{"report_id":"55328d47-91ad-484e-b6c4-c0c5120cabc9","version":6,"status":"done","tags":[],"date":"2026-02-03T18:05:06Z","url":{"schema":"https","addr":"web3-bitget.net.in/","fqdn":"web3-bitget.net.in","domain":"web3-bitget.net.in","tld":"net.in"},"ip":{"addr":"149.30.242.118","port":0,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"web3-bitget.net.in/","fqdn":"web3-bitget.net.in","domain":"web3-bitget.net.in","tld":"net.in"},"title":"web3-bitget.net.in/","dom":{"size":13649,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2553)","md5":"82d944eddc8fb9864781c913462631e0","sha1":"45e4ba3a4c986ebd8ea0d1b032cad56b6ab2cb9d","sha256":"912fe60660363873fabffcef87a6d50cd53f62b1bd6c381c9514869308c1f368","sha512":"c61e8926ea7169c24e51dab3b20afcc0743f2c4ea02a2efdbfa28fb20ac9fe62cd1acf7575d9a654638b8e7793e68f419884207ce5d0ff7a926c32c1ddad1fde","ssdeep":"384:DI8VaO36Gg2/lW712kz5zdrkHe2Htqt2O4b2VM:DIr83mV5C","tlshash":"2552c7f697cc77d0860723799c34a2e4343f2cb6d76ac5cdfa732900b5985d85d98a88","dom_hash":"domhash0565e126e2cc841c3835309675695ed7","first_seen":"2026-02-03T18:05:12.251046Z","last_seen":"2026-02-03T18:05:12.251046Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"web3-bitget.net.in/","fqdn":"web3-bitget.net.in","domain":"web3-bitget.net.in","tld":"net.in"},"ip":{"addr":"149.30.242.118","port":0,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T18:05:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T18:04:44Z","timestamp":1770141884,"ip_dst":{"addr":"Client IP","port":60418,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"149.30.242.118","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2026-02-03T18:04:44.812766+0000\",\"flow_id\":926786174893241,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"149.30.242.118\",\"src_port\":443,\"dest_ip\":\"172.18.0.7\",\"dest_port\":60418,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=bitget-web.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=E8\",\"serial\":\"06:20:0F:52:CC:D1:4B:0C:70:D4:8A:C2:7D:46:3B:D1:15:5B\",\"fingerprint\":\"35:28:05:20:11:ed:5e:bc:b4:65:c5:3a:c7:8f:a8:3d:66:77:bf:74\",\"sni\":\"web3-bitget.net.in\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-03T14:04:09\",\"notafter\":\"2026-05-04T14:04:08\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"0191d81a4ad7ee1a330a1e2c51d23ace\",\"string\":\"771,49195,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":5,\"bytes_toserver\":1014,\"bytes_toclient\":2797,\"start\":\"2026-02-03T18:04:44.048313+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-03T18:04:45Z","timestamp":1770141885,"ip_dst":{"addr":"Client IP","port":60432,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"149.30.242.118","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2026-02-03T18:04:45.074740+0000\",\"flow_id\":774941901099664,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"149.30.242.118\",\"src_port\":443,\"dest_ip\":\"172.18.0.7\",\"dest_port\":60432,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=bitget-web.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=E8\",\"serial\":\"06:20:0F:52:CC:D1:4B:0C:70:D4:8A:C2:7D:46:3B:D1:15:5B\",\"fingerprint\":\"35:28:05:20:11:ed:5e:bc:b4:65:c5:3a:c7:8f:a8:3d:66:77:bf:74\",\"sni\":\"web3-bitget.net.in\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-03T14:04:09\",\"notafter\":\"2026-05-04T14:04:08\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"0191d81a4ad7ee1a330a1e2c51d23ace\",\"string\":\"771,49195,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":5,\"bytes_toserver\":1145,\"bytes_toclient\":2797,\"start\":\"2026-02-03T18:04:44.299664+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bootscritp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bootscritp.com","ip":{"addr":"43.255.159.8","port":443,"asn":42960,"as":"VH Global Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-08-08","domain_rank":0,"first_seen":"2025-08-16T14:47:08.426151Z","last_seen":"2026-02-01T02:12:17.802692Z","alert_count":2,"request_count":2,"received_data":9511,"sent_data":1047,"comment":"","tags":null,"fingerprints":null},{"fqdn":"web3-bitget.net.in","ip":{"addr":"149.30.242.118","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":124914,"sent_data":1827,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"web3-bitget.net.in/style/jq.js","fqdn":"web3-bitget.net.in","domain":"web3-bitget.net.in","tld":"net.in"},"ip":{"addr":"149.30.242.118","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f832e36068ab203a3f89b1795480d0d7","sha1":"2115753ca5fb7032aec498db7bb5dca624dbe6be","sha256":"4c24dfd28784ad2befb3dafaac6bf1ed4e7cd58cce713d9a0b228d426e812baf","sha512":"b9dbc08c984ae3c7fd44822ec2e9a22cb8cf7da55fa3975dbbdc3f18fd7e7a7793e8d93604826574e3dd6a4f982d7af4f96c1af5e10d847b8394a34a82c398ba","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:ygZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"b28319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88144,"data":"","first_seen":"2023-03-07T01:24:01Z","last_seen":"2026-08-07T03:09:15.995306Z","times_seen":13109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3-bitget.net.in/","fqdn":"web3-bitget.net.in","domain":"web3-bitget.net.in","tld":"net.in"},"ip":{"addr":"149.30.242.118","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab5103106d23fe274e2eb665e7cbb2b9","sha1":"7dbea0f5e195570556c53b7d689217e34bea4d78","sha256":"f25feecb4b658d639de9b9c550e12964adcd74599fc339da16ea9d6d5c923fdd","sha512":"12d739a697d4493ad8f56fc27b5b76882f534c4fe27e5a19cf9580ca01137b7dc63671b4ebfeb1069e11d0947a0c0f62603c012f213fd67cccc110b955070c97","ssdeep":"","tlshash":"9ce07d39bb9c6830937918bd91bdc1cc6c7dd02c25399c124c4cf85585a8fa5487ef14","size":327,"data":"","first_seen":"2026-01-09T09:43:39.049037Z","last_seen":"2026-02-03T18:05:12.27045Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"web3-bitget.net.in/","fqdn":"web3-bitget.net.in","domain":"web3-bitget.net.in","tld":"net.in"},"ip":{"addr":"149.30.242.118","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T18:04:44.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bitget-web.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 14:04:09 GMT","end":"Mon, 04 May 2026 14:04:08 GMT"},"fingerprint":{"sha1":"35:28:05:20:11:ED:5E:BC:B4:65:C5:3A:C7:8F:A8:3D:66:77:BF:74","sha256":"53:0F:7C:11:8A:F0:78:12:56:01:70:11:AE:A3:29:37:BE:AB:44:85:14:0D:A1:15:27:D9:BD:5F:C8:62:02:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: web3-bitget.net.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Tue, 03 Feb 2026 18:04:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 13855\r\nlast-modified: Tue, 03 Feb 2026 07:35:50 GMT\r\netag: \"6981a556-361f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13855,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2480)","md5":"537bbd1b6bf12f6f24f353e3dc394564","sha1":"b516d9775e01ba03686905ed7a0e67f5690cb7d5","sha256":"6cbb893d398bb7e6351e30bdcd5dffc3850e0603d0c3da6e3758ee534987fe4f","sha512":"e6d0e8505e8bc15b25a6a0b7a2251d61c1cb3f380e37ad5953a8fbeda640e8fea1ca6c45c7a455ff84753fbab90ec6bc23b683c91e955718a3662e68ffb1b55f","ssdeep":"384:0I8yO3ZGRtXlN7atqz5zdrbHjthtWttO4UtV6:0IP8YNV5s","tlshash":"f452c8f693cc77d8c207237c9c34a2e4383f2cb5d76ac5cef9772911a5884985d98a84","first_seen":"2026-02-03T18:05:12.2557Z","last_seen":"2026-02-03T18:05:12.2557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2133,"timings":{"blocked":812,"dns":52,"connect":253,"send":0,"wait":503,"receive":1,"ssl":510},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3-bitget.net.in/style/jq.js","fqdn":"web3-bitget.net.in","domain":"web3-bitget.net.in","tld":"net.in"},"ip":{"addr":"149.30.242.118","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3-bitget.net.in/","date":"2026-02-03T18:04:45.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bitget-web.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 14:04:09 GMT","end":"Mon, 04 May 2026 14:04:08 GMT"},"fingerprint":{"sha1":"35:28:05:20:11:ED:5E:BC:B4:65:C5:3A:C7:8F:A8:3D:66:77:BF:74","sha256":"53:0F:7C:11:8A:F0:78:12:56:01:70:11:AE:A3:29:37:BE:AB:44:85:14:0D:A1:15:27:D9:BD:5F:C8:62:02:DD"}}},"request":{"raw":"GET /style/jq.js HTTP/1.1\r\nHost: web3-bitget.net.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web3-bitget.net.in/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Tue, 03 Feb 2026 18:04:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 88144\r\nlast-modified: Tue, 03 Feb 2026 07:35:50 GMT\r\netag: \"6981a556-15850\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88144,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"f832e36068ab203a3f89b1795480d0d7","sha1":"2115753ca5fb7032aec498db7bb5dca624dbe6be","sha256":"4c24dfd28784ad2befb3dafaac6bf1ed4e7cd58cce713d9a0b228d426e812baf","sha512":"b9dbc08c984ae3c7fd44822ec2e9a22cb8cf7da55fa3975dbbdc3f18fd7e7a7793e8d93604826574e3dd6a4f982d7af4f96c1af5e10d847b8394a34a82c398ba","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:ygZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"b28319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:24:01Z","last_seen":"2026-08-07T03:09:15.995306Z","times_seen":13109,"resource_available":true,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":762,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3-bitget.net.in/style/bitget.webp","fqdn":"web3-bitget.net.in","domain":"web3-bitget.net.in","tld":"net.in"},"ip":{"addr":"149.30.242.118","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3-bitget.net.in/","date":"2026-02-03T18:04:45.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bitget-web.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 14:04:09 GMT","end":"Mon, 04 May 2026 14:04:08 GMT"},"fingerprint":{"sha1":"35:28:05:20:11:ED:5E:BC:B4:65:C5:3A:C7:8F:A8:3D:66:77:BF:74","sha256":"53:0F:7C:11:8A:F0:78:12:56:01:70:11:AE:A3:29:37:BE:AB:44:85:14:0D:A1:15:27:D9:BD:5F:C8:62:02:DD"}}},"request":{"raw":"GET /style/bitget.webp HTTP/1.1\r\nHost: web3-bitget.net.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web3-bitget.net.in/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Tue, 03 Feb 2026 18:04:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8106\r\nlast-modified: Tue, 03 Feb 2026 07:35:50 GMT\r\netag: \"6981a556-1faa\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8106,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8789404cc6e8a7ea3a066cae7313f0f4","sha1":"015867b9e34496c11f85ff1b9252bf8cefb65f72","sha256":"c3c1dc64f4b2c86380972487d2790716f496974c5327d8ac72c4327829dd674e","sha512":"6070ed18c68e2f9d327d6a495dcf4079ad9290558925ad41d5416a36f171ebca0240620ff3dacd56654d354fcbcde4e52f905cd569270bb1e2b1aaf30310a2e5","ssdeep":"192:e9Kt3PWwfeJ9ireEm3mITU0TAWsn9Lsvjrac3l:ae3O7J9Wexpu9o5l","tlshash":"28f19fc712439909bfcf0d76e54323a5f75f725f1adfe6a0c18d1d1019264481ca866e","first_seen":"2025-09-09T17:46:49.279461Z","last_seen":"2026-07-28T10:20:55.094311Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":247,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootscritp.com/lib/jquery/4.7.2/jquery.min.js","fqdn":"bootscritp.com","domain":"bootscritp.com","tld":"com"},"ip":{"addr":"43.255.159.8","port":443,"asn":42960,"as":"VH Global Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3-bitget.net.in/","date":"2026-02-03T18:04:46.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootscritp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 08:09:00 GMT","end":"Thu, 19 Feb 2026 08:08:59 GMT"},"fingerprint":{"sha1":"15:20:69:39:22:F6:7F:63:9B:70:C0:DF:02:CE:29:40:B5:EF:7F:F6","sha256":"F8:49:94:53:15:99:22:D2:67:D5:49:4D:35:74:2F:4B:3E:52:F1:E6:60:FE:A0:7B:6E:F4:0A:2E:A4:8C:B5:EB"}}},"request":{"raw":"GET /lib/jquery/4.7.2/jquery.min.js HTTP/1.1\r\nHost: bootscritp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web3-bitget.net.in/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncontent-type: text/html; charset=utf-8\r\nlocation: /WAF/VERIFY/CAPTCHA?info=vcRJRmXmsGIXhALboWEGiq7mG%2FodqOEILdAHGlDxMosuZoYqgSywVeXKazNCXYVw9LeNA1YjMaWHzHpJyrt76CztnU%2F1z%2FeOwek3ceoYC4nE6dntALNQu5oh6z%2FiJHYy\u0026from=%2Flib%2Fjquery%2F4.7.2%2Fjquery.min.js\r\ncontent-length: 246\r\ndate: Tue, 03 Feb 2026 18:04:47 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":null,"data":{"size":4503,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T22:24:30.70154Z","times_seen":17768422,"resource_available":true,"data":null}},"time_used":1662,"timings":{"blocked":746,"dns":398,"connect":168,"send":0,"wait":169,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bootscritp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3-bitget.net.in/favicon.ico","fqdn":"web3-bitget.net.in","domain":"web3-bitget.net.in","tld":"net.in"},"ip":{"addr":"149.30.242.118","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3-bitget.net.in/","date":"2026-02-03T18:04:46.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bitget-web.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 14:04:09 GMT","end":"Mon, 04 May 2026 14:04:08 GMT"},"fingerprint":{"sha1":"35:28:05:20:11:ED:5E:BC:B4:65:C5:3A:C7:8F:A8:3D:66:77:BF:74","sha256":"53:0F:7C:11:8A:F0:78:12:56:01:70:11:AE:A3:29:37:BE:AB:44:85:14:0D:A1:15:27:D9:BD:5F:C8:62:02:DD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: web3-bitget.net.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web3-bitget.net.in/\r\nCookie: hasVisited178a=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Tue, 03 Feb 2026 18:04:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 13855\r\nlast-modified: Tue, 03 Feb 2026 07:35:50 GMT\r\netag: \"6981a556-361f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13855,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2480)","md5":"537bbd1b6bf12f6f24f353e3dc394564","sha1":"b516d9775e01ba03686905ed7a0e67f5690cb7d5","sha256":"6cbb893d398bb7e6351e30bdcd5dffc3850e0603d0c3da6e3758ee534987fe4f","sha512":"e6d0e8505e8bc15b25a6a0b7a2251d61c1cb3f380e37ad5953a8fbeda640e8fea1ca6c45c7a455ff84753fbab90ec6bc23b683c91e955718a3662e68ffb1b55f","ssdeep":"384:0I8yO3ZGRtXlN7atqz5zdrbHjthtWttO4UtV6:0IP8YNV5s","tlshash":"f452c8f693cc77d8c207237c9c34a2e4383f2cb5d76ac5cef9772911a5884985d98a84","first_seen":"2026-02-03T18:05:12.2557Z","last_seen":"2026-02-03T18:05:12.2557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootscritp.com/WAF/VERIFY/CAPTCHA?info=vcRJRmXmsGIXhALboWEGiq7mG%2FodqOEILdAHGlDxMosuZoYqgSywVeXKazNCXYVw9LeNA1YjMaWHzHpJyrt76CztnU%2F1z%2FeOwek3ceoYC4nE6dntALNQu5oh6z%2FiJHYy\u0026from=%2Flib%2Fjquery%2F4.7.2%2Fjquery.min.js","fqdn":"bootscritp.com","domain":"bootscritp.com","tld":"com"},"ip":{"addr":"43.255.159.8","port":443,"asn":42960,"as":"VH Global Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3-bitget.net.in/","date":"2026-02-03T18:04:47.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootscritp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 08:09:00 GMT","end":"Thu, 19 Feb 2026 08:08:59 GMT"},"fingerprint":{"sha1":"15:20:69:39:22:F6:7F:63:9B:70:C0:DF:02:CE:29:40:B5:EF:7F:F6","sha256":"F8:49:94:53:15:99:22:D2:67:D5:49:4D:35:74:2F:4B:3E:52:F1:E6:60:FE:A0:7B:6E:F4:0A:2E:A4:8C:B5:EB"}}},"request":{"raw":"GET /WAF/VERIFY/CAPTCHA?info=vcRJRmXmsGIXhALboWEGiq7mG%2FodqOEILdAHGlDxMosuZoYqgSywVeXKazNCXYVw9LeNA1YjMaWHzHpJyrt76CztnU%2F1z%2FeOwek3ceoYC4nE6dntALNQu5oh6z%2FiJHYy\u0026from=%2Flib%2Fjquery%2F4.7.2%2Fjquery.min.js HTTP/1.1\r\nHost: bootscritp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://web3-bitget.net.in/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 4503\r\ndate: Tue, 03 Feb 2026 18:04:47 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4503,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1441)","md5":"856298972471775f025ca04568b5ec82","sha1":"3be6bc27296552334517f2bfa28d14c12ca26d58","sha256":"9539f025715b70526ccfe420e0991c0ad0a4df40920d4a8f03dc93ab7c0b0921","sha512":"463237cfe93d2f818f7a32a8f6ff9f37640a5649f3235be05a7996ae38818013e8f4db31ebd6eff776e9c02448406e5373263534fa9d072533e8826f9e06dbc9","ssdeep":"96:OIX8gvvKyZ1MLWn7rEcnuiC1B8BzCpkaAcqFmGXD:O88gv31VXgjUgkx7nXD","tlshash":"ee91b73b550b5a32b886d2f43baafb003e62004bd60bc845359c8a61df5ee795673fd0","first_seen":"2026-02-03T18:05:12.265179Z","last_seen":"2026-02-03T18:05:12.265179Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"bootscritp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}