{"report_id":"76536031-704b-4d2e-818b-72d379623230","version":0,"status":"done","tags":[],"date":"2026-10-09T16:30:12Z","url":{"schema":"http","addr":"zhcn-bitget.com.cn/","fqdn":"zhcn-bitget.com.cn","domain":"zhcn-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.5.96","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zhcn-bitget.com.cn/#home","fqdn":"zhcn-bitget.com.cn","domain":"zhcn-bitget.com.cn","tld":"com.cn"},"title":"bitget下载中心｜bitget交易所官方注册","dom":{"size":23480,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1141)","md5":"fc0de659e22055e39cbead31748cedef","sha1":"4f12061d16d0323faf3a85fb91a08d5cb6b4bc56","sha256":"bffd492ca303f6c518a67f6571fe5a14f5f14330d2c1c445516c35a5ccb06747","sha512":"15332f8aa64674e087c6ceea4b4183fe1419c321640b6000ec768c9b181ae3a4ac54b0d5606d4912aa5cbe0632293362b103c960231ae63a38ffdb4de6c7a687","ssdeep":"192:kKjnbBDy0xcTZWTyM4W9xVTz1p2CHKJ3zzmj1892fCSyvaKUSJsS9e8B4DJKVf5a:vLk0tlpPGe91+z7WISYyUW","tlshash":"70b2b5bb21e324a72593a0a467fb53093e21d507c80ecd587eed07889fc1ae559a374e","dom_hash":"domhash71d7ac1ee1e95cf446f1b7c1ff65c38e","first_seen":"2026-10-09T15:57:48.53331Z","last_seen":"2026-10-09T16:30:13.466659Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zhcn-bitget.com.cn/","fqdn":"zhcn-bitget.com.cn","domain":"zhcn-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.5.96","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T16:30:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"zhcn-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zhcn-bitget.com.cn","ip":{"addr":"104.21.5.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-03","domain_rank":0,"first_seen":"2026-10-09T15:57:44.578212Z","last_seen":"2026-10-09T15:57:44.578212Z","alert_count":1,"request_count":1,"received_data":24530,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zhcn-bitget.com.cn/","fqdn":"zhcn-bitget.com.cn","domain":"zhcn-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.5.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac7c782177399a9024015ef82944befe","sha1":"d87a8926c0568916f412ae5090d8ea50f6363a21","sha256":"1a11b46965a9be76e4dc6edbfb92cc2d8fff6ba0d0634688d0df7ac265056a22","sha512":"a9247a12019573833efc7c167c47aaff93b74a61c0d71898be23cd09eb433ad8d59ed2dc6679c4cd0af9159f6966cf8c3fddbf6a384b0bda63ac6903970feef1","ssdeep":"96:VE6q7Mky6zL7EcJrHiErXXS1RsriBvLoibORgHbRnYyH7h6T:VE6q7Mky6zLAcJjiErXXS1RnBvUibORp","tlshash":"2c91656e30a160b249b7607bd75f6344783200971419dd04bebe5b45afb06b61ab3bcb","size":4617,"data":"","first_seen":"2026-10-09T15:57:48.537527Z","last_seen":"2026-10-09T16:30:13.470516Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zhcn-bitget.com.cn/","fqdn":"zhcn-bitget.com.cn","domain":"zhcn-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.5.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T16:23:33.399Z","timestamp":1791563013399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zhcn-bitget.com.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 22:05:07 GMT","end":"Thu, 31 Dec 2026 22:05:06 GMT"},"fingerprint":{"sha1":"0A:27:6E:A3:64:F8:EA:40:F9:34:41:2E:57:22:C8:7F:A4:97:78:65","sha256":"CD:13:10:B1:02:92:08:E1:BF:BC:4F:DA:CF:78:A3:99:AA:94:43:44:95:38:34:EB:F2:45:EE:A9:B6:4A:78:FD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zhcn-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:23:34 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 02 Oct 2026 23:06:03 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y7I%2BjpbYMYakrINTV8BdZdkg8%2B2%2BzalK%2FxAC4%2FVz16uCKiwNTmmNDl9aLAzi94EvvFhE7mpospUPxOYKM3xgdmmkhz4rn83dqon5bAAClhpRYgCmxonw%2BezXmB7d0Tet8p4%2FToc%3D\"}]}\r\nset-cookie: server_session_7d25baa6=b14ff69379c43bb305f740a9db8e7b04; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a47ebb01ee0d35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"server_session_7d25baa6","value":"b14ff69379c43bb305f740a9db8e7b04","quoted":false,"path":"/","max_age":864000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"server_session_7d25baa6=b14ff69379c43bb305f740a9db8e7b04; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23706,"size_decoded":8787,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1181)","md5":"19578b4a8a0f9e5b321032a6489072a8","sha1":"b76dcc560be3e45cd3c44716435cb90d71b2681f","sha256":"6e40cfff5badd27a43b3829cbe8ebd2fcc7223035af3f9e5ffac025315c5c7fc","sha512":"cfbf256c9d7bbf507482b9499cc854f123669b6ab1d79c9c0e974b971ee9e5296faf4878214b9e54bcf4149c39d98df2c49969cbffc703defc8801d938b202ae","ssdeep":"192:AKjRweBDy0xcTZWTyM4W9xVTz1p2CHKJ3zzmj1892fCSyvaKUSJsS9e8B4DJKVfI:jFwV0tlpPGe91+z7WISYyUW","tlshash":"feb2c6bb21e324a72593a0a467fb53093e21e507c40ecd587eed07889fc1ae559a374e","first_seen":"2026-10-09T15:57:48.535965Z","last_seen":"2026-10-09T16:30:13.469074Z","times_seen":2,"resource_available":true,"data":null}},"time_used":727,"timings":{"blocked":0,"dns":6,"connect":21,"send":0,"wait":700,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"zhcn-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
