big.svg?2.0.1779829021312 HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: br\r\netag: W/\"129927b0095957fab8d950552b559a42\"\r\nlast-modified: Tue, 22 Nov 2022 13:38:18 GMT\r\nx-amz-id-2: sKAkQpZMpZnQJEMyz5jbaPnYlN3x2rnpgWcirszs6CPr6YnLyNBAfYXC3EBinN43kiS8OU42G9E=\r\nx-amz-request-id: SRTHEW6MA0T5B9CE\r\nx-amz-meta-hash: 129927b0095957fab8d950552b559a42\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.55\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 06/01/2026 14:25:43\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 7723215e7edd5e7d447477f2a713fd14\r\ncdn-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":380,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (380), with no line terminators","md5":"129927b0095957fab8d950552b559a42","sha1":"e5f6114046afef5cff9751c52f8d95b7a6edfb86","sha256":"3140c3a1092155d0d6aebb3a0684d4dfd15e19b4bea27a059ab3a6f5731f5362","sha512":"b5924f446d3ef3b7d4f992dba4d9c2301122027d21dca301754dfcf24ea162cb8dfd4d51b0fcb1ba8cbd9f34f7cdca70ef6ae95074bf0c8e693ca03766f2a806","ssdeep":"","tlshash":"2ce068caba4c035c2c0283b04ffc326311bf60cdd698038c758062a9724d7dfaca0e94","first_seen":"2026-03-23T14:44:34.53234Z","last_seen":"2026-06-01T14:38:08.561615Z","times_seen":8,"resource_available":false,"data":null}},"time_used":706,"timings":{"blocked":-1,"dns":64,"connect":1,"send":0,"wait":136,"receive":0,"ssl":505},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-01T14:25:34.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:35 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 30 May 2026 12:53:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1addbf-15fe\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5630,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"7c72d51a3208a830479fc63ddea8a054","sha1":"39f405164c4a8af881be0489c53af1b9a4a84ee1","sha256":"52b426ca3aee7fcbd9873db575c5be237af48bc929c9419766f09505a5864603","sha512":"019d94ad9c1f31484178d511a58496b8eb7a7944924d6117d26c99406f4785bdc909b7eaaf1805799100071fa75098960dd956e11a8376e0718bb64eefddca19","ssdeep":"96:Tr82LbBxVb5yKuc670bBxZ+r6TCZydHRH/g42mUsGKAiowGpuB1niHyiHqH/fV:TFfBxxL67iBxZKZCxfZ2nfD3bpuB1nii","tlshash":"4dc174b36db0d81a2392952bead7f0045f615493820a9c08b5cc90fd8fd1fe588ebb71","first_seen":"2026-06-01T14:26:05.664344Z","last_seen":"2026-06-01T14:38:08.575049Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1233,"timings":{"blocked":508,"dns":66,"connect":216,"send":0,"wait":216,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/assets/index-49d11ba8.js","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:38.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /assets/index-49d11ba8.js HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 May 2026 20:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a16091d-121f\"\r\nexpires: Tue, 02 Jun 2026 02:25:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4639,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4636)","md5":"2347f9fdf2d78cdf64310d094372d451","sha1":"f723fb619488160e39661185757652b41410a506","sha256":"507f9242bf6d24e643488a86fc69e7da988af3415100812678f63f15b8e6ed30","sha512":"d18e455547f19efc422df5f112381ec76356186110c5802f75ebd10edce8cf1a3f77df1468075f5d72b4583a10f1d89bad58dc96702f3e437de5449f614e0249","ssdeep":"96:bY5uPNL4w9NvYs29nqCwW8+ih+Yw+GvuU0AjtfOt3hrwr33YHcRB+Tj9:bYgPNL4w9tYscqCw1hlw+auQZ21hrm3g","tlshash":"bea1b64db80389bea977144448580421615d3bfeb26c44f6f7bdad4a37b5eb9e354320","first_seen":"2026-06-01T14:26:05.639382Z","last_seen":"2026-06-01T14:38:08.532947Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1941,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/common/type/defi_activity_type","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:40.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:40 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.bing-x.vip/api/common/type/defi_activity_type","fqdn":"webapi.bing-x.vip","domain":"bing-x.vip","tld":"vip"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:41.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.bing-x.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 19:45:18 GMT","end":"Mon, 24 Aug 2026 19:45:17 GMT"},"fingerprint":{"sha1":"5B:C5:EC:9E:EF:85:6E:FF:1E:FF:7A:1A:06:B0:04:BD:02:BD:6B:FA","sha256":"49:B7:94:D6:46:EB:67:17:FA:8D:7E:EE:9D:3F:4D:5C:19:6D:EF:4B:06:7D:87:7B:39:FA:9E:A8:F4:69:1E:42"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.bing-x.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: zh\r\nlang: zh\r\nOrigin: https://m.bing-x.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:41 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://m.bing-x.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-06-04T04:33:14.419392Z","times_seen":666,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"webapi.bing-x.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.bing-x.top/resource/images/light/avatar.png","fqdn":"m.bing-x.top","domain":"bing-x.top","tld":"top"},"ip":{"addr":"206.119.87.64","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.bing-x.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 09:18:12 GMT","end":"Wed, 26 Aug 2026 09:18:11 GMT"},"fingerprint":{"sha1":"05:08:6F:3D:03:29:B4:29:61:2A:4C:0D:64:F7:98:D0:02:F6:BF:20","sha256":"61:65:F9:96:BF:74:B4:F2:10:BC:DC:C6:C2:3C:97:68:A0:A2:1F:E8:E6:6D:6D:56:4E:E0:4B:CF:03:4B:1F:A7"}}},"request":{"raw":"GET /resource/images/light/avatar.png HTTP/1.1\r\nHost: m.bing-x.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 22 Feb 2026 10:06:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699ad512-22ce\"\r\nexpires: Wed, 01 Jul 2026 14:25:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"ce1a2d47601842de82bbabee8ccf6491","sha1":"87ebe0e98b0398a2d114fa062dbdf4e467a6d9ed","sha256":"322c1360671579187b47acd9e687207ae318a07d274f01bb28a3c24b6a1bf56c","sha512":"647cb2c505086d206af692ff753d50265d1b7a084dbd1d55d8f6f564247773ba14713bb169648f33226a1340d80b6a92b2eca219a4f93bc3e0c1b722b2ea3665","ssdeep":"192:YyzLbVvcTHknJrTMFkfI/3YYxHJ1Dt5uSn4+2D5i/xnlTcSUJal90hgZ8:YyzLtcTyxMJvtfDtxnP2EplEfhT","tlshash":"4b02cfe37e8a964eccd23894bf427798a9c531257fc1f217280e56b6dede83e1c42190","first_seen":"2025-09-14T16:18:45.715204Z","last_seen":"2026-06-01T14:38:08.577608Z","times_seen":16,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"m.bing-x.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xrp.png?2.0.1779829021312","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.159.204","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.bing-x.top/","date":"2026-06-01T14:25:43.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xrp.png?2.0.1779829021312 HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: luOcxThex49DxwdRYeflTIqJKGQDVFbgGi84ga50WVjEx8KYOV3v05KbI3AJVuo7epkU/ywu98DxL0O3rnUNhBzpK7Ffwyij\r\nx-amz-request-id: NA7T8F3PXG91JBGZ\r\nDate: Mon, 01 Jun 2026 14:25:44 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:27:13 GMT\r\nETag: \"b4651cc9032d4aa180b49d44dee9f6df\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 857\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":857,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b4651cc9032d4aa180b49d44dee9f6df","sha1":"ad2c09017920248932ad46e869c10ff7ddfb613c","sha256":"9fd7f3b81a4dfa790611dd504160cf34d71387f0cb1c760f577cac2c063be9f3","sha512":"95db416bf9d681fd53f367d3a2a3858a2d8c9c51ef3bce7432140c84c48f30566e24baa9a954abda1daf7df3ba771f016f4a7ccdf5fe017f099b36b2acb37e39","ssdeep":"","tlshash":"e211c01df4ba6b39f60552e017f47424b2b2ab4d2602d09865386ea0fc794aecdbc0c7","first_seen":"2023-07-01T20:42:20Z","last_seen":"2026-06-01T14:38:08.582132Z","times_seen":226,"resource_available":false,"data":null}},"time_used":1462,"timings":{"blocked":569,"dns":19,"connect":255,"send":0,"wait":306,"receive":0,"ssl":309},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}