{"report_id":"5748ad2a-8dd3-4dfe-a835-ec2206d3e7cd","version":6,"status":"done","tags":[],"date":"2026-04-21T10:02:24Z","url":{"schema":"https","addr":"binance-compass.com/","fqdn":"binance-compass.com","domain":"binance-compass.com","tld":"com"},"ip":{"addr":"104.21.36.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"binance-compass.com/","fqdn":"binance-compass.com","domain":"binance-compass.com","tld":"com"},"title":"币安官网 | 全球领先的加密货币交易所 - 安全交易比特币、以太坊 - 币安交易所，开启你的数字资产之旅 - 低手续费、高流动性、安全第一","dom":{"size":48301,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1194)","md5":"995472bbf2125677f930d0bf96909b88","sha1":"2134d9ff2f39fc155d41feebd0c6a8878710e0ac","sha256":"ff3c8ce3e09b17da1741ef8710fadb9af95f7e42261f6b13f63c6701ef12a92f","sha512":"a0d06e824654d87ce17fe8b082db0a0b7b34f2728fae40f5b3570ae778c47bd31664b037879fcee3b397e1a95c3603fa11365bc09ebb91f072178bd471698b0b","ssdeep":"768:AYwbYCiNALcxBfLypZIAWYk0H5E3yfvdtJOmcY/er1WJJBK:AYwbb8Wk0Hi3yXdtkmcY/ehWJJBK","tlshash":"2b23946201e1b43a686bc0cdaa76a71f7655f433c45b224573ae66d48fc3edbad1320c","dom_hash":"domhash30def37ccd18604565f608494c87a385","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"binance-compass.com/","fqdn":"binance-compass.com","domain":"binance-compass.com","tld":"com"},"ip":{"addr":"104.21.36.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T10:02:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"binance-compass.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"binance-compass.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hm.baidu.com","ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-04-20T04:50:00.504523Z","alert_count":0,"request_count":1,"received_data":175,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"binance-compass.com","ip":{"addr":"104.21.36.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-04-21T10:02:24.417791Z","last_seen":"2026-04-21T10:02:24.417791Z","alert_count":8,"request_count":4,"received_data":755915,"sent_data":4116,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"binance-compass.com/","fqdn":"binance-compass.com","domain":"binance-compass.com","tld":"com"},"ip":{"addr":"104.21.36.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8b889d60b3f02d6be2433ac3c44b556","sha1":"7ce61529793917bb99059aab5a569662cba6ac74","sha256":"fcd32b7aaaf4322e86df19a6015210a82e7e155124d1a72d8771a4b6625e393a","sha512":"5f1567ab39b141ef299a3b93d4062f529019ee111be468f6506e3e0155d4a31d4cf9606f12620add78c9f01e1909bc359bf2bdc6adf467c817d771726ced1260","ssdeep":"","tlshash":"55d02b1b5c57147427a7042e13bfd44cb591544f5029c000788ce8444f50dc5082d7c8","size":274,"data":"","first_seen":"2026-04-11T11:24:32.138702Z","last_seen":"2026-04-21T10:39:47.245306Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-compass.com/","fqdn":"binance-compass.com","domain":"binance-compass.com","tld":"com"},"ip":{"addr":"104.21.36.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e30a5bef0a06a7c4ad64951e0c1c95cb","sha1":"1c3403b5b65683c9d17bba13de8d1295c10ae4f4","sha256":"9b07b16e0641750cfd2fe59c4192da3d6e7323fbbf53b8941f81857df317a676","sha512":"8a28b865f2a0daf73171396abb8cc0b4870739c3dce81c1b2a20b29435b36c8d619256158e2a24f35dea9c16a945b669d838c70da038fcc5c9de09a37a42d313","ssdeep":"","tlshash":"e8e02c1a3083003a02b344aa63b7820a25272b0bc48ecb1a7a5e859a5f28ca2068660c","size":318,"data":"","first_seen":"2026-04-11T11:24:32.141287Z","last_seen":"2026-04-21T10:39:47.246543Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-compass.com/","fqdn":"binance-compass.com","domain":"binance-compass.com","tld":"com"},"ip":{"addr":"104.21.36.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc8e07e44fdb183b818eeed8edfa3731","sha1":"53dc59d99b32b6bc3c4dac50badd277093b56851","sha256":"a018ef4b9162efb4b5e57d91b1eaffd33b74eb508b5ee115612de609af6d46e3","sha512":"903e187f8b0ad8b9cc8295e47c7ac19a40c19a1a0a9c29b07527d03d7d8eb215ddad0d55af497ab1472e56653be744e2b899b3785da0e332251c058ea2b70d92","ssdeep":"","tlshash":"dbe0680db52c409340f3395f36af96823bb1e045642a7aa161aa5ac819271b38213dae","size":358,"data":"","first_seen":"2026-04-11T11:24:32.143214Z","last_seen":"2026-04-21T10:39:47.247343Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?test_baidu_id","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-compass.com/","date":"2026-04-21T10:02:02.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?test_baidu_id HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-compass.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nDate: Tue, 21 Apr 2026 10:02:03 GMT\r\nServer: apache\r\nStrict-Transport-Security: max-age=172800\r\nContent-Type: text/plain; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T14:33:39.839425Z","times_seen":14019482,"resource_available":true,"data":null}},"time_used":1907,"timings":{"blocked":788,"dns":1,"connect":260,"send":0,"wait":325,"receive":0,"ssl":530},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-compass.com/storage/templates/Binance%20Template%202/favicon.png","fqdn":"binance-compass.com","domain":"binance-compass.com","tld":"com"},"ip":{"addr":"104.21.36.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-compass.com/","date":"2026-04-21T10:02:03.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-compass.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 08:19:58 GMT","end":"Sun, 12 Jul 2026 08:19:57 GMT"},"fingerprint":{"sha1":"29:4E:91:CB:D4:69:C1:CA:74:01:DA:7F:15:BE:BD:BF:FA:AB:30:7D","sha256":"79:6E:1D:6F:2B:01:D3:3C:FB:09:C7:AB:06:51:FC:26:B4:3D:8B:05:17:7D:5C:C2:34:04:A4:06:06:5C:39:8B"}}},"request":{"raw":"GET /storage/templates/Binance%20Template%202/favicon.png HTTP/1.1\r\nHost: binance-compass.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-compass.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkxyeVZIZGR1SXF1Si81MXpOK1hxSVE9PSIsInZhbHVlIjoiTVRXdzZVVnVzTjVJZ2UzdXRQeFBMaEYvUmp0ZnVOMW5mWTNIaHEvRUJMZTVuYXkrUFlvSy83NTFVL3hGbUtlV0M2cktGa0NqMXUwVTNNWlkrSzEyUHc4b0hTQUJ0c1g4eHRWUnROU29sR2JvV1VHNm9sR3Q3M2FxTDRFZ2JKcXIiLCJtYWMiOiJlMjhmNGMxMzJhMDE5ZjA3NDQwNzhhNGYwZGRhNDg1ZmZjOGNlODQwOTdjOWVhY2U4NDEyZTBiMzBkMTMxOGVjIiwidGFnIjoiIn0%3D; seo-system-session=eyJpdiI6IkxRa3I2UlJaUlhuMkNsb3dkWVFPZXc9PSIsInZhbHVlIjoiaFFhZWlCRkJ6WFlORzR4Q042N0RDckt4eFU1QUMzUUxHS0Vwb08raUFUT1FScHFqbFBHTjdvWlo3bXVTRjBTTXFDSTVKaXpHNE1WbzdKME9saDFDRXZScGlRTkpWRnJubEw2NXJaNldWSjVEU2JLamRzMjZlTTJqZmJFVzg1ekciLCJtYWMiOiI5N2Q5ZTJmZGI0NTRjODkwYTYwMDFlYjY0NDBkMzIzNTlkNzZkYWM5NDM5NmZkNTE3MzA3NmRlYmU4YTc4Y2I2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 10:02:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 3970\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 13 Apr 2026 16:55:15 GMT\r\netag: \"69dd1ff3-f82\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eNUuBS0h%2Bf6MT5hmMFi6qLXV7RQUVcFyO2FzkgPFZMxQD%2FideBi0%2FvSsdy%2B3OnFG8%2BWRWw5XGKwYueU6eTJIelHoh15n4OTV3iR%2FFDXM8sx4%2Fz8H6jc2VB5AdKQRsi06Icb4pgIq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb8d091d500afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3970,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"87092fed44ecb4bdf1b1a1c907dc0efd","sha1":"4b7701ca2ed33ac61b4ccb1814b2bab232bf375a","sha256":"83eef421c3682a87d0a7107f6872a1e36222cb1623ade9211b817ee2dfc0059b","sha512":"1b65544e30c7130c29b9c3078b7cfd74ef700d7af274e4238e9e4bfa4308282bb336a67c4bdf2a616d782ea5e4ae9a4c74a12bb87daf33aa434c2f20734c7ad9","ssdeep":"","tlshash":"d2815cb2d6c8db2e5a4a7906f8a879c068bcdd0d8f1b045907b8d8ef4759f4f5231514","first_seen":"2023-05-07T17:46:09Z","last_seen":"2026-04-21T10:39:47.241973Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"binance-compass.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"binance-compass.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-compass.com/","fqdn":"binance-compass.com","domain":"binance-compass.com","tld":"com"},"ip":{"addr":"104.21.36.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T10:02:02.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-compass.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 08:19:58 GMT","end":"Sun, 12 Jul 2026 08:19:57 GMT"},"fingerprint":{"sha1":"29:4E:91:CB:D4:69:C1:CA:74:01:DA:7F:15:BE:BD:BF:FA:AB:30:7D","sha256":"79:6E:1D:6F:2B:01:D3:3C:FB:09:C7:AB:06:51:FC:26:B4:3D:8B:05:17:7D:5C:C2:34:04:A4:06:06:5C:39:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: binance-compass.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 10:02:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkxyeVZIZGR1SXF1Si81MXpOK1hxSVE9PSIsInZhbHVlIjoiTVRXdzZVVnVzTjVJZ2UzdXRQeFBMaEYvUmp0ZnVOMW5mWTNIaHEvRUJMZTVuYXkrUFlvSy83NTFVL3hGbUtlV0M2cktGa0NqMXUwVTNNWlkrSzEyUHc4b0hTQUJ0c1g4eHRWUnROU29sR2JvV1VHNm9sR3Q3M2FxTDRFZ2JKcXIiLCJtYWMiOiJlMjhmNGMxMzJhMDE5ZjA3NDQwNzhhNGYwZGRhNDg1ZmZjOGNlODQwOTdjOWVhY2U4NDEyZTBiMzBkMTMxOGVjIiwidGFnIjoiIn0%3D; expires=Tue, 21 Apr 2026 12:02:02 GMT; Max-Age=7200; path=/; samesite=lax\nseo-system-session=eyJpdiI6IkxRa3I2UlJaUlhuMkNsb3dkWVFPZXc9PSIsInZhbHVlIjoiaFFhZWlCRkJ6WFlORzR4Q042N0RDckt4eFU1QUMzUUxHS0Vwb08raUFUT1FScHFqbFBHTjdvWlo3bXVTRjBTTXFDSTVKaXpHNE1WbzdKME9saDFDRXZScGlRTkpWRnJubEw2NXJaNldWSjVEU2JLamRzMjZlTTJqZmJFVzg1ekciLCJtYWMiOiI5N2Q5ZTJmZGI0NTRjODkwYTYwMDFlYjY0NDBkMzIzNTlkNzZkYWM5NDM5NmZkNTE3MzA3NmRlYmU4YTc4Y2I2IiwidGFnIjoiIn0%3D; expires=Tue, 21 Apr 2026 12:02:02 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JqmhTbC6th8fG9gcyuZbjkUN5RFrwiYGUPXXT%2Bud9AJE3948BKxWcsYJKCVna4Nzms%2FgafBaDn%2F5xEqqpzfD4KkW9VHeCBhiaRdRjJUvZqJRbew1s2BWCR9Wo00P3ovE4ZDrjDwz\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9efb8d04dc5d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48784,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1188)","md5":"7063d97fb025ccbf22a51c2eff8700ce","sha1":"286d904535403f38a3c7379f54d12a51037c0074","sha256":"848b4ea0b6da57bb90f0bebb316e836293588d56ae84a08ee2537b35d04ec2ad","sha512":"007fb80a7996354f4101c70d848b85c67828f10eb7aa0b8f348b28a23d9e10f4d0379e3c7dce4ab8f2d62bd912dab84ecf2d11bc6dc5df601b4f7c84d2f13e55","ssdeep":"768:nw1CiNALcxBfLypZIAWYk0LIECLf6xtqOB/Y/Tr1lJGBS:nwA8Wk0LZCLyxtdB/Y/ThlJGBS","tlshash":"f623a56201e1b43a686bc0cdaa76a71f7645f433c45b224573ae66d48fc7edbad0320c","first_seen":"2026-04-21T10:02:29.081203Z","last_seen":"2026-04-21T10:18:07.819701Z","times_seen":2,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":26,"dns":12,"connect":1,"send":0,"wait":189,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"binance-compass.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"binance-compass.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-compass.com/images/templates/binance-template-2/logo.png","fqdn":"binance-compass.com","domain":"binance-compass.com","tld":"com"},"ip":{"addr":"104.21.36.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-compass.com/","date":"2026-04-21T10:02:02.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-compass.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 08:19:58 GMT","end":"Sun, 12 Jul 2026 08:19:57 GMT"},"fingerprint":{"sha1":"29:4E:91:CB:D4:69:C1:CA:74:01:DA:7F:15:BE:BD:BF:FA:AB:30:7D","sha256":"79:6E:1D:6F:2B:01:D3:3C:FB:09:C7:AB:06:51:FC:26:B4:3D:8B:05:17:7D:5C:C2:34:04:A4:06:06:5C:39:8B"}}},"request":{"raw":"GET /images/templates/binance-template-2/logo.png HTTP/1.1\r\nHost: binance-compass.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-compass.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkxyeVZIZGR1SXF1Si81MXpOK1hxSVE9PSIsInZhbHVlIjoiTVRXdzZVVnVzTjVJZ2UzdXRQeFBMaEYvUmp0ZnVOMW5mWTNIaHEvRUJMZTVuYXkrUFlvSy83NTFVL3hGbUtlV0M2cktGa0NqMXUwVTNNWlkrSzEyUHc4b0hTQUJ0c1g4eHRWUnROU29sR2JvV1VHNm9sR3Q3M2FxTDRFZ2JKcXIiLCJtYWMiOiJlMjhmNGMxMzJhMDE5ZjA3NDQwNzhhNGYwZGRhNDg1ZmZjOGNlODQwOTdjOWVhY2U4NDEyZTBiMzBkMTMxOGVjIiwidGFnIjoiIn0%3D; seo-system-session=eyJpdiI6IkxRa3I2UlJaUlhuMkNsb3dkWVFPZXc9PSIsInZhbHVlIjoiaFFhZWlCRkJ6WFlORzR4Q042N0RDckt4eFU1QUMzUUxHS0Vwb08raUFUT1FScHFqbFBHTjdvWlo3bXVTRjBTTXFDSTVKaXpHNE1WbzdKME9saDFDRXZScGlRTkpWRnJubEw2NXJaNldWSjVEU2JLamRzMjZlTTJqZmJFVzg1ekciLCJtYWMiOiI5N2Q5ZTJmZGI0NTRjODkwYTYwMDFlYjY0NDBkMzIzNTlkNzZkYWM5NDM5NmZkNTE3MzA3NmRlYmU4YTc4Y2I2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 10:02:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2560\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 08 Apr 2026 01:51:03 GMT\r\netag: \"69d5b487-a00\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LqPD9cN1Y5Ck%2BAQa7%2BtwUGGSMVer6nTCANP9i26zzQdalbeKtimHwrbhmdSxSqs32%2B%2FM0V2SjhQpDl9752zSeKLksfnzm%2FqlbmexLGVo5PiOVJf36VR%2BLVKQ1fP03vpUe6qBjrkK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb8d06fd430afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-04-21T10:39:47.239404Z","times_seen":1406,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"binance-compass.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"binance-compass.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-compass.com/images/templates/binance-template-2/hero-trading.png","fqdn":"binance-compass.com","domain":"binance-compass.com","tld":"com"},"ip":{"addr":"104.21.36.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-compass.com/","date":"2026-04-21T10:02:02.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-compass.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 08:19:58 GMT","end":"Sun, 12 Jul 2026 08:19:57 GMT"},"fingerprint":{"sha1":"29:4E:91:CB:D4:69:C1:CA:74:01:DA:7F:15:BE:BD:BF:FA:AB:30:7D","sha256":"79:6E:1D:6F:2B:01:D3:3C:FB:09:C7:AB:06:51:FC:26:B4:3D:8B:05:17:7D:5C:C2:34:04:A4:06:06:5C:39:8B"}}},"request":{"raw":"GET /images/templates/binance-template-2/hero-trading.png HTTP/1.1\r\nHost: binance-compass.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-compass.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkxyeVZIZGR1SXF1Si81MXpOK1hxSVE9PSIsInZhbHVlIjoiTVRXdzZVVnVzTjVJZ2UzdXRQeFBMaEYvUmp0ZnVOMW5mWTNIaHEvRUJMZTVuYXkrUFlvSy83NTFVL3hGbUtlV0M2cktGa0NqMXUwVTNNWlkrSzEyUHc4b0hTQUJ0c1g4eHRWUnROU29sR2JvV1VHNm9sR3Q3M2FxTDRFZ2JKcXIiLCJtYWMiOiJlMjhmNGMxMzJhMDE5ZjA3NDQwNzhhNGYwZGRhNDg1ZmZjOGNlODQwOTdjOWVhY2U4NDEyZTBiMzBkMTMxOGVjIiwidGFnIjoiIn0%3D; seo-system-session=eyJpdiI6IkxRa3I2UlJaUlhuMkNsb3dkWVFPZXc9PSIsInZhbHVlIjoiaFFhZWlCRkJ6WFlORzR4Q042N0RDckt4eFU1QUMzUUxHS0Vwb08raUFUT1FScHFqbFBHTjdvWlo3bXVTRjBTTXFDSTVKaXpHNE1WbzdKME9saDFDRXZScGlRTkpWRnJubEw2NXJaNldWSjVEU2JLamRzMjZlTTJqZmJFVzg1ekciLCJtYWMiOiI5N2Q5ZTJmZGI0NTRjODkwYTYwMDFlYjY0NDBkMzIzNTlkNzZkYWM5NDM5NmZkNTE3MzA3NmRlYmU4YTc4Y2I2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 10:02:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 696944\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 17:14:53 GMT\r\netag: \"69d1470d-aa270\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wW0kc1F%2B0xsvIXlIQTw8DwAyuHgbNA%2Bm%2BzAkIRNN2Q20T%2FpoKKnic2bTrqavMzfdhFi1Jzk6rT9RamtPDPIOrnGk8zImDAk6Qp8%2BpwR5Ld%2Br7RedYdqaVShK3oQkGKyahwJN8Uyn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb8d06fd440afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":696944,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"57b4278e4eb36bd1188c3cfb45a33c4f","sha1":"40f21c12771bf870bff0699e7c6ee7f2afb19f3f","sha256":"c83efcf46d668cdf0288a602bf3e8e8d5127eb15f03f811624c87ea18503cc4f","sha512":"50655bafc8a1f04c571b63dd4238bf18d557e378e2542f3724046f71c62358aabcc078eb852ff58e1da211b6672b3e2a5b630fc8a880a24d4bbb8492212af25a","ssdeep":"12288:ijLIZRpsocblA0wFhsNwW2PD2LkR9apFbkvBIsj/eB74U9jTyyc93CnykDs8:i/IZRYmhifiRqd+Rj/eB7TgPhCykDf","tlshash":"9ae42356e3798c645932741e22f8ac239fdc096126fb972f01b6fd1284f2d8d6162f4a","first_seen":"2026-04-21T10:02:29.085611Z","last_seen":"2026-04-21T10:18:07.820781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":299,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"binance-compass.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"binance-compass.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}