{"report_id":"418f10c0-3b58-49e0-86c1-f99d3fa93ba2","version":0,"status":"done","tags":[],"date":"2026-10-14T19:45:12Z","url":{"schema":"http","addr":"bitmart-cex.cc/pc","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/#/","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"title":"BitMart","dom":{"size":138734,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20966)","md5":"942eaf3eda212bd8c8741722f4fbad4e","sha1":"1ae89e658c494e99cf0bf203cb477212f4f9b9bf","sha256":"0ff1eea633d4084a081b05a98ffee9cd7a106eb8456d0fcbd57a4df8951c8ae0","sha512":"25adcf669ee46078b05408a808f6171ebdf91d9b8919708c2fc8cc58b0ea1f26bba38580896d4ffab7ae9f22a6d238e862f67883985e918a03f340096f931511","ssdeep":"1536:QZiEZiWZ/LSNYeUefebDeyh8eUefebDeyhVeUefebDeyhLeUefebDeyhM/vg7ndx:q8Y/IIM/IIl/II7/IIeVP895DUHw","tlshash":"79d32c357911111a807bc5e9e9e23e0a3666f20f85d95f95f8bd538a0fa3fb076020e7","dom_hash":"domhashad566b04d905f86a5031e254d42ba505","first_seen":"2026-10-14T19:46:00.634229Z","last_seen":"2026-10-14T19:46:00.634229Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bitmart-cex.cc/pc","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-18T19:45:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.bdfsghhxsa.com","ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"domain_registered":"2026-10-10","domain_rank":0,"first_seen":"2026-10-14T11:59:20.051914Z","last_seen":"2026-10-14T11:59:20.051914Z","alert_count":32,"request_count":16,"received_data":91873,"sent_data":8542,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bitmart-cex.cc","ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-08","domain_rank":0,"first_seen":"2026-10-14T11:59:20.039764Z","last_seen":"2026-10-14T11:59:20.039764Z","alert_count":144,"request_count":24,"received_data":5127121,"sent_data":11825,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"555.trade777trust777socket.com","ip":{"addr":"47.89.248.173","port":3000,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"domain_registered":"2024-04-24","domain_rank":0,"first_seen":"2025-11-01T13:23:34.936218Z","last_seen":"2026-10-14T11:59:20.973155Z","alert_count":0,"request_count":1,"received_data":182,"sent_data":599,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"heliosmetals.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-05-25","domain_rank":0,"first_seen":"2026-05-07T21:42:18.725313Z","last_seen":"2026-10-14T11:59:20.917702Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":540,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/tradeview/charting_library/charting_library.min.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b40dcdd638760f8051c1beb4963fd0c","sha1":"e24b3841ff36373ce7366055eca40e479886dd4f","sha256":"283ed6337112f2cae0dcb51a26326dad7e09c03b8699dbad441cf7c5ba35965c","sha512":"43e207cc06b5b0d6e9a5fc24052822e16538feed91d07f06f70d8f546fbfeeb63687f707ff0f2d54b57a9d6286bc2fed211b6a83fb604dc86227c9914c7a6c37","ssdeep":"192:9faWSo7kjFU8oBelr6lw2rfnzKIQPlaF1iJ7K+Ei/ISJhvHIheu5Ph3Ffa5:0WS2kjFU8oIlD2rfn2I5iNK+5/ISJhvB","tlshash":"93224058ed247c720acb40f0427f190f8239e678d84944ed3c84e6ec59fd44a6a6fbb8","size":10607,"data":"","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-10-14T19:46:35.816892Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/app.910a45c96e244f868dad.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c7ccc67c81b74fe1ded1d6cec3aa819","sha1":"19d8f386c442061b528606ab1074d2d0ff4f0e6f","sha256":"5c21c516ed2544ca675454a4b88832483079dee3a89a99ba91e77c56ade0c3c1","sha512":"1325b34b799f2f2c982cf223e4312a39c6f45db5ba231052a9c061aeae648e2f81d6752daeb0b3f27dd0599ddbe96e47514dd29f7b1a06ea65fd62429f47a956","ssdeep":"12288:69RGKk4gUlos2GReSc+Ne2w/dynMlRPGNpiEj7aoIfDxEMoFwD6UcV9Fz4ZconS+:6KKdosex2BQ","tlshash":"eae45d7b11ce59a819428a06b28b7644f5699c83fb53f8f048ddc52a33f0759c53aef2","size":703674,"data":"","first_seen":"2026-10-14T11:59:33.849342Z","last_seen":"2026-10-14T19:46:35.866612Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50dee4a056525588809a91f2f627b2aa","sha1":"898a0f4a28556b1d1ef0619d2e5869091d310f59","sha256":"d59315ddcbdb7de0bfe142f0127b4eb91409d1c41c5f5740a52f4e60941bc769","sha512":"479ed47e1c4a5ce1dab0a188c7d7588ef2a00817bdf711aa2762dd9a81bd4b75c45634d55a6bba6655b914f5a9e8603a30a1c43588382a58d1b163d598d53840","ssdeep":"","tlshash":"b24144fa1460c06944a3e068167f17492910265f8ea67800fd2d60c87f0e92e77f2adf","size":2212,"data":"","first_seen":"2026-10-14T11:59:33.947877Z","last_seen":"2026-10-14T19:46:36.006409Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1962a7486b145de3ccabdc6d4f933590","sha1":"6cf19e4674f3768f1b10ea93f678eb35fcea9b80","sha256":"24e1eb73cf929e2b0f110af6be9d9b1ec4a0210dffe163bbf567690d2a793dce","sha512":"4f6ef663ae67927c72986d8bf110afc41ee9b87847dac04bbf14203cd859fba6f43031b8638d86e69fcd156b0e7b7db09f32015160f8d5936396b5e34cfeb3fe","ssdeep":"","tlshash":"e701e385fc42747296863228723bfa0751621225148464335dfdc37fef31d87811368c","size":840,"data":"","first_seen":"2026-10-14T11:59:33.950871Z","last_seen":"2026-10-14T19:46:36.007877Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11c8a1aff94d50bd2f7e031f902bb914","sha1":"d47a01dad21d096b9c9a8a39966a5d80e58a1b6c","sha256":"3343e00546a2373402e0a80a7b32b60ebda9e66828712820df19ef5ae0cf1517","sha512":"f42cb58470d10793f82588c64bb4caa49b4f33b5ddb704036bb08a407cdc84835b0a8645e92759df3683721c440f98a609db4678e99f195fa6faaa52faab983c","ssdeep":"","tlshash":"f8f0a47918e760311f192b0032139ed83a655845f50cb88af58cc0c0bfa8993807f9fd","size":623,"data":"","first_seen":"2026-06-11T00:02:04.011469Z","last_seen":"2026-10-14T19:46:36.021579Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c356bdc37296546bfde0acb3327ce305","sha1":"e5073d9fcd7820ee78cad1dbec5ecb5943bbb349","sha256":"bac505309e80d1ba3bf808a88e92ff2352bca9414e499ac8c68534d5dd276d33","sha512":"ad67bbf55927bc36b37f161724ef1a164b06711b5b2e86ee18add9bd7e613c73606fa62823635253587640de1915a236c226b0008361dec7fd426e57285ee52e","ssdeep":"192:Nge0jAoNzmAHSq7KhHcA1rQ1S2ZOAZXR0zA1GCL1G9U4jUs+f1gmUiC+xUv+4R5T:Nge0jAoNzmAHZWNASZNVziC924HAAVMY","tlshash":"c252a5da7611302142936032e87f2407913aba16688a903c71c9edde5efdb1deb17f39","size":13418,"data":"","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-10-14T19:46:35.887335Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/jquery-3.4.1.min.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-10-14T19:46:35.933647Z","times_seen":7567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/country.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"934ce1bc63cc0b533f1730f24ec99f60","sha1":"8baa171118f159aeb9262682c4ff7fc0beaa4e27","sha256":"0b8e59036da400724f03ac13e3e64733c41dbb8d5255331cae85f5642694154f","sha512":"ba86b99d3c5759bc1398a25c1425b0eb38fcacef2ae5dcec0c83cebf765a48609a0604b358a44713da9a43d3c20d7ee9d1b126be795c8ba6e88291da20fd6ed2","ssdeep":"768:MOede5L4arkPlqiTnrdkwYwUdQPdGp/P6zRlPLQ:SFDduB6zU","tlshash":"04130f1bd1aa8cb7a9bcc51af0b5b264f4445b2fc35116c738f8730d5fb2629011e6ba","size":44047,"data":"","first_seen":"2025-08-04T11:59:40.026527Z","last_seen":"2026-10-14T19:46:35.890173Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/#/","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fcaea4b8885ca5c1fb3ddd5c490da5c6","sha1":"35745f87b37210d992a9ed534a593ae500b7adaa","sha256":"934c2008743c36db746a9d6ebd9f1b84ff11477edc55fbf7b599bbfa687f7272","sha512":"65e3bda5b8bd909b2fed0a25e3d6d3d7d2984601de4a906783c783097fcd8902ea1c2fa05d33619126415bc5000a72e8459eb81c971a85e2ddb374f9fd9231aa","ssdeep":"","tlshash":"889002c520d965518ad321a061261a46615a04f914a48c5091589c56287303092695bc","size":54,"data":"","first_seen":"2023-04-12T08:25:39Z","last_seen":"2026-10-14T20:02:31.988873Z","times_seen":26679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffed8bcc0af9db588e19127393f38aca","sha1":"5d7c37579a895c795e3b99e538bc21acab7d810f","sha256":"8b8d3e2917ea726f9bef63e6d089db0d83d275bf909b3e93cd816f053a43fc0a","sha512":"70557f07558317fd46f1186df5a4df6b4d53fc65c09b316af37f4cd914248d12c6d6c66fb3ef88f88236f14739b30ee86d892baa70f025ee59c668c66fccdf6e","ssdeep":"192:x5C5b4QNokiNLw0mrZA3KoluxV68ksmZ15UPQ0wx9Z4ESjxLhFZvL:/G1gsr7idsirPCESjxLhP","tlshash":"c1127488f7e0b46243a370b4917f550fb2b52925658e41b8f260d8ea6cfd04d962bf7c","size":9697,"data":"","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-10-14T19:46:35.822288Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/vendor.16a3625760a790ae9d60.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9529208eb4ca8487bb2b5a8a135bb954","sha1":"ad0adb5d2efd0dd3cf22c9d1b9e975ff564391fd","sha256":"f730a63833a7ef99b434f68b8e4d2f926f435643c2e4d64e87693ea96a4b00c1","sha512":"38ea8ebd27359fd025244861e98e4acc44aa2801eb4a5f926b039f5defa1571e177541d67406e9b5bf35cf5f56d571ad99afd1f6488dafd3118984b603a8f92a","ssdeep":"49152:MH4KkoNRm5Pzk2JawX0BBL2JXzdUimRH2vDp:xLP0W7UpH2F","tlshash":"d5852b9d32c4b46247e321b5503f240ba3372958a80ac458ba75d4daacbd94e633ff7d","size":1786906,"data":"","first_seen":"2026-10-14T11:59:33.956794Z","last_seen":"2026-10-14T19:46:36.045806Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/#/","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50dee4a056525588809a91f2f627b2aa","sha1":"898a0f4a28556b1d1ef0619d2e5869091d310f59","sha256":"d59315ddcbdb7de0bfe142f0127b4eb91409d1c41c5f5740a52f4e60941bc769","sha512":"479ed47e1c4a5ce1dab0a188c7d7588ef2a00817bdf711aa2762dd9a81bd4b75c45634d55a6bba6655b914f5a9e8603a30a1c43588382a58d1b163d598d53840","ssdeep":"","tlshash":"b24144fa1460c06944a3e068167f17492910265f8ea67800fd2d60c87f0e92e77f2adf","size":2212,"data":"","first_seen":"2026-10-14T11:59:33.947877Z","last_seen":"2026-10-14T19:46:36.006409Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/#/","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1962a7486b145de3ccabdc6d4f933590","sha1":"6cf19e4674f3768f1b10ea93f678eb35fcea9b80","sha256":"24e1eb73cf929e2b0f110af6be9d9b1ec4a0210dffe163bbf567690d2a793dce","sha512":"4f6ef663ae67927c72986d8bf110afc41ee9b87847dac04bbf14203cd859fba6f43031b8638d86e69fcd156b0e7b7db09f32015160f8d5936396b5e34cfeb3fe","ssdeep":"","tlshash":"e701e385fc42747296863228723bfa0751621225148464335dfdc37fef31d87811368c","size":840,"data":"","first_seen":"2026-10-14T11:59:33.950871Z","last_seen":"2026-10-14T19:46:36.007877Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/#/","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11c8a1aff94d50bd2f7e031f902bb914","sha1":"d47a01dad21d096b9c9a8a39966a5d80e58a1b6c","sha256":"3343e00546a2373402e0a80a7b32b60ebda9e66828712820df19ef5ae0cf1517","sha512":"f42cb58470d10793f82588c64bb4caa49b4f33b5ddb704036bb08a407cdc84835b0a8645e92759df3683721c440f98a609db4678e99f195fa6faaa52faab983c","ssdeep":"","tlshash":"f8f0a47918e760311f192b0032139ed83a655845f50cb88af58cc0c0bfa8993807f9fd","size":623,"data":"","first_seen":"2026-06-11T00:02:04.011469Z","last_seen":"2026-10-14T19:46:36.021579Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/1.4b0b9334cfb6fc4691e3.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"98c46144546b8001600ad6da33fe135a","sha1":"2d9960671d0cb44ccdb8afa4c526214f51b15c06","sha256":"c2e6fb2a12803539b45eeb7007218cb35a2232e1af3a9d1c17549d13d0eda2fd","sha512":"a811ecbf2f7d4f968d118704f010148d7f69af3eb429c264f17b852c71ec19ebc76fac2189cafb8a37e8ebba494a9ed40d24f9b41e70679937a52ead2d9940df","ssdeep":"768:v1g4pOx27O8/L3bYeRyHYLufL1VlQRA1QObYp6i/gSDMBJkn:vS4pOx268D3V4H0OL1HWONi/gsMwn","tlshash":"6f134b0ab45bb66d8c3b4061562f2139a03a1fe8901ad1d3f63cd9849af4e39171fb7c","size":43242,"data":"","first_seen":"2026-10-14T11:59:33.886001Z","last_seen":"2026-10-14T19:46:35.96323Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/swiper.min.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"98d2e1c621c2f951ede456d131608c76","sha1":"e826d3417232c8dd7b234d1e53750710b52b34f3","sha256":"e1b64e3405e7630f429cc551f4922ef5ed9d775834d8f476aeae9e9f4916c439","sha512":"e57e88be238f0016ae43d2e8ed18a2d30c2b2753276c21dada3196ac63dd0081eadcf913b5e2ce5901d141fa58769664cf304c6c950c82588260e89a8906a7af","ssdeep":"1536:VL2qg0G1fVLJW4bU98IA9SK8FDliAfKrGny55T1s53V7gZxj8rvHgZsUOUBDBWqv:CpbUAxSqBohgZu7HgZsUOUFBWqjxJr","tlshash":"b6c3094eb390619510e36256529e9241a3b72849780ad0ac35b68cd7adbde4c13bfffc","size":122748,"data":"","first_seen":"2023-03-07T16:46:46Z","last_seen":"2026-10-14T19:46:35.823754Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/manifest.16cc368126d6dc11b55a.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"26ad2fe5fa4f26866fb89573b776ac60","sha1":"a08516dfd319b40b16b4d0b8c05ea1f7f7e746fd","sha256":"c12283bbc0451a8432720e7b0133944ecdd2e4a6b43c0f1da3654a0620ce127e","sha512":"388a03bd80ed65920a3636752d4be54081f9f94d7470b1f207c8c628c3225813cd4277f8e802c0dc8d09c4cde061083493532448851813cda62e2e8ceb1e594b","ssdeep":"","tlshash":"19611ba9776cbb6a5be20891852bda24b13d31013d9dcc91c2e8e1ea7834d819271de5","size":3275,"data":"","first_seen":"2026-10-14T11:59:33.898018Z","last_seen":"2026-10-14T19:46:35.950003Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/0.84fe4144e818082a55a4.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9588e98d2cc0a8e3207decc4f9fbdb6","sha1":"f8bf2607493efc26c0fef64fa5647674d18954ef","sha256":"35989f7701dff4342362428c6e5ea32504278728334a6fc1cfdd6fa5444c6333","sha512":"2f70da17b6a87c9489d26e5ef97e2dfc163d12f9137c3dd96ce122e0ba533e6128e3f2c02a95278e6b6b7df0f0588180411ba2a4cb420c49aa9a1a2124880f28","ssdeep":"3072:3W/6aAf0/S9ngzTVjtMhaYm7y3+Lymdim/yNK2k4FTe8K:3qCf0Kngv4g7A+Lfi8yMKRC","tlshash":"28545c19b143b679487a5060102f3129b0752ed96409d096f738dce6aef4eb9232ff7d","size":289565,"data":"","first_seen":"2026-10-14T11:59:33.879668Z","last_seen":"2026-10-14T19:46:35.877953Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"/","filename":"https://bitmart-cex.cc/pc/static/js/app.910a45c96e244f868dad.js","line_number":1,"column_number":499300}]},"http":[{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/wzpic/btc.png","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.998Z","timestamp":1792007035998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /wzpic/btc.png HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4460\r\nlast-modified: Thu, 30 Jun 2022 09:13:03 GMT\r\netag: \"62bd691f-116c\"\r\nexpires: Fri, 13 Nov 2026 19:43:56 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4460,"size_decoded":4757,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"9eb539141888680fff6af0fd28192cb6","sha1":"acb0616e046a9245bbbe5a103a7084aa84690143","sha256":"e1a52196ce78bb48c596194be187394057e3f8db03b2a314efbd358a9b1c0a46","sha512":"9a21f75879b30c9fb0adb138215d50e88cea6bad1fc7742ed866d21115330bed45a1a5d871e0918ab7c623f1cc309deb269bcb92cd4ead546dfad2bc509737db","ssdeep":"96:Wefn1ttzgLb0WBkw0JgfAsWEqgHcG5iU27QGmWCFCL:J1tZISnef4g8G5iU2N+s","tlshash":"bd911961ef9551fbabaa5a0e13fd0093e571ac7e5284da1528c7717f825afe10cf8d00","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-10-14T19:46:35.975219Z","times_seen":102,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/wzpic/sol.png","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:56.006Z","timestamp":1792007036006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /wzpic/sol.png HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 15133\r\nlast-modified: Sat, 11 May 2024 09:15:11 GMT\r\netag: \"663f371f-3b1d\"\r\nexpires: Fri, 13 Nov 2026 19:43:56 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15133,"size_decoded":15431,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"367f1436ee9b3610228944bd3fff5688","sha1":"53a3635989c5d1ef5f3e5c4fbf38c61c9dd9484c","sha256":"bdb5738b9fc51dc6c2fa4abf481cf26c772c1cdaf1db2501f7f8723afd7ef5f6","sha512":"4f189650a7c61be87eea1dac761a5d0065fe7c6f356f4b949ad4b22de9ce77aa09a0bef6a844d7df4c7eeb43ebd72f8a571d42290f52cd3d3785e744ea647b71","ssdeep":"192:WSlJknydbmXHNX8ELXgjuy263TxjpRXs6qaVlbgAg1wB6pDqcwtuWSnQYT+asefE:5InlB3LSo6qelUAg1OVBtuWSndTIeSNl","tlshash":"b062cf6a9c707e4c075479448e7c769ab31b028163d3dc8eecdee00ba8a25b48d9dcc7","first_seen":"2025-10-08T18:47:54.131475Z","last_seen":"2026-10-14T19:46:35.945134Z","times_seen":62,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-14T19:43:54.012Z","timestamp":1792007034012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/ HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 11 Oct 2026 17:25:13 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4IxO2ry4Mot2H0PbIl4SUBNxMOKlIT1kxztSJS0AGbF6SolgDDLGqqAV7bRZU07IApONswGkxm4E%2F2ZVfNa82640%2FQixHUZomm3OqDxGQlfz%2FV853aZeYhZEuwY%2BbHu1Lg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a4a9135a8e0a56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17401,"size_decoded":5413,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (956), with CRLF line terminators","md5":"c2f269500cd2b7d90bb41e47623612c5","sha1":"0bc6631c8b0b86861e9141c74e8e91b37066e37d","sha256":"4752f026713ed4a0dc1d392c76c321c1ad11424b21babf615497370cfa986d55","sha512":"1a38e8b026915af2632992308fa408693199193167505f2940ca9bc948af33927653fd3b184e600f5a5bd0da1a2f6511d264d6d1fe928b2c5088b2e06b87c953","ssdeep":"384:IMjvPhY2a3O5bDlxoFiMjvPhY2a3O5bDlxoFtj5BFuHqt5BAq+:IX07X0kj/FuH6Aq+","tlshash":"7d72d8136a00533605f341857773159de329a22b5712c428bebdd19c2fb4ad9d3bbbca","first_seen":"2026-10-14T11:59:33.909722Z","last_seen":"2026-10-14T19:46:35.883265Z","times_seen":5,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.485Z","timestamp":1792007034485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/tradeview/datafeeds/udf/dist/bundle.js HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-346a\"\r\nexpires: Wed, 14 Oct 2026 23:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nqfBHPnqOOqShFu9pig6Q1EuGVxnPuVmC8v0r%2B1Ux%2FtX5e76mLAkkjqkPdHK9mOBuz%2BQ5y%2FAMKz24h%2Bt4GxCOoX5SJYheVXCCBFtwOed66w3l9T2NDxdCuP26jnZdvKCFw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a4a9135d8e9556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13418,"size_decoded":5392,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13416), with CRLF line terminators","md5":"c356bdc37296546bfde0acb3327ce305","sha1":"e5073d9fcd7820ee78cad1dbec5ecb5943bbb349","sha256":"bac505309e80d1ba3bf808a88e92ff2352bca9414e499ac8c68534d5dd276d33","sha512":"ad67bbf55927bc36b37f161724ef1a164b06711b5b2e86ee18add9bd7e613c73606fa62823635253587640de1915a236c226b0008361dec7fd426e57285ee52e","ssdeep":"192:Nge0jAoNzmAHSq7KhHcA1rQ1S2ZOAZXR0zA1GCL1G9U4jUs+f1gmUiC+xUv+4R5T:Nge0jAoNzmAHZWNASZNVziC924HAAVMY","tlshash":"c252a5da7611302142936032e87f2407913aba16688a903c71c9edde5efdb1deb17f39","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-10-14T19:46:35.887335Z","times_seen":77,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/web/getParam?lang=en\u0026rtoken=cK4DM3454D","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.147Z","timestamp":1792007035147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /web/getParam?lang=en\u0026rtoken=cK4DM3454D HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitmart-cex.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\nset-cookie: think_var=en; path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"think_var","value":"en","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"think_var=en; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1490,"size_decoded":1797,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"13c72b7610322eab0658404121ab1e5c","sha1":"cb6b0bf076a255d9a9e27de9f14f4f0775d53b9b","sha256":"d16dba065ca6682068f301282c27fc63957a0eb9b949c416b5cd35b1a09e191e","sha512":"52db77ccd700096c1b93f960a379673ebdcdab893fda6f1d7f7d18d52d1ae17bbffd348cc07411e11f3ffecff1177dec3b1e9286e6455b0c040e1b56586039a4","ssdeep":"","tlshash":"84319c8835d80c3fe7c38959ac4b2655bbda799b14de1cc546acedf438c78d3884a813","first_seen":"2026-10-14T19:46:00.739262Z","last_seen":"2026-10-14T19:46:00.739262Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1338,"timings":{"blocked":-1,"dns":13,"connect":162,"send":0,"wait":187,"receive":0,"ssl":972},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/fonts/element-icons.535877f.woff","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.173Z","timestamp":1792007035173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/fonts/element-icons.535877f.woff HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/static/css/app.d4ba672a9ccb0b1965ddb0e9628b4c37.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:55 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\netag: \"6ac8ea70-6e28\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32UUQIX9wqmRDVm2n71p4I5g69WOeevSn5qWi6PQS4AJ32Rz4FmpL0xOsQNj0UXclyMUnDSkecXj5fE2I1kXeKDVwJ8AdO3C3ZqnDO%2FoRyK4l7bDKBQtzfZ0fnl%2BFw53Kw%3D%3D\"}]}\r\ncf-ray: a4a91361df9a56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28200,"size_decoded":28944,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-10-14T22:32:29.559492Z","times_seen":30484,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/credit.css","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.493Z","timestamp":1792007034493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/credit.css HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-486\"\r\nexpires: Wed, 14 Oct 2026 23:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7wsLxyHc5Ub69snrzuGOIqrMq98s%2FHMoKIzUJgS%2FLSBX6X7iK6sGzbSQNnnlfzwWEhbyncdt50HPr3vbjSgXf%2BWV6LvR0stNM253DQlXCfphDNTILEJ2ORJmoQpRCkSLg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a4a9135d9e9d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1158,"size_decoded":1352,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5a7fa046f781d26b95e54a677a8fb4b4","sha1":"1757d1022877d02cfcf9942d46ed6201878c6c73","sha256":"76d1d8567e8eb407f259585548ff5c0b3c3b9cf14cc6701f359b2d812493cd1b","sha512":"4b481baf5a408f3f70eec7f360412075b2a95363daf63ad1004ee29f671b6d3445cf71534e7f65c9de541253469d41c4ce9c4227b1902cd77baf31068845b116","ssdeep":"","tlshash":"0e21d02eba0e284adbe93ed23efc2a64de7e00ea15b342d0f298c154e1d2c1913745d5","first_seen":"2025-08-04T10:45:31.520242Z","last_seen":"2026-10-14T19:46:35.829493Z","times_seen":83,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/0.84fe4144e818082a55a4.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.988Z","timestamp":1792007034988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/js/0.84fe4144e818082a55a4.js HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-46b1d\"\r\nexpires: Wed, 14 Oct 2026 23:57:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27995\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxzz0KtGnqoTn6Y3z9Qls71yvM31qj8lnJDx29TXSgXcy4AWO6MppWTsNgS17Jb0k4QUrWD7Qv7MgHBDwXp67H6IAGYBYPV5BwqyXnToCS42h29iuSUOQAM7LsuGDeJFlg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a91360af6c56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":289565,"size_decoded":123565,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65516), with no line terminators","md5":"e9588e98d2cc0a8e3207decc4f9fbdb6","sha1":"f8bf2607493efc26c0fef64fa5647674d18954ef","sha256":"35989f7701dff4342362428c6e5ea32504278728334a6fc1cfdd6fa5444c6333","sha512":"2f70da17b6a87c9489d26e5ef97e2dfc163d12f9137c3dd96ce122e0ba533e6128e3f2c02a95278e6b6b7df0f0588180411ba2a4cb420c49aa9a1a2124880f28","ssdeep":"3072:3W/6aAf0/S9ngzTVjtMhaYm7y3+Lymdim/yNK2k4FTe8K:3qCf0Kngv4g7A+Lfi8yMKRC","tlshash":"28545c19b143b679487a5060102f3129b0752ed96409d096f738dce6aef4eb9232ff7d","first_seen":"2026-10-14T11:59:33.879668Z","last_seen":"2026-10-14T19:46:35.877953Z","times_seen":5,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://555.trade777trust777socket.com:3000/","fqdn":"555.trade777trust777socket.com","domain":"trade777trust777socket.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":3000,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.138Z","timestamp":1792007035138,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.trade777trust777socket.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 07:15:13 GMT","end":"Sun, 03 Jan 2027 07:15:12 GMT"},"fingerprint":{"sha1":"3D:1C:EB:5B:FB:31:6E:FE:55:58:21:E1:E6:15:40:28:E0:0F:E8:91","sha256":"4E:E6:60:20:FA:6B:00:CF:3E:D0:B7:AB:96:3D:72:8B:75:15:47:84:B0:38:FF:19:66:25:42:23:E4:7A:45:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 555.trade777trust777socket.com:3000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bitmart-cex.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: w1rxU7hzrAO9nhxastD5BA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: jg3dxeayVmZZ4Qz8KZS4RTriveA=\r\nServer: workerman/4.0.18\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":182,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":1630,"timings":{"blocked":-1,"dns":5,"connect":162,"send":0,"wait":325,"receive":0,"ssl":1138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/wzpic/aave.png","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:56.008Z","timestamp":1792007036008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /wzpic/aave.png HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 7463\r\nlast-modified: Thu, 30 Jun 2022 09:13:01 GMT\r\netag: \"62bd691d-1d27\"\r\nexpires: Fri, 13 Nov 2026 19:43:56 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7463,"size_decoded":7760,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"5cdd0aee69e8122fd5c09e5cdcd98624","sha1":"68ebafd85948ed3aaac87fb683aa655fdfaff4d3","sha256":"9ef23fac5df6aa17c2df63f9a9bd75116a079378ff33e407f6c17ff044738c23","sha512":"125f42ad5b32cafa0859d96226838798c7c5ed8fbb193bf0a698132415220ecbadca205521d858abbf31c56efa7e9681fe9b0ddefbb57021090ca32213f0dc06","ssdeep":"192:UP03OA6fWgKMO01wvKfgHwK+41cWvoRtjNPxrwo9hoWlA:80+A6f1NqvB31Ct1xrxhTW","tlshash":"27f19edd4fb240cefcbfe649c87720e67a04d211b78afa408bae7c96a990405c1a1d31","first_seen":"2023-10-28T09:52:36Z","last_seen":"2026-10-14T19:46:35.912579Z","times_seen":63,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/wzpic/trx.png","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:56.009Z","timestamp":1792007036009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /wzpic/trx.png HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 6495\r\nlast-modified: Thu, 30 Jun 2022 09:13:10 GMT\r\netag: \"62bd6926-195f\"\r\nexpires: Fri, 13 Nov 2026 19:43:56 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6495,"size_decoded":6792,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"53d1c2f9fe08b9e1876cfe48d8515b9a","sha1":"cdcf316d85014fa6ff4e3734abbb423d1059dd8c","sha256":"5a64c819fd826d8183b1eae37b023fe72fd41d0c0c38e0311131d934fd0840bd","sha512":"4690750a0d8bd06649658f8fd84eb75409177aca8ba881aed166a370c4c7a2bd2ab6d28473a4df334e218d24830c3bddadedb48a7846907c14859c64279eb713","ssdeep":"192:G8+yL4eaVKn8cDxhgtcnwDnAJ6NjKdsVTLMLasKPQ:R9dDn/DUDAJcTAOst","tlshash":"27d19eb96367e69aa9c6f5b99b39e6225f62ddd0dcca15f20e98820041f3040b5814ee","first_seen":"2023-05-06T07:16:23Z","last_seen":"2026-10-14T19:46:35.9234Z","times_seen":143,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/css/app.d4ba672a9ccb0b1965ddb0e9628b4c37.css","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.496Z","timestamp":1792007034496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/css/app.d4ba672a9ccb0b1965ddb0e9628b4c37.css HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-87b98\"\r\nexpires: Wed, 14 Oct 2026 23:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JvPmzYUlyaqChMDu2930Eaio7qaiDb%2BrVMKCrAyfZMF%2FD5k8M%2BG3TSZhCw2t84NmhkoiuMjFiTldzshhQghpvKVbUZOmcXLwQPErVTfuhLoiqxKQI6ptLNRVDn8D4v8z5w%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a4a9135d9ea056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":555928,"size_decoded":101546,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"ae00c9d0c8e783634d37f0bbd5abe7e0","sha1":"61e902deaee86a0d698e9052971a6800e5e2242a","sha256":"cc3b518345a0139c1001896da58ef7449daa94160b278c07380f85c1eea43f89","sha512":"76f0557590b62daec0d4398e9aa8783188cca600b1aa897a8171273c5fe217eb49d13cdb741ffec5e9bbc1c3b63f686ae4af41f9c6c555e8c829f8b355c55b7a","ssdeep":"12288:YHkE4SzkDggYOT60JRDKiyfpwo1OAPkuD336ya5hrCez0eTD:wkE4SzAggYOT60JQ1fpwo1OAPkuD336Z","tlshash":"8fc4d823971b120a612bce64a6d46bd96b14d363d02317fefa433819cf8759a237670f","first_seen":"2026-10-14T11:59:33.91988Z","last_seen":"2026-10-14T19:46:35.898463Z","times_seen":5,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/web/getParam?lang=en\u0026rtoken=ZvaBBcVeK06E8","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.153Z","timestamp":1792007035153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /web/getParam?lang=en\u0026rtoken=ZvaBBcVeK06E8 HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitmart-cex.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\nset-cookie: think_var=en; path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"think_var","value":"en","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"think_var=en; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1490,"size_decoded":1797,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"13c72b7610322eab0658404121ab1e5c","sha1":"cb6b0bf076a255d9a9e27de9f14f4f0775d53b9b","sha256":"d16dba065ca6682068f301282c27fc63957a0eb9b949c416b5cd35b1a09e191e","sha512":"52db77ccd700096c1b93f960a379673ebdcdab893fda6f1d7f7d18d52d1ae17bbffd348cc07411e11f3ffecff1177dec3b1e9286e6455b0c040e1b56586039a4","ssdeep":"","tlshash":"84319c8835d80c3fe7c38959ac4b2655bbda799b14de1cc546acedf438c78d3884a813","first_seen":"2026-10-14T19:46:00.739262Z","last_seen":"2026-10-14T19:46:00.739262Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1329,"timings":{"blocked":-1,"dns":7,"connect":162,"send":0,"wait":190,"receive":0,"ssl":968},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/wzpic/eth.png","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:56.000Z","timestamp":1792007036000,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /wzpic/eth.png HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 3516\r\nlast-modified: Thu, 30 Jun 2022 09:13:06 GMT\r\netag: \"62bd6922-dbc\"\r\nexpires: Fri, 13 Nov 2026 19:43:56 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3516,"size_decoded":3812,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"e1bc34d227baeb59b92475d8f7642b9c","sha1":"6f0c77064b9409b0a033281f1fc61479c90944b8","sha256":"44dc496a6f8f3214e47a8ac45adf6b81792de84f5f33f5257a0759865514c8e8","sha512":"f8f0069a89d9c9b957329b574485cbe5103c5af096ea10b1289e909c35de8d5cf14ac8b418366622bda20a887d49658d792772d090179efccd4aecc6c98a45ca","ssdeep":"","tlshash":"24716df2d915033083fab0719b0492dbeb64f74519c4a0698d9c8d2924b9e34b2d22bb","first_seen":"2023-10-28T09:52:36Z","last_seen":"2026-10-14T19:46:35.897273Z","times_seen":72,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/wzpic/xaut.png","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:56.011Z","timestamp":1792007036011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /wzpic/xaut.png HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 7688\r\nlast-modified: Wed, 15 May 2024 02:03:33 GMT\r\netag: \"664417f5-1e08\"\r\nexpires: Fri, 13 Nov 2026 19:43:56 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7688,"size_decoded":7985,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"2615bb8aeb247f2b56501d9b299ca398","sha1":"6f94dbc3a1df9b6a69ef9a9d3fcbe8bfb3665593","sha256":"6bdc89d90af3a27056a874c2906ae19ce5bcee9884334303031251e25a4a50f0","sha512":"71ab52b12c29407996836faf6d7eb0a1737ccc02665e11e3bb55e19517f58e646870830e0654dd6b83abe2b6af9b81ada71dcaf7a0b702ddcfcc41620db18b5d","ssdeep":"192:W/0Mq6bv4UW4Z+vp+3saH4xSznCf398CsN7aqOk:W/BTv4x4gvI3JYxSo3983N7aG","tlshash":"37f19f00c064231ac30246b6ab45ea87ecdcd27ce76b792f9479eb44a9d00afe983546","first_seen":"2025-03-05T16:19:54.140594Z","last_seen":"2026-10-14T19:46:35.993884Z","times_seen":1061,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-14T19:43:53.346Z","timestamp":1792007033346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:53 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlocation: https://bitmart-cex.cc/pc/\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p5IVRD5qavb%2FI0DQ%2Bib%2B6ON5%2BmwiQHNSFXkFQydD%2FH6nOU5PsWRBYJHVN1nV5%2FvaEngUJMQQ%2BWzVu1zpa%2BBrC%2FOcFzh5qAW9y5k27s6sQFr2uF%2FeIi8LiiGl4bPVj%2BEhHw%3D%3D\"}]}\r\npriority: u=0,i\r\ncf-ray: a4a913569d0f56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":7,"connect":22,"send":0,"wait":625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/tradeview/charting_library/charting_library.min.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.482Z","timestamp":1792007034482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/tradeview/charting_library/charting_library.min.js HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-296f\"\r\nexpires: Wed, 14 Oct 2026 23:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=520GHEaG8ytdj%2BLUQbQHc%2FerwcAGJKM%2FOq%2BoLIZ31SEoHUde1%2FATTFQn2xdEYVfbexsPiAXKt1D%2FcABFr5kjPLr6RHkDuURr7ic9ADv%2FoTHae15LC2aoWipWzWMTcPQICw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a4a9135d7e9256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10607,"size_decoded":4198,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10605), with CRLF line terminators","md5":"5b40dcdd638760f8051c1beb4963fd0c","sha1":"e24b3841ff36373ce7366055eca40e479886dd4f","sha256":"283ed6337112f2cae0dcb51a26326dad7e09c03b8699dbad441cf7c5ba35965c","sha512":"43e207cc06b5b0d6e9a5fc24052822e16538feed91d07f06f70d8f546fbfeeb63687f707ff0f2d54b57a9d6286bc2fed211b6a83fb604dc86227c9914c7a6c37","ssdeep":"192:9faWSo7kjFU8oBelr6lw2rfnzKIQPlaF1iJ7K+Ei/ISJhvHIheu5Ph3Ffa5:0WS2kjFU8oIlD2rfn2I5iNK+5/ISJhvB","tlshash":"93224058ed247c720acb40f0427f190f8239e678d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-10-14T19:46:35.816892Z","times_seen":90,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/country.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.489Z","timestamp":1792007034489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/country.js HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-ace1\"\r\nexpires: Wed, 14 Oct 2026 23:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c0ep1P5cWgkp9dUz9VUO9YkDxTN%2BfjNuzv2w3c%2BClwokjRWPKlsq1TEo9oqO%2BnG7sr3%2BaGPvCXXl9hq07PQ8sK%2BQq4sWDMG9Y1wr%2FmebbnhS7J0EdT8T%2FDRcDmPS3mgLtw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a4a9135d8e9a56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44257,"size_decoded":12421,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"934ce1bc63cc0b533f1730f24ec99f60","sha1":"8baa171118f159aeb9262682c4ff7fc0beaa4e27","sha256":"0b8e59036da400724f03ac13e3e64733c41dbb8d5255331cae85f5642694154f","sha512":"ba86b99d3c5759bc1398a25c1425b0eb38fcacef2ae5dcec0c83cebf765a48609a0604b358a44713da9a43d3c20d7ee9d1b126be795c8ba6e88291da20fd6ed2","ssdeep":"768:MOede5L4arkPlqiTnrdkwYwUdQPdGp/P6zRlPLQ:SFDduB6zU","tlshash":"04130f1bd1aa8cb7a9bcc51af0b5b264f4445b2fc35116c738f8730d5fb2629011e6ba","first_seen":"2025-08-04T11:59:40.026527Z","last_seen":"2026-10-14T19:46:35.890173Z","times_seen":62,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/img/bannerImg.c079820a.07144ed.png","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.130Z","timestamp":1792007035130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/img/bannerImg.c079820a.07144ed.png HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\netag: \"6ac8ea70-4d877\"\r\nexpires: Fri, 13 Nov 2026 11:57:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 27994\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kc35HgMmjM2eT7vv6Xu0KcnoqxinmaJS7QNCstPviOLKEoTt5ZJ3QTYj%2FJCU0AlGpE1MtO1g5c99PlgPYv8UD%2Bxyy%2BSIjIxzrXgKQLZeLa8jJFGN%2B9BLpslAtYQ4eBuo6Q%3D%3D\"}]}\r\ncf-ray: a4a913618f8e56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 317559\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":317559,"size_decoded":318352,"mime_type":"image/png","magic":"PNG image data, 834 x 586, 8-bit/color RGBA, non-interlaced","md5":"07144edaf476d4176c919cb1df1a9534","sha1":"72ea3e390cc0593204216f66a6f7c858da227915","sha256":"2a7f3a484b3fccdb68d6a4d9b224b546cdde59a3f8b3ab1ed7b89493aa608938","sha512":"9fe670a1bd4636331bd1af1df101f1260e7f0b0c4c2028acd1b4589888ca89bc878739d334c403ffe44e36311444684f6fea7d4f02cf77115097924c38b8ac45","ssdeep":"6144:0EvVt+4HNRXtg57dlhNUfOX2/Ybc6ux6HwEjlPmmWnLn8sCheG:3tjNRdg5RloAZux6/c7/geG","tlshash":"1864230d26ec8f837c451be77ebf103634b585248b54ed97cca259af9a92c630e46077","first_seen":"2025-10-08T18:47:54.169022Z","last_seen":"2026-10-14T19:46:35.811172Z","times_seen":32,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/web/getmarketList?lang=en\u0026rtoken=lEyfFhWu6oie\u0026id=1\u0026type=1","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.157Z","timestamp":1792007035157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /web/getmarketList?lang=en\u0026rtoken=lEyfFhWu6oie\u0026id=1\u0026type=1 HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitmart-cex.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\nset-cookie: think_var=en; path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"think_var","value":"en","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"think_var=en; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6345,"size_decoded":6652,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4c27516261eabda9903b1e72fb54c8be","sha1":"bdbb29f3ac92ed9af0d32e1a4b929e2ec9b15396","sha256":"fb2e9afbcb90a5a9359b7ebdbe1a09a6513c07a64d09e6c69483eb4334f4b4b7","sha512":"e2b72a2fc8ed5d641f4b07078ac4bf868ce4d8f36cd033be9888df9ab39c77ce8599dc41d4218cb54e319c28dec824d9f9fa0d427dc35f1ca70e3945bf5689f1","ssdeep":"96:mdeE9NLm/qia7reEowwwSaLbleEw/JJyieEKKFXeE79JeENneEIxUYeERldQ4kf5:mc0iRNw9eslVVLanEE4kOYFXT","tlshash":"abd1bd6a23d88db4a6768dd9d3cad834683f704d6dc18fc383ed9ca950d0b56b606b06","first_seen":"2026-10-14T19:46:01.039387Z","last_seen":"2026-10-14T19:46:01.039387Z","times_seen":1,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":3,"connect":162,"send":0,"wait":215,"receive":0,"ssl":327},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/wzpic/uni.png","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:56.002Z","timestamp":1792007036002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /wzpic/uni.png HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 7130\r\nlast-modified: Thu, 30 Jun 2022 09:13:10 GMT\r\netag: \"62bd6926-1bda\"\r\nexpires: Fri, 13 Nov 2026 19:43:56 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7130,"size_decoded":7427,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"31f17f13b53757a892502af9179f6bc2","sha1":"1db9427d6720bafe36824262466d2f75c55b637d","sha256":"2e8697588da2d88c23823b1c61813280ff82d59481019553719946e2b7260269","sha512":"b591743bd756e6019aff32d5e817948a6dc5544818b83df383f4a1cec447ae9b864ba86b61401a4f76c1ec907c1211e7f75ca1a45a2d49220a6bc75d4fb2f07a","ssdeep":"192:pDOYGPzaIfpNIreNg5HRBC9ocE/jPJJcc6pM644Y:2eo/uHbFRD6SMY","tlshash":"0ce19df0f63b540d4adc9e270ce424c11ae31559750334bfed8f099ee39340a0a94ad5","first_seen":"2023-10-28T09:52:36Z","last_seen":"2026-10-14T19:46:35.942324Z","times_seen":73,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/wzpic/fil.png","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:56.014Z","timestamp":1792007036014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /wzpic/fil.png HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4005\r\nlast-modified: Thu, 30 Jun 2022 09:13:06 GMT\r\netag: \"62bd6922-fa5\"\r\nexpires: Fri, 13 Nov 2026 19:43:56 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4005,"size_decoded":4301,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"4edc5dafe73f16af2629cfb1fd6cb4d5","sha1":"e5d6aeb9955a18693871b73a83577abdf64e5293","sha256":"586c85d6fd474cab3947b5f3e64c3fc76fb8620111231682106cc9abfdc5339a","sha512":"49d64c4278a861b60b1c0a0341a2e3b96f2988165d5c3a7deb779f8592d4242e8552669cdf9a9d9e9997d2f84f02470b926effcd5437343aee872c172a507e31","ssdeep":"","tlshash":"e4818f877f354c078c6ca096024e2b36d5bfa80264f4c8edbf6160828b5f5058f9d5dd","first_seen":"2023-10-28T09:52:36Z","last_seen":"2026-10-14T19:46:35.997413Z","times_seen":66,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.484Z","timestamp":1792007034484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/tradeview/datafeeds/udf/dist/polyfills.js HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-25e1\"\r\nexpires: Wed, 14 Oct 2026 23:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJN3mz5FnEwBI7XTRhgI5woZfPM%2Fp9dzw%2FNSFhObL68192LrlEmuOuhTxftTPxcEv8C81s%2BpoeMDidboRV8MEkl%2BWBsFnvK6lCi67TnnA7S5gT4ywXXFEt14uG09L4K4%2Fw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a4a9135d8e9456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9697,"size_decoded":4358,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9695), with CRLF line terminators","md5":"ffed8bcc0af9db588e19127393f38aca","sha1":"5d7c37579a895c795e3b99e538bc21acab7d810f","sha256":"8b8d3e2917ea726f9bef63e6d089db0d83d275bf909b3e93cd816f053a43fc0a","sha512":"70557f07558317fd46f1186df5a4df6b4d53fc65c09b316af37f4cd914248d12c6d6c66fb3ef88f88236f14739b30ee86d892baa70f025ee59c668c66fccdf6e","ssdeep":"192:x5C5b4QNokiNLw0mrZA3KoluxV68ksmZ15UPQ0wx9Z4ESjxLhFZvL:/G1gsr7idsirPCESjxLhP","tlshash":"c1127488f7e0b46243a370b4917f550fb2b52925658e41b8f260d8ea6cfd04d962bf7c","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-10-14T19:46:35.822288Z","times_seen":77,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/swiper.min.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.488Z","timestamp":1792007034488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/js/swiper.min.js HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-1df7c\"\r\nexpires: Wed, 14 Oct 2026 23:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OxlRafacuifBf85LpNDbZ0JopE8Q27FisCEqyh9QWML9q7F46nZpY4fyoW0ZZwMW4HD8OOIp39GBetEeaXOdbZ3xkfg5X2NO%2FMg730OMNahPuN%2BpAVo65WIBGW7t5jmvnw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a4a9135d8e9956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122748,"size_decoded":37431,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65264), with CRLF line terminators","md5":"98d2e1c621c2f951ede456d131608c76","sha1":"e826d3417232c8dd7b234d1e53750710b52b34f3","sha256":"e1b64e3405e7630f429cc551f4922ef5ed9d775834d8f476aeae9e9f4916c439","sha512":"e57e88be238f0016ae43d2e8ed18a2d30c2b2753276c21dada3196ac63dd0081eadcf913b5e2ce5901d141fa58769664cf304c6c950c82588260e89a8906a7af","ssdeep":"1536:VL2qg0G1fVLJW4bU98IA9SK8FDliAfKrGny55T1s53V7gZxj8rvHgZsUOUBDBWqv:CpbUAxSqBohgZu7HgZsUOUFBWqjxJr","tlshash":"b6c3094eb390619510e36256529e9241a3b72849780ad0ac35b68cd7adbde4c13bfffc","first_seen":"2023-03-07T16:46:46Z","last_seen":"2026-10-14T19:46:35.823754Z","times_seen":139,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/manifest.16cc368126d6dc11b55a.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.498Z","timestamp":1792007034498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/js/manifest.16cc368126d6dc11b55a.js HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-ccb\"\r\nexpires: Wed, 14 Oct 2026 23:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdKej8YfZzgWswsoKZCUygP5nKhwSYkgy9RcDDFUjD7I0dtmO4VzpDvD95IXwEWdydRKPMqDRQUro6nWA3o%2BVbcHHiHNM8ziTFEXQSLOF2Czi8Y%2BGqk4foTeN%2FDe6EZdlg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a9135d9ea556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3275,"size_decoded":2793,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3217)","md5":"26ad2fe5fa4f26866fb89573b776ac60","sha1":"a08516dfd319b40b16b4d0b8c05ea1f7f7e746fd","sha256":"c12283bbc0451a8432720e7b0133944ecdd2e4a6b43c0f1da3654a0620ce127e","sha512":"388a03bd80ed65920a3636752d4be54081f9f94d7470b1f207c8c628c3225813cd4277f8e802c0dc8d09c4cde061083493532448851813cda62e2e8ceb1e594b","ssdeep":"","tlshash":"19611ba9776cbb6a5be20891852bda24b13d31013d9dcc91c2e8e1ea7834d819271de5","first_seen":"2026-10-14T11:59:33.898018Z","last_seen":"2026-10-14T19:46:35.950003Z","times_seen":5,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/img/bg3.0733f40a.673c0c7.png","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.133Z","timestamp":1792007035133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/img/bg3.0733f40a.673c0c7.png HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\netag: \"6ac8ea70-3e4c7\"\r\nexpires: Fri, 13 Nov 2026 11:57:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 27994\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iZQWgp7vgK2zN4quF1txbChLFR4tQ7RpVPtS%2BBE0IuAnLTpVJl9nQ%2F%2BfEsgelL5Afkl5r74eVpMQsAeqkiD%2FMs0LaMnrWypIkEPo3WXHdkHx%2BbOHvABH5b94clY4HiBzbg%3D%3D\"}]}\r\ncf-ray: a4a913619f9056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 255175\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255175,"size_decoded":255970,"mime_type":"image/png","magic":"PNG image data, 1050 x 542, 8-bit/color RGBA, non-interlaced","md5":"673c0c7d619cc45086259e7c45dcd16c","sha1":"b528dca9d7da4977a998dbc09bd2e7909777958a","sha256":"750a12745f329aa57268972132c7bafc5dce261fdc014b94b64e3b550c45f217","sha512":"988a4c9ca2236c1477c5809a708a94f08d04b0d60f33c5ebec643b12d063d1b31c37d8412d813ca894a51da6a429c41a78534d0470d5b64430e51132edb6af3b","ssdeep":"6144:1XjXnBvr3hulxAUOtRDRxzC22Uz5VKJRTPsXT3:pjxjMLOtRX+oT3","tlshash":"23442282faa9b13e68e7bc020419dbc9498199dd68447fa72c60d31cf853e1d0d7be47","first_seen":"2025-10-08T18:47:54.130405Z","last_seen":"2026-10-14T19:46:35.880831Z","times_seen":32,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/img/Practical-functions1.c0da3ff.png","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.135Z","timestamp":1792007035135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/img/Practical-functions1.c0da3ff.png HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\netag: \"6ac8ea70-5372\"\r\nexpires: Fri, 13 Nov 2026 11:57:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 27994\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YugVWWWIDJ5D1ynDFariKq9yqHlj2%2BGtpaNtTPdc8Ue0sv6yBTrgw4VqSarMK7FGfm46LytT2OdgH6t1AJ0gtX6g%2BjtcLf3M8UuI%2BrqNKPZY7V2fhr2Wp8wWRwZDCnGVOA%3D%3D\"}]}\r\ncf-ray: a4a913619f9256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21362\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21362,"size_decoded":22151,"mime_type":"image/png","magic":"PNG image data, 177 x 184, 8-bit/color RGBA, non-interlaced","md5":"c0da3ff65a7ac5ad30efe0d4189f6bf7","sha1":"da0a6e5f35d7817c72fec31be4b42e650b220251","sha256":"7d1b05513ade90fb51b327e04ff5ed8d89512fd28061a445335521f7a2583937","sha512":"ca8ac12cad7e72353af544409e5a3288b2096839604e066f7665e93ada571ea9174519371c2cd55985d6df7f1442df822b409c122a39abb37d0b3acb458234e1","ssdeep":"384:MorgqrZ+NnAk5gUgAnd2vci1EfJoBGYsiPEkrCZxTB5ITXfnmRT:M1q1oAk5pgAQUqEfE/siPvIx95ITvmRT","tlshash":"97a2e101fd855a30ca98aee7128b6887e63dda81adc4129360d6fdbff254c3d274db40","first_seen":"2025-10-08T18:47:54.205989Z","last_seen":"2026-10-14T19:46:35.894004Z","times_seen":32,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/web/reg_checkcode?lang=en\u0026rtoken=vi6kV4IP","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.146Z","timestamp":1792007035146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /web/reg_checkcode?lang=en\u0026rtoken=vi6kV4IP HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitmart-cex.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":394,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"6d8cdb6ae446fd3b6842c627dae2a9f3","sha1":"f840365184c67ccb105db95cc0742674504611e5","sha256":"013c8075dd5198b118e390c7f2454c5ede8892e56b998309b24e83dafa646480","sha512":"efce6f351378d2a0a7abf51a9f4ab5435f61cd5eb86b3489cd27a7a6a6d507a623f5ed6c65a6ebf681e85501f17ec63988d7114db063e9f353871f96376fe738","ssdeep":"","tlshash":"8fa0244314dd303345034013cd0d1f014f3c10311d00100cdc4d534457730343131017","first_seen":"2025-10-08T18:47:54.152661Z","last_seen":"2026-10-14T19:46:35.996313Z","times_seen":57,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":14,"connect":161,"send":0,"wait":174,"receive":0,"ssl":328},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/web/getBanner?lang=en\u0026rtoken=EKjrIqd","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.148Z","timestamp":1792007035148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /web/getBanner?lang=en\u0026rtoken=EKjrIqd HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitmart-cex.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\nset-cookie: think_var=en; path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"think_var","value":"en","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"think_var=en; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":460,"size_decoded":767,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0e2d69579938ad235c0abe0005dc5737","sha1":"71a739d64157815b0b4ad4830adb5319a0cadd63","sha256":"dddf9a257df607ef870548f3e4414f9a10d6bc3e1378b69a9e58647c7082799b","sha512":"f6370e151b16bb826b4873aec8b770227d4d3aafa2fa5a69599a73ffca227ad20d5c4f247b3afa94c960687693d933c9cde79e26258481b1793dbbcee32cf19e","ssdeep":"","tlshash":"05f0e2231c686437b6c442ca040b34687dcd311adf48019ec0ce4c6d40adbb0030b2da","first_seen":"2026-10-14T19:46:01.311698Z","last_seen":"2026-10-14T19:46:01.311698Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1374,"timings":{"blocked":-1,"dns":11,"connect":162,"send":0,"wait":183,"receive":0,"ssl":1016},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/jquery-3.4.1.min.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.487Z","timestamp":1792007034487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-15851\"\r\nexpires: Wed, 14 Oct 2026 23:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=674BAnc1q7LxnE0AzxTkpVLjYGaqptWeUEcQxSopZC1qTZXSY%2FCajKw4f3tB6QhuNAxuSGzjWGpBqkcxsmqpTRpQwcDV2L6wTz5vMQqZ%2BSd1ZGWTpnr18gkrdTJ3A%2BrQ9Q%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a4a9135d8e9856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88145,"size_decoded":35297,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-10-14T19:46:35.933647Z","times_seen":7567,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/image/remind.png","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.507Z","timestamp":1792007034507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/image/remind.png HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\netag: \"6ac8ea70-4deb7\"\r\nexpires: Fri, 13 Nov 2026 11:57:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 27996\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tdjy94%2BxAd1VP6QNl%2BEaFI8Ed5r00qI3D3iRPm6H%2Bj5ENBNhzGOUU1qlvZ%2F2jL%2Ba6vebFXU8adtHVlUyd5XN2UhEULjB6BsutJNUYtFAcNnIG5ZNk3m09zMA0wz1vGWfdg%3D%3D\"}]}\r\ncf-ray: a4a9135daea956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 319159\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319159,"size_decoded":319954,"mime_type":"image/png","magic":"PNG image data, 2163 x 2283, 8-bit/color RGBA, non-interlaced","md5":"42a3301ec37986141e520b49d598e73b","sha1":"83c6e41ecfc381ef9d39dc5767272ea843e0a679","sha256":"60ddd3846aa5aaa641439a451b27834bdf41fabcf4601ed9c9239908dc5a6339","sha512":"db3eae8a9caf09de6f41e3ab079844691df7372295aabdcda662b6d042e07e707d1e8ad786c42b9eb4d0c8c5b5156039c1fc389df26b0a1230a793fb153d7b38","ssdeep":"6144:UT+B9YsJyUqYWWLq7M6jzqhyWykRcTUEWPaG/4Jb6lHGKYT:SAYCz1ZhyW9RJEKaG/Qb6lG","tlshash":"58642351da3dcc5ac5fb9635043f212ea9b84330b698fad6ca3f75501b42ca76227db0","first_seen":"2023-05-25T13:54:34Z","last_seen":"2026-10-14T19:46:35.893231Z","times_seen":105,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/1.4b0b9334cfb6fc4691e3.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.989Z","timestamp":1792007034989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/js/1.4b0b9334cfb6fc4691e3.js HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-a8ea\"\r\nexpires: Wed, 14 Oct 2026 23:57:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27995\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJjpDuX%2Fm1IParBuTxk%2FOG26FcoMsXEYAmZuqBX%2B5MJV1piB0y7NPPdDxP1PY9mZeoFvh3LygcN%2FduIK8aedhzmHUjCa9e50fOntRkzyLmkDn6fIFwr%2F4mQ8QZr7NLKHEg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a91360af6d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43242,"size_decoded":21848,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43177)","md5":"98c46144546b8001600ad6da33fe135a","sha1":"2d9960671d0cb44ccdb8afa4c526214f51b15c06","sha256":"c2e6fb2a12803539b45eeb7007218cb35a2232e1af3a9d1c17549d13d0eda2fd","sha512":"a811ecbf2f7d4f968d118704f010148d7f69af3eb429c264f17b852c71ec19ebc76fac2189cafb8a37e8ebba494a9ed40d24f9b41e70679937a52ead2d9940df","ssdeep":"768:v1g4pOx27O8/L3bYeRyHYLufL1VlQRA1QObYp6i/gSDMBJkn:vS4pOx268D3V4H0OL1HWONi/gsMwn","tlshash":"6f134b0ab45bb66d8c3b4061562f2139a03a1fe8901ad1d3f63cd9849af4e39171fb7c","first_seen":"2026-10-14T11:59:33.886001Z","last_seen":"2026-10-14T19:46:35.96323Z","times_seen":5,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/wzpic/ada.png","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:56.012Z","timestamp":1792007036012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /wzpic/ada.png HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 16287\r\nlast-modified: Thu, 19 Jan 2023 04:54:56 GMT\r\netag: \"63c8cd20-3f9f\"\r\nexpires: Fri, 13 Nov 2026 19:43:56 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16287,"size_decoded":16585,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"ddbd783f7bcbbf07bc974485aabfacbe","sha1":"db97ab8ca9e8938781f7f8f42f7b97b5f2a8efa4","sha256":"963ea06d1c04c2ae26332fcb8b0f1e45f2f3eba148a0b1a77ec66aadba47b55f","sha512":"8bf0121ce9c2b6b3716f12414ba5dca7e2b951e3e8204a1a2a9c737d220a2fd9915385f87a1070c42f3b8d9ebf49e94c349f902bc949f4294d7525460ce67f8a","ssdeep":"384:7nKBaor7iF6iT9pMRYHT/B6uKF1DDCm7PwGnwNAO:7qrGHT9pMwTmDCE4R","tlshash":"7f72d082c4d0df9c77c7f28528cf13aba912468269c6f912bfc4e432be54825f6893c1","first_seen":"2023-10-28T09:52:36Z","last_seen":"2026-10-14T19:46:35.812298Z","times_seen":71,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/iconfont/iconfont.css","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.481Z","timestamp":1792007034481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/iconfont/iconfont.css HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-acb\"\r\nexpires: Wed, 14 Oct 2026 23:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6TzfF4lpJvhJCIYqwNcnppjh5sC92XgKDxVOZJHFg5pmW%2ByOlCYECv1%2FwUh7S7%2FKvgbKItWYc6bquTzNuoPBpX7CPxi7V82q34%2B0kR8JFQC6A4lwtPB67dSi7IHoBHXWmQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a4a9135d7e9156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2763,"size_decoded":2674,"mime_type":"text/css","magic":"ASCII text, with very long lines (1881), with CRLF line terminators","md5":"33d9b388cc148e6dddd6a6a4a14c12d3","sha1":"913f02bd13b862ac68800eadaf1a484c3b20aaa4","sha256":"ae4df143a2ee5a22c936892413a619a5afb57d04f5dbac72c60e23994c804937","sha512":"ce1b4187dc69531155ec5db9fd5a2451d967cccd8b42367dd8b7f48f467c247a4317af37377dcfaf2da00a4800fc8c0c274ee2dc82f0796795aef6a802eefc91","ssdeep":"","tlshash":"ca51f8ba584d30804bb16c7073e739249e5418bf9f5a28c2b52a246d45f7e20e2d2bdc","first_seen":"2026-03-06T10:13:01.542912Z","last_seen":"2026-10-14T19:46:35.8855Z","times_seen":59,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/app.910a45c96e244f868dad.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.501Z","timestamp":1792007034501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/js/app.910a45c96e244f868dad.js HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-abcba\"\r\nexpires: Wed, 14 Oct 2026 23:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G86vy3vVWLeGE5%2FfhAyvD%2BEZa6%2BRcEBGxx00moUsMBJUxbPw%2B53o2UCPxc0pENJZyS53bwkzx8oTm34gdquWaC050HS9oMqYpPzjLcf5Ie2NqswMvtYfzqHPZllo77XFOg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a9135d9ea756aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":703674,"size_decoded":262190,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64781), with no line terminators","md5":"3c7ccc67c81b74fe1ded1d6cec3aa819","sha1":"19d8f386c442061b528606ab1074d2d0ff4f0e6f","sha256":"5c21c516ed2544ca675454a4b88832483079dee3a89a99ba91e77c56ade0c3c1","sha512":"1325b34b799f2f2c982cf223e4312a39c6f45db5ba231052a9c061aeae648e2f81d6752daeb0b3f27dd0599ddbe96e47514dd29f7b1a06ea65fd62429f47a956","ssdeep":"12288:69RGKk4gUlos2GReSc+Ne2w/dynMlRPGNpiEj7aoIfDxEMoFwD6UcV9Fz4ZconS+:6KKdosex2BQ","tlshash":"eae45d7b11ce59a819428a06b28b7644f5699c83fb53f8f048ddc52a33f0759c53aef2","first_seen":"2026-10-14T11:59:33.849342Z","last_seen":"2026-10-14T19:46:35.866612Z","times_seen":5,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/img/Practical-functions3.3ff97dc.png","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.137Z","timestamp":1792007035137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/img/Practical-functions3.3ff97dc.png HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\netag: \"6ac8ea70-6999\"\r\nexpires: Fri, 13 Nov 2026 11:57:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 27994\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYm7Hr5TZhnheYKSye1O%2BRAyqSXCgHPCJFxz16FCgpVTFKU89MvEp0WfUpNB6XIAi5PpI2HqOCSOz4cBSZAy0eLHS77w36WDCKI0O%2BDQBabGS2bDOOYV%2BXzh7Rb%2FqLcSvw%3D%3D\"}]}\r\ncf-ray: a4a913619f9156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27033\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27033,"size_decoded":27824,"mime_type":"image/png","magic":"PNG image data, 169 x 191, 8-bit/color RGBA, non-interlaced","md5":"3ff97dce9558ea7021ca410a2e730de8","sha1":"3d803d7eb5a242b5c035e0ed7d5ece557bb7270c","sha256":"4b8993833834ff23568d9fdd40d103942568b53a3ed0704fb3c678fa9fd74d1b","sha512":"43608f5e99af7dde42bd05abdf77df4b62670631c4650a66d40c7b0b9c81a9fc0f0226200b988bf3e5badf5fd27da158d1286f1eec1074b1a1291fd04f62336e","ssdeep":"768:dZ+x9Nc9X5WnhV3dSH/x8daijhvFT5thhL:dCIWnhV3dSH/OaeBjL","tlshash":"25c2e1dd8743af06c8399d6319faeb3608d09108564aa947cacf4fdb462f2b274605d1","first_seen":"2025-10-08T18:47:54.17253Z","last_seen":"2026-10-14T19:46:35.946923Z","times_seen":32,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/wzpic/link.png","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:56.005Z","timestamp":1792007036005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /wzpic/link.png HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4720\r\nlast-modified: Thu, 30 Jun 2022 09:13:07 GMT\r\netag: \"62bd6923-1270\"\r\nexpires: Fri, 13 Nov 2026 19:43:56 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4720,"size_decoded":5017,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"daddfcd5b19144e686ba7f4048f9de63","sha1":"a1803333e242fd7ee0900da9f236a39f4cc2b802","sha256":"c707189076cf26f3b6c84b5c712f6f0e6b5de0279efbdb5d4d90d3698b8cd1ef","sha512":"646bbe55e2c6683959c978bd504fe71abcd8cc558129a42c9114593b70033c729a42469b919136a82e439d404518790a32ba8228e9c1245453c05cb2bb7addf9","ssdeep":"96:eqnGuMdVvZUGnDxNH6gJj0JOfJdq84MgqZIAWIJZhEHKPtZmOCGaZmPPPsj7:3mUEDxNH6gyJOhdZOqZLW7um8nPo7","tlshash":"aba16daef6781159e6d9744b030570699638d231240641a9c813c93b2a7f3aeaa426b3","first_seen":"2023-05-06T07:16:23Z","last_seen":"2026-10-14T19:46:35.907276Z","times_seen":119,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/swiper.min.css","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.491Z","timestamp":1792007034491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/js/swiper.min.css HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-4d4a\"\r\nexpires: Wed, 14 Oct 2026 23:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9jJglOz6G0Ai87pZ6btgiVN4THTUoDP6AeAu7iRiSi3sWT%2FWR%2BRxY7oRPifCujdHg7ZssifukLS3LVQ9SEuX9d%2BRwdwcsLTPfiYxICKPLXyYhxyzK9JN%2B9aUNtT7xmty3w%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a4a9135d8e9c56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19786,"size_decoded":4285,"mime_type":"text/css","magic":"ASCII text, with very long lines (19512), with CRLF line terminators","md5":"94160d512c97c05e7c4aeeadd30f23c0","sha1":"04261a673b7e5100f78742455b8b7eb48ae11566","sha256":"783bfe0f2494079631972de7df124e1341f235b0b37d51d3c488356c1fca06f8","sha512":"121df9bdbaa00deaada17df94f56fbe36ddce44494022760f21ce7e59dc589d62c296ca5b661d642a6ca0155081ee35c18a45c53f982b5d98df4cf3e76aff1cf","ssdeep":"192:PphaNv/lSSyJWCh8zfi5o/mXDN3eBxwdJ5R:PHa1/lS0Cifi5o/mXOGJ5R","tlshash":"b392622c17003057e2334f1a87d99778c724c9939e4358ef6250ee48c7bb96a32af766","first_seen":"2023-04-17T17:48:16Z","last_seen":"2026-10-14T19:46:36.002256Z","times_seen":99,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/js/vendor.16a3625760a790ae9d60.js","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:54.499Z","timestamp":1792007034499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/js/vendor.16a3625760a790ae9d60.js HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac8ea70-1b441a\"\r\nexpires: Wed, 14 Oct 2026 23:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r0VCQA6h%2B0j%2B90wWg7uXV5PeQhOJyNc4C%2FD90QOKMu7TXaMmZ6je%2FRQsoL4DLKzLNkTW5NhXrYdWET0RGMaPIqd9LtfPKws9NXDTOmYtHtyn3VL7dgwX26cH3QyWgBgbeA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a4a9135d9ea656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1786906,"size_decoded":644127,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37287)","md5":"565f9f539f215a2f16622fe90a3e6e49","sha1":"41d4507b10d629e64b3d79e50041bbb5d06a0421","sha256":"715b2f4d824d68823a2a65be242a66253f473e516ac3aea116e2fbb9a4cde10f","sha512":"8937e019d75d17cfe3893b56a758e72fbe844ae5eb977f6ebefde481f24ca08820cfbd1cc22772d42deaf9e14564a2c56df04c85f888cdb218e8e3516c142b98","ssdeep":"12288:i/5H4KEh+NlpJ8ei75Gm5PiMta2JpIuuiXuHBBL2O:iBH4Kkoj8eQGm5Pzk2JaRiXuHBBL2O","tlshash":"7425199d32c4b06643e331b5503f240fa3372959a80ec558ba26d4daacbd55e623bf3d","first_seen":"2026-10-14T11:59:33.899434Z","last_seen":"2026-10-14T19:46:35.901207Z","times_seen":5,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliosmetals.com/pc/favicon.ico","fqdn":"heliosmetals.com","domain":"heliosmetals.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.076Z","timestamp":1792007035076,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /pc/favicon.ico HTTP/1.1\r\nHost: heliosmetals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitmart-cex.cc/pc/static/img/bg3.0733f40b.31d090f.png","fqdn":"bitmart-cex.cc","domain":"bitmart-cex.cc","tld":"cc"},"ip":{"addr":"172.67.194.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.113Z","timestamp":1792007035113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitmart-cex.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 19:39:40 GMT","end":"Wed, 06 Jan 2027 19:39:39 GMT"},"fingerprint":{"sha1":"60:4A:5E:2D:28:74:AD:60:8B:A4:4A:2A:2B:FB:30:E4:76:FD:E5:C3","sha256":"F5:A3:FE:07:BF:A9:18:C6:FA:43:A2:3B:CE:93:B2:E0:FB:E2:27:00:64:A9:1C:8E:9C:2F:03:17:BF:ED:B7:7D"}}},"request":{"raw":"GET /pc/static/img/bg3.0733f40b.31d090f.png HTTP/1.1\r\nHost: bitmart-cex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/pc/static/css/app.d4ba672a9ccb0b1965ddb0e9628b4c37.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 19:43:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 09 Oct 2026 13:21:52 GMT\r\netag: \"6ac8ea70-68489\"\r\nexpires: Fri, 13 Nov 2026 11:57:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 27994\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zG9YF8lUiCbPWpZ1pI6H7SygClgLYVIfcm3aLpgpWNk38Ox4TpEMBfpOPZUE3GgLMuoJACnkIDE8z0jgj6%2BGWreDxxSiW6vJegTlXGFzuDlOeFCMeS7CqRQ4urY%2B0TUfPw%3D%3D\"}]}\r\ncf-ray: a4a913617f8956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 427145\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":427145,"size_decoded":427934,"mime_type":"image/png","magic":"PNG image data, 1307 x 880, 8-bit/color RGBA, non-interlaced","md5":"31d090fdf1bafb38c0149b9ef7dc5b9f","sha1":"83a6b5d54b511ada40d3c10c6584764d733b1802","sha256":"91b9943e2381001dd69b262bed124e7f06677f2d6347d144d0082412cba596ca","sha512":"344c3f390355a813e91a88b470927c722e77de101a658dd9c361fc50852b179d3d65fdbd0cdba64615f7da114d35f1f8e52a79b63e568a6f35a1589caf95b999","ssdeep":"12288:NIWMHKtHOffUbdZqbXQPGgueqsEiXYdqK18OZS9Gm/FE0:CWMHXffUbiZgueqsjXWqK61/F9","tlshash":"72942302a0e3dc98280b33ae3ec97144753a2d5094357e74b9fe55e58babd301cb7ca9","first_seen":"2026-05-07T21:42:28.521371Z","last_seen":"2026-10-14T19:46:35.935747Z","times_seen":18,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"bitmart-cex.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"bitmart-cex.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bdfsghhxsa.com/web/getQrcode?lang=en\u0026rtoken=m8npx2OMkEizs","fqdn":"api.bdfsghhxsa.com","domain":"bdfsghhxsa.com","tld":"com"},"ip":{"addr":"47.89.248.173","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitmart-cex.cc/pc/","date":"2026-10-14T19:43:55.152Z","timestamp":1792007035152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bdfsghhxsa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 09:16:19 GMT","end":"Fri, 08 Jan 2027 09:16:18 GMT"},"fingerprint":{"sha1":"72:9E:DE:D1:B6:77:14:9C:F6:8A:DB:B7:93:80:5A:0D:66:44:3F:A2","sha256":"BE:24:AE:71:9D:ED:6C:F3:03:1E:B6:0B:2D:0F:1D:BC:FF:E3:CA:75:2B:32:EC:AE:50:02:88:13:30:10:99:BD"}}},"request":{"raw":"GET /web/getQrcode?lang=en\u0026rtoken=m8npx2OMkEizs HTTP/1.1\r\nHost: api.bdfsghhxsa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitmart-cex.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitmart-cex.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\nset-cookie: think_var=en; path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"think_var","value":"en","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"think_var=en; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":299,"size_decoded":606,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"21b9992a8954ffaa476212d762207d3c","sha1":"efd537c1a1abdbd9421749d5dc124e4ab83eaf30","sha256":"8a170f874700dba7a9453b8a8c2cd77a6bc40fdcf38b42f73a99eab752fb0c36","sha512":"9a0d57b1004fcd73d534a60edddace9cee573cb26176e93241cd8db437d1cbfed39c3ab9646c93942255db30e6ee5923161f26b2eaa114f5585f72abc4fd1acb","ssdeep":"","tlshash":"2ee0cdf57fac0c10567511c3351e3cd5696f514b8cc0e077cfc84ba490791752047675","first_seen":"2026-10-14T19:46:01.620818Z","last_seen":"2026-10-14T19:46:01.620818Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1329,"timings":{"blocked":-1,"dns":7,"connect":162,"send":0,"wait":184,"receive":0,"ssl":974},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"api.bdfsghhxsa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}